From cfa9953e75ff85ad049d03d9b6b6eb17823aad54 Mon Sep 17 00:00:00 2001 From: Christoph Egger Date: Sat, 28 Mar 2015 11:29:05 +0100 Subject: [PATCH] Add demos --- demos/trace-fail.out | 31 +++++++++++++++++++++ demos/trace-fail.time | 54 +++++++++++++++++++++++++++++++++++++ demos/trace.out | 45 +++++++++++++++++++++++++++++++ demos/trace.time | 63 +++++++++++++++++++++++++++++++++++++++++++ 4 files changed, 193 insertions(+) create mode 100644 demos/trace-fail.out create mode 100644 demos/trace-fail.time create mode 100644 demos/trace.out create mode 100644 demos/trace.time diff --git a/demos/trace-fail.out b/demos/trace-fail.out new file mode 100644 index 0000000..45b2a89 --- /dev/null +++ b/demos/trace-fail.out @@ -0,0 +1,31 @@ +Script started on Sat 28 Mar 2015 11:21:51 AM CET +% ]0;christoph@mitoraj + christoph@mitoraj ~/talks/dnssec/demos +11:21 0 %  (git)-[master]-[?1h=ddrill -t T -D www.cs.fau.de[?1l> +;; Number of trusted keys: 1 +;; Domain: . +[T] . 172800 IN DNSKEY 256 3 8 ;{id = 48613 (zsk), size = 1024b} +. 172800 IN DNSKEY 256 3 8 ;{id = 16665 (zsk), size = 1024b} +. 172800 IN DNSKEY 257 3 8 ;{id = 19036 (ksk), size = 2048b} +Checking if signing key is trusted: +New key: . 172800 IN DNSKEY 256 3 8 AwEAAe3fSrbLBy3LOS7pnxEUhvPZTE2H5dIGsI/UfruI/nOEvWWa/PSX2BFedBkEqOlYdjdNF2f+6lmfk2Od/xu0v5bVqxFE+/24v3hZSlWBxvXzPTAGHrbW/IJYEPqlzVOAS4XdUgHg0N7IbLywNHMvB+Yf+Nm6ctyXXFLV4WTNnzs7 ;{id = 16665 (zsk), size = 1024b} + Trusted key: . 3600 IN DS 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 + Trusted key: . 172800 IN DNSKEY 256 3 8 AwEAAZyIkCwEYeG29NV+4cOdKE4DPng/4BqJeoOhKqzJbl+LR33TPWsrwBRfmAi9wvR/Qc6IV4MFMXjmkclXns+atIQZ9uQV3YAvKv/cVuO7MneuMssIQixaMw+jp73R7zIUNMbLBgJRQXI57Rl+pvXBAkgHndVwv+aJkf7yGEuE9Dtj ;{id = 48613 (zsk), size = 1024b} + Trusted key: . 172800 IN DNSKEY 256 3 8 AwEAAe3fSrbLBy3LOS7pnxEUhvPZTE2H5dIGsI/UfruI/nOEvWWa/PSX2BFedBkEqOlYdjdNF2f+6lmfk2Od/xu0v5bVqxFE+/24v3hZSlWBxvXzPTAGHrbW/IJYEPqlzVOAS4XdUgHg0N7IbLywNHMvB+Yf+Nm6ctyXXFLV4WTNnzs7 ;{id = 16665 (zsk), size = 1024b} +Key is now trusted! + Trusted key: . 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} +[T] de. 86400 IN DS 24220 8 2 ffe926aca67ed94089390250f1f294ac84a6d84f9121df73a79e439f42e820c2 +;; Domain: de. +[T] de. 7200 IN DNSKEY 256 3 8 ;{id = 19804 (zsk), size = 1024b} +de. 7200 IN DNSKEY 257 3 8 ;{id = 24220 (ksk), size = 2048b} +[T] Existence denied: fau.de. DS +;; No ds record for delegation +;; Domain: fau.de. +;; No DNSKEY record found for fau.de. +;; No DS for cs.fau.de.;; No ds record for delegation +[B] ;; Error verifying denial of existence for name cs.fau.de.NS: No DNSSEC signature(s) +% ]0;christoph@mitoraj + christoph@mitoraj ~/talks/dnssec/demos +11:22 1 %  (git)-[master]-[?1h= + +Script done on Sat 28 Mar 2015 11:24:10 AM CET diff --git a/demos/trace-fail.time b/demos/trace-fail.time new file mode 100644 index 0000000..2465602 --- /dev/null +++ b/demos/trace-fail.time @@ -0,0 +1,54 @@ +0.864470 134 +0.058219 24 +0.000231 104 +0.000011 29 +0.000062 7 +2.331524 1 +0.230514 3 +0.142303 1 +0.222670 1 +0.158009 1 +0.215029 1 +0.221751 1 +0.451567 1 +0.384490 3 +0.218586 1 +0.151407 1 +0.229575 1 +0.290597 1 +0.176330 1 +2.218595 1 +0.181527 1 +0.197956 1 +0.168388 1 +0.348298 1 +0.046241 1 +0.120560 1 +0.307348 1 +0.053556 1 +0.134966 1 +0.206981 1 +0.085070 1 +0.086165 1 +1.008715 7 +0.000066 3 +0.000019 3 +0.014209 30 +0.175045 14 +0.255432 190 +0.319366 388 +0.000028 527 +0.000013 425 +0.000055 97 +2.708329 16 +0.600179 128 +0.816965 66 +17.800376 20 +5.440465 39 +0.663714 55 +0.201079 90 +0.001010 134 +0.121988 24 +0.000285 138 +0.000191 7 +0.822893 6 diff --git a/demos/trace.out b/demos/trace.out new file mode 100644 index 0000000..02bd50d --- /dev/null +++ b/demos/trace.out @@ -0,0 +1,45 @@ +Script started on Sat 28 Mar 2015 11:17:03 AM CET +% ]0;christoph@mitoraj + christoph@mitoraj ~/talks/dnssec/demos +11:17 0 %  (git)-[master]-[?1h=ddrill -T -D www.siccegge.de[?1l> +;; Number of trusted keys: 1 +;; Domain: . +[T] . 172800 IN DNSKEY 257 3 8 ;{id = 19036 (ksk), size = 2048b} +. 172800 IN DNSKEY 256 3 8 ;{id = 16665 (zsk), size = 1024b} +. 172800 IN DNSKEY 256 3 8 ;{id = 48613 (zsk), size = 1024b} +Checking if signing key is trusted: +New key: . 172800 IN DNSKEY 256 3 8 AwEAAe3fSrbLBy3LOS7pnxEUhvPZTE2H5dIGsI/UfruI/nOEvWWa/PSX2BFedBkEqOlYdjdNF2f+6lmfk2Od/xu0v5bVqxFE+/24v3hZSlWBxvXzPTAGHrbW/IJYEPqlzVOAS4XdUgHg0N7IbLywNHMvB+Yf+Nm6ctyXXFLV4WTNnzs7 ;{id = 16665 (zsk), size = 1024b} + Trusted key: . 3600 IN DS 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 + Trusted key: . 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} + Trusted key: . 172800 IN DNSKEY 256 3 8 AwEAAe3fSrbLBy3LOS7pnxEUhvPZTE2H5dIGsI/UfruI/nOEvWWa/PSX2BFedBkEqOlYdjdNF2f+6lmfk2Od/xu0v5bVqxFE+/24v3hZSlWBxvXzPTAGHrbW/IJYEPqlzVOAS4XdUgHg0N7IbLywNHMvB+Yf+Nm6ctyXXFLV4WTNnzs7 ;{id = 16665 (zsk), size = 1024b} +Key is now trusted! + Trusted key: . 172800 IN DNSKEY 256 3 8 AwEAAZyIkCwEYeG29NV+4cOdKE4DPng/4BqJeoOhKqzJbl+LR33TPWsrwBRfmAi9wvR/Qc6IV4MFMXjmkclXns+atIQZ9uQV3YAvKv/cVuO7MneuMssIQixaMw+jp73R7zIUNMbLBgJRQXI57Rl+pvXBAkgHndVwv+aJkf7yGEuE9Dtj ;{id = 48613 (zsk), size = 1024b} +[T] de. 86400 IN DS 24220 8 2 ffe926aca67ed94089390250f1f294ac84a6d84f9121df73a79e439f42e820c2 +;; Domain: de. +[T] de. 7200 IN DNSKEY 257 3 8 ;{id = 24220 (ksk), size = 2048b} +de. 7200 IN DNSKEY 256 3 8 ;{id = 19804 (zsk), size = 1024b} +Checking if signing key is trusted: +New key: de. 7200 IN DNSKEY 256 3 8 AwEAAZGQY3HpREFLZ3UmbNjduEK+hgN4Hy3aOnxKsQmIaJtYdnjr80GOb+n/mREyJP/tE6UUBFJhvDKwm3MwLtB/PZlzQf0yrpbIYxVfh3WGMAdyCsRZSnLeYeUXAaIXvxAj356Jp56bY1P1yGMM4rRN6/zIBGZneJYrGvghJ30f2QmJ ;{id = 19804 (zsk), size = 1024b} + Trusted key: . 3600 IN DS 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 + Trusted key: . 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} + Trusted key: . 172800 IN DNSKEY 256 3 8 AwEAAe3fSrbLBy3LOS7pnxEUhvPZTE2H5dIGsI/UfruI/nOEvWWa/PSX2BFedBkEqOlYdjdNF2f+6lmfk2Od/xu0v5bVqxFE+/24v3hZSlWBxvXzPTAGHrbW/IJYEPqlzVOAS4XdUgHg0N7IbLywNHMvB+Yf+Nm6ctyXXFLV4WTNnzs7 ;{id = 16665 (zsk), size = 1024b} + Trusted key: . 172800 IN DNSKEY 256 3 8 AwEAAZyIkCwEYeG29NV+4cOdKE4DPng/4BqJeoOhKqzJbl+LR33TPWsrwBRfmAi9wvR/Qc6IV4MFMXjmkclXns+atIQZ9uQV3YAvKv/cVuO7MneuMssIQixaMw+jp73R7zIUNMbLBgJRQXI57Rl+pvXBAkgHndVwv+aJkf7yGEuE9Dtj ;{id = 48613 (zsk), size = 1024b} + Trusted key: de. 7200 IN DNSKEY 257 3 8 AwEAAYbcKo2IA8l6arSIiSC+l97v2vgNXrxjBJK+XkX5FYMPDfr2QgtUMHfjLPfMKiSxEXT0uL+SucI1ohv5I0C/pgz9e9NFDhMCpHLPA5s9LIzQMHEs7Y+idlsRnBKe9Kw/B1RxzSZKxMd8UyAeA6j0vlZIKrokc1nr4ouvDhoYR3JDd7vCcvV08EIuaPgL0ijUYk071OOjRFG+waRZnVPAwFZsgDIgBJqDl/nRVRBI8k3YFVPka6Rls/EIDYloqG+X5VZC/VXbBb7fams8misz3MsLeVy/fiH0j8SJMAZSbQxqo+/zWUJogl4Tyb5TbT1LRTfbyxII2zQ/ATXocWOohSU= ;{id = 24220 (ksk), size = 2048b} + Trusted key: de. 7200 IN DNSKEY 256 3 8 AwEAAZGQY3HpREFLZ3UmbNjduEK+hgN4Hy3aOnxKsQmIaJtYdnjr80GOb+n/mREyJP/tE6UUBFJhvDKwm3MwLtB/PZlzQf0yrpbIYxVfh3WGMAdyCsRZSnLeYeUXAaIXvxAj356Jp56bY1P1yGMM4rRN6/zIBGZneJYrGvghJ30f2QmJ ;{id = 19804 (zsk), size = 1024b} +Key is now trusted! +[T] siccegge.de. 86400 IN DS 33730 8 2 a1ced5304dc66cb33d0aa778a4cc10d1e1bd4b8ea56b065588b4e54179c4a471 +;; Domain: siccegge.de. +[T] siccegge.de. 86400 IN DNSKEY 257 3 8 ;{id = 33730 (ksk), size = 2048b} +siccegge.de. 86400 IN DNSKEY 256 3 8 ;{id = 65235 (zsk), size = 1024b} +siccegge.de. 86400 IN DNSKEY 256 3 8 ;{id = 60181 (zsk), size = 1024b} +[T] Existence denied: www.siccegge.de. DS +;; No ds record for delegation +;; Domain: www.siccegge.de. +;; No DNSKEY record found for www.siccegge.de. +[T] www.siccegge.de. 43200 IN A 185.26.124.36 +;;[S] self sig OK; [B] bogus; [T] trusted +% ]0;christoph@mitoraj + christoph@mitoraj ~/talks/dnssec/demos +11:17 0 %  (git)-[master]-[?1h= + +Script done on Sat 28 Mar 2015 11:17:44 AM CET diff --git a/demos/trace.time b/demos/trace.time new file mode 100644 index 0000000..6ab4462 --- /dev/null +++ b/demos/trace.time @@ -0,0 +1,63 @@ +1.187398 134 +0.069050 24 +0.000337 104 +0.000014 29 +0.000083 7 +1.204334 1 +0.526240 3 +0.199028 1 +0.230582 1 +0.165970 1 +0.222973 1 +0.213450 1 +0.307300 1 +0.191671 1 +0.437003 1 +0.546520 1 +0.367922 1 +0.994675 1 +0.165957 1 +0.174009 1 +0.185105 1 +0.323076 1 +0.127798 1 +0.156371 1 +0.286183 1 +0.095159 1 +0.253442 1 +0.245530 1 +0.062567 1 +0.254978 1 +0.132617 1 +0.062407 1 +0.384320 10 +0.000037 3 +0.016999 30 +0.406714 14 +0.202925 190 +0.363639 388 +0.000045 425 +0.000022 274 +0.000033 253 +0.000075 97 +23.903429 16 +0.192004 128 +0.167776 388 +0.000049 678 +0.000060 253 +0.000017 425 +0.000082 274 +0.000089 106 +3.189962 25 +0.296171 220 +0.615763 75 +0.223961 29 +0.153881 48 +0.165507 90 +0.000621 134 +0.100250 24 +0.000224 104 +0.000025 29 +0.000148 7 +1.407326 3 +0.000025 3 -- 2.39.2