feat: add endpoints to test trust anchor

ooni · Nov 25, 2024 · f290ef6 · f290ef6
1 parent e3fe0ef
commit f290ef6
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 1 deletion.
diff --git a/internal/experiment/dnscheck/dnscheck.go b/internal/experiment/dnscheck/dnscheck.go
@@ -166,7 +166,7 @@ func (m *Measurer) Run(ctx context.Context, args *model.ExperimentArgs) error {
 		return fmt.Errorf("%w: %s", ErrInvalidURL, err.Error())
 	}
 	switch URL.Scheme {
-	case "https", "dot", "udp", "tcp":
+	case "https", "dot", "udp", "tcp", "system":
 		// all good
 	default:
 		return ErrUnsupportedURLScheme

diff --git a/internal/experiment/dnscheck/richerinput.go b/internal/experiment/dnscheck/richerinput.go
@@ -194,6 +194,27 @@ var defaultInput = []model.ExperimentTarget{
 		URL:    "https://dns.switch.ch/dns-query",
 		Config: &Config{},
 	},
+	&Target{
+		URL:    "https://root-key-sentinel-is-ta-38696.d2a8n3.rootcanary.net",
+		Config: &Config{},
+	},
+	&Target{
+		URL:    "https://root-key-sentinel-not-ta-38696.d2a8n3.rootcanary.net",
+		Config: &Config{},
+	},
+	&Target{
+		URL:    "https://root-key-sentinel-not-ta-20326.d2a8n3.rootcanary.net",
+		Config: &Config{},
+	},
+
+	&Target{
+		URL:    "https://root-key-sentinel-is-ta-20326.d2a8n3.rootcanary.net",
+		Config: &Config{},
+	},
+	&Target{
+		URL:    "https://bogus.d2a8n1.rootcanary.net",
+		Config: &Config{},
+	},
 }
 
 // extendedInput is an extended input target list for dnscheck.