From wouter at nlnetlabs.nl Mon Jan 2 09:16:52 2017 From: wouter at nlnetlabs.nl (W.C.A. Wijngaards) Date: Mon, 2 Jan 2017 10:16:52 +0100 Subject: [Dnssec-trigger] [NLnet Labs Maintainers] dnssec-trigger 0.13 In-Reply-To: <1482404213.1896454.826821249.31E1E5A7@webmail.messagingengine.com> References: <816ba201-dc9b-a73e-fece-10f70d2a6df8@nlnetlabs.nl> <1482404213.1896454.826821249.31E1E5A7@webmail.messagingengine.com> Message-ID: <035db470-817f-584a-014f-a1a6e64415c5@nlnetlabs.nl> Hi Ond?ej, SSLv2 removal is fine, and does not seem to give issues, so I'm not removing that (that code looks the same as unbound, which does not have that issue). It is a no-op to remove it under openssl 1.1.0, but that is fine too. So that does not require a patch, because the code carefully tries to exclude SSLv2, not include it. I have git update scripts for NSD and Unbound, but not for dnssec-trigger, because I didn't put it there. And I think if I try it'll break, because of different export settings. Best regards, Wouter On 22/12/16 11:56, Ond?ej Sur? wrote: > Wouter, > > dnssec-trigger 0.13 still tries to use SSL_OP_NO_SSLv2, so I made a PR > on github dnssec-trigger toghether with other patches that I have in > Debian (reworking those to be universally useful). > > And I have just noticed that dnssec-trigger github copy is out of date. > So please: > > 1) update it to latest svn copy > 2) setup a trigger to push the svn automatically (or for the love of all > pagan gods, just switch to git already :) > 3) ping me, and I'll update the PR to latest master > > Or you can cherry-pick individual patches (apart from the HMAC_CTX_* > stuff I guess they all should apply) and then push the up-to-date git > copy. > > Thanks, > -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: OpenPGP digital signature URL: From ales at homemade.net Fri Jan 13 15:02:45 2017 From: ales at homemade.net (Ales Casar) Date: Fri, 13 Jan 2017 16:02:45 +0100 (CET) Subject: [Dnssec-trigger] libgcc_s_sjlj-1.dll Message-ID: Hello! I have tried to install dnssec-trigger 0.13 on Windows Vista x64. Unfortunately with no success. Many (all?) .exe binaries crashed during setup without any useful message. After some research of EventLog and manual testing I think the problem is in missing libgcc_s_sjlj-1.dll library. Then I've tried the same manual tests also with previous version of dnssec-trigger 0.12, and there was no such problems. Did perhaps maintainer of dnssec-trigger windows packages forgot to include libgcc_s_sjlj-1.dll library into the package? Or should I install some dependency before? If yes, which one? Or something completely different? Best regards, Ales -- Ales Casar, ales at homemade.net From wouter at nlnetlabs.nl Fri Jan 13 17:47:48 2017 From: wouter at nlnetlabs.nl (W.C.A. Wijngaards) Date: Fri, 13 Jan 2017 18:47:48 +0100 Subject: [Dnssec-trigger] libgcc_s_sjlj-1.dll In-Reply-To: References: Message-ID: <587912C4.80301@nlnetlabs.nl> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi Ales, On 13/01/17 16:02, Ales Casar wrote: > Hello! > > I have tried to install dnssec-trigger 0.13 on Windows Vista x64. > Unfortunately with no success. Many (all?) .exe binaries crashed > during setup without any useful message. After some research of > EventLog and manual testing I think the problem is in missing > libgcc_s_sjlj-1.dll library. Then I've tried the same manual tests > also with previous version of dnssec-trigger 0.12, and there was no > such problems. > > Did perhaps maintainer of dnssec-trigger windows packages forgot > to include libgcc_s_sjlj-1.dll library into the package? Or should > I install some dependency before? If yes, which one? Or something > completely different? Yes the dependencies seem to have changed between the versions, here is a link to the package with the dll you refer to and libwinpthread-1.dll. www.nlnetlabs.nl/~wouter/dnssec_trigger_setup_0.14_20170106_2.exe Best regards, Wouter > > Best regards, Ales > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJYeRK5AAoJEJ9vHC1+BF+NXbsQAJIGsQKJKmsF7RpEy+bXs1tK T9x1dKizIMUgpOKclRT9SsNlkEEQfQDmnbuiFMC87MUZ2juOytDFGDlEoDUonU7r IPdu8hHBpV5RScGcoz7AfBlo25V7fLEZMqKHvfcqhlkThCWSO2E1T7zE23zJ9ZZD rAmkBPNtfZInKzIRLHzS+MQZjN3aR2zmwU6D0q1MKdu1a9pBGbePJIIwxMdIapt6 jN2L+njBhWz2fz9bOlbDMyy0uoJEF57UvKlL5qTTw5VLj7os2nrmR4U4oaMnXJfz ty/ZtXvBONeiLLMG/IbX7Zdwfyn+BOkYSL+Vz5UwCJ2e7EO/HNpQlBdydAYXz4Yt D9Y5w7Fx86W1ELq2/Wb5uHjOgj/xtIrKU5/Vc50B40bIJjamNobyL9Ltl9P8kQFA AM3Kca/sI6Tmw4ozfda/yB2BG1Jk7VirUwoDoLO3gsZDOCX4HB8Eez6u6qWuMmAb /eMg8jtliLyd6oUWt7TdY3yUDyJFeAoXCOBwmzDp4w9X6mPWgy6g0aSrpgVIfqlC ac3844g7JVpcOfE28PcxUXjui/hOYU+i6J2hp1y9rpt2i7cY+67Q4F9T8atjeDLv blw1Bmo95Adsd6xskOI4tbonXawF5wOGAln7Z1xmunB2h24jEMrYgaIg/R6XTAET OY5rpPS4fffOQhbfploB =+cod -----END PGP SIGNATURE----- From ales at homemade.net Sat Jan 14 09:37:48 2017 From: ales at homemade.net (Ales Casar) Date: Sat, 14 Jan 2017 10:37:48 +0100 (CET) Subject: [Dnssec-trigger] libgcc_s_sjlj-1.dll In-Reply-To: <587912C4.80301@nlnetlabs.nl> References: <587912C4.80301@nlnetlabs.nl> Message-ID: On Fri, 13 Jan 2017, W.C.A. Wijngaards wrote: > Yes the dependencies seem to have changed between the versions, here > is a link to the package with the dll you refer to and > libwinpthread-1.dll. > > www.nlnetlabs.nl/~wouter/dnssec_trigger_setup_0.14_20170106_2.exe I tried this one and during installation there were again several crashes due to missing the same library libgcc_s_sjlj-1.dll. Nevertheless at the end everything looked like installed, both services unbound and dnssec-trigger were running and working. Still, I am observing that resolvers obtained via DHCP are continuously being added and removed to/from unbound forwarders every few minutes. Not sure if this is related to those crashes during installation. Maybe they are added with DHCP renew (both IPv6 and IPv4 resolvers are added even if renew happened only in one of these protocols), but I'm not sure. I have no idea when and why they are disappearing. If I want to reconfigure Unbound, included in dnssec-trigger on Windows, what is the correct way? Namely, I would like to disable some of the local empty zones. Best regards, Ales -- Ales Casar, ales at homemade.net