<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p>Hello,</p>
<p><br>
</p>
<p>I have an issue with cname since this patch : <a href="https://github.com/NLnetLabs/unbound/commit/2be0263dfa72f314c4cb61599f1ec7e90784da9c" class="OWAAutoLink" id="LPlnk465441" previewremoved="true">
https://github.com/NLnetLabs/unbound/commit/2be0263dfa72f314c4cb61599f1ec7e90784da9c</a><br>
</p>
<p><br>
</p>
<p></p>
<div>I'm using unbound 1.7.3 with <b><span>qname-minimisation: yes </span></b><span>and the problem only occurs if i ask for a CNAME on a domain having DNSSEC activated. Most of the time i get a SERVFAIL. <br>
</span></div>
<div><span><br>
</span></div>
<p><span>--- Example ---<br>
</span></p>
<div>~ # dig cname pcs-cname.eyof.ovh<br>
<br>
; <<>> DiG 9.10.3-P4-Debian <<>> cname pcs-cname.eyof.ovh<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 28362<br>
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1<br>
<br>
;; OPT PSEUDOSECTION:<br>
; EDNS: version: 0, flags:; udp: 4096<br>
;; QUESTION SECTION:<br>
;pcs-cname.eyof.ovh. IN CNAME<br>
<br>
;; Query time: 770 msec<br>
;; SERVER: 213.186.33.99#53(213.186.33.99)<br>
;; WHEN: Mon Aug 13 17:50:32 CEST 2018<br>
;; MSG SIZE rcvd: 47<br>
---<br>
</div>
<br>
<p></p>
<p></p>
<div><span>it works only if <br>
</span></div>
<span> - domain has NOT DNSEC activated.</span>
<p></p>
<p><span> - you ask for A instead of CNAME.<br>
</span></p>
<p><br>
<span></span></p>
<p>I finally recompiled a version of unbound 1.7.3 without this patch and i have no more problem.</p>
<p><br>
</p>
<p>Are you aware of this issue ? is there an other way to correct this problem ? Thanks.<br>
</p>
<p><br>
</p>
<p>Best Regards<br>
</p>
<div id="Signature">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, Arial, Helvetica, sans-serif, "EmojiFont", "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols;">
<p>--</p>
<p>Alex<br>
</p>
</div>
</div>
</div>
</body>
</html>