[Dnssec-trigger] dnssec trigger 0.4 release

W.C.A. Wijngaards wouter at NLnetLabs.nl
Sat Sep 24 08:47:37 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Stephane,

make uninstall makes resolv.conf writeable again, perhaps this is where
NetworkManager snuck in the write?

Best regards,
   Wouter

On 09/23/2011 09:34 PM, Stephane Bortzmeyer wrote:
> On Fri, Sep 23, 2011 at 10:28:57AM +0200,
>  W.C.A. Wijngaards <wouter at NLnetLabs.nl> wrote 
>  a message of 78 lines which said:
> 
>> http://www.nlnetlabs.nl/~wouter/dnssec-trigger-0.4.tar.gz
> 
> It no longer works on my Ubuntu Oneiric Ocelot (Beta, updated today).
> dnssec-trigger-control status reports properly:
> 
> % dnssec-trigger-control status                         
> at 2011-09-23 21:31:30
> cache 212.27.40.240: OK 
> cache 212.27.40.241: error no EDNS
> state: cache secure
> 
> But resolv.conf is the one from NetworkManager, it does not point
> towards the local Unbound:
> 
> # Generated by NetworkManager
> nameserver 212.27.40.241
> nameserver 212.27.40.240
> nameserver 2a01:e00::2
> # NOTE: the libc resolver may not support more than 3 nameservers.
> # The nameservers listed below may not be recognized.
> nameserver 2a01:e00::1
> 
> As a result, I no longer get my AD bit (since Free Telecom's name
> servers do not validate).

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.15 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/
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=c9I5
-----END PGP SIGNATURE-----



More information about the dnssec-trigger mailing list