[ldns-users] drill doesn't validate NSEC3 nxdomain?

Hugo Salgado hsalgado at nic.cl
Tue Sep 14 16:54:06 UTC 2010


Great, thanks Wouter. Now it's working!

Regards,

Hugo

On 09/14/2010 06:41 AM, W.C.A. Wijngaards wrote:
> Hi Hugo,
> 
> On 08/31/2010 09:41 PM, Hugo Salgado wrote:
>> I want to use "drill -k" to validate correctness of a nsec3
>> chain signature, for a nxdomain response.
>> But when I try to validate non-existence:
>>  % drill -D -k ORG.KSK @a0.org.afilias-nst.info. ds aaaaietf.org.
>>  [ ... ]
>>  ; Bad data; RR for name and type not found or failed to verify, and
>> denial of existence failed.
>> I'm using drill version 1.6.6 (ldns version 1.6.6).
> 
> Fixed in svn trunk r3341.
> 
> Best regards,
>    Wouter




More information about the ldns-users mailing list