Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

unbound-checkconf fatal error: module conf 'respip dns64 validator iterator' is not known to work #598

Closed
mgraves00 opened this issue Jan 5, 2022 · 1 comment

Comments

@mgraves00
Copy link

Describe the bug
When running unbound-checkconf the following error is received.

[1641393252] unbound-checkconf[45905:0] fatal error: module conf 'respip dns64 validator iterator' is not known to work

However when running the server it runs just fine. Checking similar issue #192 it appears that the process is to open and issue and report that it's working.

To reproduce
Steps to reproduce the behavior:

  1. add 'module-config: "respip dns64 validator iterator"' to config
  2. run 'unbound-checkconf'

Expected behavior
unbound-checkconf does not report any error.

System:

  • Unbound version: 1.13.2
  • OS: openbsd 7.0
  • unbound -V output:
    pons# unbound -V
    Version 1.13.2

Configure line: --enable-allsymbols --with-ssl=/usr --with-libevent=/usr --with-libexpat=/usr --without-pythonmodule --with-chroot-dir=/var/unbound --with-pidfile= --with-rootkey-file=/var/unbound/db/root.key --with-conf-file=/var/unbound/etc/unbound.conf --with-username=_unbound --disable-shared --disable-explicit-port-randomisation --without-pthreads
Linked libs: pluggable-libevent 1.4.15-stable (it uses kqueue), LibreSSL 3.4.1
Linked modules: dns64 respip validator iterator

BSD licensed, see LICENSE in source package for details.
Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues

@wcawijngaards
Copy link
Member

Thanks for the report, I did not know that this combination works. It is added to the list of available combinations that unbound-checkconf allows for.

@wcawijngaards wcawijngaards changed the title [1641393252] unbound-checkconf[45905:0] fatal error: module conf 'respip dns64 validator iterator' is not known to work unbound-checkconf fatal error: module conf 'respip dns64 validator iterator' is not known to work Jan 5, 2022
jedisct1 added a commit to jedisct1/unbound that referenced this issue Jan 13, 2022
* nlnet/master:
  - Fix prematurely terminated TCP queries when a reply has the same ID.
  Changelog note for NLnetLabs#600 - Merge NLnetLabs#600 from pemensik: Change file mode before changing file   owner.
  Change file mode before changing file owner
  Update documentation links
  - Fix for NLnetLabs#596: Fix rpz-signal-nxdomain-ra to work for clientip   triggered operation.
  - Fix NLnetLabs#598: Fix unbound-checkconf fatal error: module conf   'respip dns64 validator iterator' is not known to work.
  - Fix for NLnetLabs#596: add unit test for nsip trigger and signal unset RA.
  - Fix for NLnetLabs#596: add unit test for nsdname trigger and signal unset RA.
  - Fix unit tests for rpz now that the AA flag returns successfully from   the iterator loop.
  - Fix for NLnetLabs#596: fix that rpz return message is returned and not just   the rcode from the iterator return path. This fixes signal unset RA   after a CNAME.
  - Fix that RPZ does not set RD flag on replies, it should be copied   from the query.
  - Fix NLnetLabs#596: only unset RA when NXDOMAIN is signalled.
  - Fix to add test for rpz-signal-nxdomain-ra.
  - Fix NLnetLabs#596: unset the RA bit when a query is blocked by an unbound   RPZ nxdomain reply. The option rpz-signal-nxdomain-ra allows to   signal that a domain is externally blocked to clients when it   is blocked with NXDOMAIN by unsetting RA.
  - contrib/aaaa-filter-iterator.patch file renewed diff content to   apply cleanly to the current coderepo for the current code version.
  - Fix NLnetLabs#591: Unbound-anchor manpage links to non-existent license file.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants