goresolver
goresolver copied to clipboard
peterzen
DNSSEC validating resolver library
Tests that rely on valid `RRSIG`s currently fail as the signatures in some of the zone files have expired, breaking validation tests. Ideally, the `RRSIG`s used in the test cases...
I can't find any references to the root zone being checked. Typically the signature of the root zone is validated with a trust anchor (e.g.: in `/usr/share/dnssec-root/trusted-key.key`). By not validating...
## Summary - add a `nowFunc` variable so tests can set the current time - override `nowFunc` in tests so archived DNS fixtures remain valid ## Testing - `go test...