[Dnssec-trigger] dnssec trigger snapshot 0.8 SSL test
Matthijs Mekking
matthijs at NLnetLabs.nl
Tue Nov 15 15:29:24 UTC 2011
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi Jan-Piet,
Unfortunately, Wouter is taking days off, so it is unsure if he will
read this before you will check out again.
I would recommend to let dnssec-triggerd run with verbosity level 4 or 5
(highest setting) and send the logfile to me + Wouter. Both can be
configured in the configuration file.
Best regards,
Matthijs
On 11/15/2011 03:30 PM, Jan-Piet Mens wrote:
> Hello Wouter,
>
>> There is a snapshot of 0.8 available.
>
> I've just checked into a hotel and have installed this snapshot, with
> the following results:
>
> $ dig +short rs.dns-oarc.net txt
> rst.x476.rs.dns-oarc.net.
> rst.x485.x476.rs.dns-oarc.net.
> rst.x490.x485.x476.rs.dns-oarc.net.
> "62.253.172.149 DNS reply size limit is at least 490"
> "62.253.172.149 lacks EDNS, defaults to 512"
> "Tested at 2011-11-15 14:19:23 UTC"
>
> $ sudo /usr/sbin/dnssec-trigger-control status
> at 2011-11-15 15:26:15
> authority 192.58.128.30: error no RRSIGs in reply
> cache 194.168.4.123: error no RRSIGs in reply
> cache 194.168.8.123: error no RRSIGs in reply
> state: nodnssec insecure
>
> $ cat /etc/resolv.conf
> domain GUEST
> search intern
> nameserver 194.168.8.123
> nameserver 194.168.4.123
>
> No DNSSEC for my Mac :-(
>
> I'll be here until early Thursday, and I'm willing to test, so just tell
> me what I should do ;-)
>
> Regards,
>
> -JP
> _______________________________________________
> dnssec-trigger mailing list
> dnssec-trigger at NLnetLabs.nl
> http://open.nlnetlabs.nl/mailman/listinfo/dnssec-trigger
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iQEcBAEBAgAGBQJOwoVUAAoJEA8yVCPsQCW50AQIAK3/rTbPbCXqFdThsmyBif+R
cQSDpzkkxUiUgUoui91h3TDu6I+Q56l8EW/WZuw1G3hxER1hAnv7s+l7qv87DYnZ
1H/fYwrvWoAgyL9VGxk9JwqONyc5tXgxwnQVV1gsC8EiVThERvsNuPUC2mcZD911
FaGjFy5oeCEh0uPFUgL0mDPdRacDnUPd3p4Mmm58S1zYWahNZOnJ9zFj+0a79yJ7
YkirvvHVvKcHQtPQl3gEbyWXn2oXIq/Lzbav2MnIbMLEpsYuBig7L8S3E01r0r7C
XS7hhz5netpP1hxmHN4DSenzfUFc9rZqyEP8AZpOZTHxFxK20sc8IgHHbwPW4mE=
=S7SK
-----END PGP SIGNATURE-----
More information about the dnssec-trigger
mailing list