In step 6.2 in the test procedure in the DNSSEC10 test case specification some addresses are silently "discarded" from testing (no response, wrong RCODE or not AA), but they are not removed from the NS IP list. That means that step 44 will output DS10_EXPECTED_NSEC_NSEC3_MISSING for discarded addresses, but that does not feel correct.
To correct this a small update in the specification is needed, besides a small update in the implementation.
In step 6.2 in the test procedure in the DNSSEC10 test case specification some addresses are silently "discarded" from testing (no response, wrong RCODE or not AA), but they are not removed from the NS IP list. That means that step 44 will output DS10_EXPECTED_NSEC_NSEC3_MISSING for discarded addresses, but that does not feel correct.
To correct this a small update in the specification is needed, besides a small update in the implementation.