Re: can I provide invalid HTTPS values for testing?

2024-06-25 Thread Stephane Bortzmeyer
On Thu, Jun 20, 2024 at 02:29:13PM +0100, Stephen Farrell wrote a message of 100 lines which said: > Actually, it may well be that bind allows me sufficient leeway to do > most of the tests I want, so this is just to check that there's no > imminent plan to have bind disallow the kind of rubbi

Re: can I provide invalid HTTPS values for testing?

2024-06-20 Thread Stephen Farrell
Hiya, On 20/06/2024 14:34, Ondřej Surý wrote: Stephen, you actually gave me an idea - you should use BIND version without HTTPS record support and just convert the records to TYPExxx form. That way, there will be no parser standing in your way and you can put all kind of rubbish to the zone.

Re: can I provide invalid HTTPS values for testing?

2024-06-20 Thread Ondřej Surý
Stephen, you actually gave me an idea - you should use BIND version without HTTPS record support and just convert the records to TYPExxx form. That way, there will be no parser standing in your way and you can put all kind of rubbish to the zone. P.S.: Why am I even helping you when the eduroam

Re: can I provide invalid HTTPS values for testing?

2024-06-20 Thread Stephen Farrell
Hi again, Actually, it may well be that bind allows me sufficient leeway to do most of the tests I want, so this is just to check that there's no imminent plan to have bind disallow the kind of rubbish HTTPS RRs below. If that's not likely to change in the next few months, then I'd say I'm fine.

Re: can I provide invalid HTTPS values for testing?

2024-06-20 Thread Stephen Farrell
Hiya, Thanks all for the info/suggestions. I guess I'll have to try what Ondřej suggests or something similar, and that's ok. Cheers, S. OpenPGP_0xE4D8E9F997A833DD.asc Description: OpenPGP public key OpenPGP_signature.asc Description: OpenPGP digital signature -- Visit https://lists.isc.or

Re: can I provide invalid HTTPS values for testing?

2024-06-20 Thread Mark Andrews
> On 20 Jun 2024, at 15:29, Michael Richardson wrote: > > > Mark Andrews wrote: >> Named and nsupdate validate input for types they know about (both text >> and wire). You would have to use versions that are not HTTPS aware and >> use unknown type format. > > So, he could code it in Perl or

Re: can I provide invalid HTTPS values for testing?

2024-06-19 Thread Michael Richardson
Mark Andrews wrote: > Named and nsupdate validate input for types they know about (both text > and wire). You would have to use versions that are not HTTPS aware and > use unknown type format. So, he could code it in Perl or Python or something which had a dynamic DNS library. Bind

Re: can I provide invalid HTTPS values for testing?

2024-06-19 Thread Ondřej Surý
Stephen, I would suggest to write a specialized DNS server using dnspython rather than trying to cram the crap into existing DNS servers. Then it should be possible to use something like this: https://hypothesis.readthedocs.io/en/latest/ to generate the test cases automatically. Cheers, -- On

Re: can I provide invalid HTTPS values for testing?

2024-06-19 Thread Mark Andrews
Named and nsupdate validate input for types they know about (both text and wire). You would have to use versions that are not HTTPS aware and use unknown type format. Mark > On 20 Jun 2024, at 11:39, Stephen Farrell wrote: > > > Hiya, > > Apologies if this is a repeat, I spent a bit of time l

can I provide invalid HTTPS values for testing?

2024-06-19 Thread Stephen Farrell
Hiya, Apologies if this is a repeat, I spent a bit of time looking but didn't find stuff... I'd like to publish various HTTPS RRs with dodgy encodings in order to test which clients handle things well or badly. Were it possible to use nsupdate for that, that'd make my life simpler, but I've no