[Unbound-users] Is it just me?

Jan Komissar (jkomissa) jkomissa at cisco.com
Fri Mar 18 19:46:05 UTC 2011

It gets better:

Any uppercase in ianawww is ok and returns an RRSIG.

Any uppercase in vip.icann.org is not and does NOT return an RRSIG.

Both cases return an A record.


-----Original Message-----
From: unbound-users-bounces at NLnetLabs.nl
[mailto:unbound-users-bounces at NLnetLabs.nl] On Behalf Of Marco Davids
Sent: Friday, March 18, 2011 3:24 PM
To: unbound-users at unbound.net
Subject: Re: [Unbound-users] Is it just me?

Op 18-03-11 19:22, Marco Davids (SIDN) schreef:

> I use Unbound 1.4.8 and get this:
> Mar 18 19:07:41 xs unbound: [17639:0] info: validation failure
> <www.iana.org. A IN>: No DNSKEY record for key vip.icann.org. while
> building chain of trust

Mmm... seems 0x20 related...

dig +dnssec ianawww.vip.icann.ORG @gtm1.lax.icann.org.

no RRSIGs!

dig +dnssec ianawww.vip.icann.ORG @gtm1.lax.icann.org.

(all lowercase)

does return an RRSIG.

Unbound-users mailing list
Unbound-users at unbound.net

More information about the Unbound-users mailing list