[ldns-users] drill doesn't validate NSEC3 nxdomain?
Hugo Salgado
hsalgado at nic.cl
Tue Sep 14 16:54:06 UTC 2010
Great, thanks Wouter. Now it's working!
Regards,
Hugo
On 09/14/2010 06:41 AM, W.C.A. Wijngaards wrote:
> Hi Hugo,
>
> On 08/31/2010 09:41 PM, Hugo Salgado wrote:
>> I want to use "drill -k" to validate correctness of a nsec3
>> chain signature, for a nxdomain response.
>> But when I try to validate non-existence:
>> % drill -D -k ORG.KSK @a0.org.afilias-nst.info. ds aaaaietf.org.
>> [ ... ]
>> ; Bad data; RR for name and type not found or failed to verify, and
>> denial of existence failed.
>> I'm using drill version 1.6.6 (ldns version 1.6.6).
>
> Fixed in svn trunk r3341.
>
> Best regards,
> Wouter
More information about the ldns-users
mailing list