-
Notifications
You must be signed in to change notification settings - Fork 15
nsec3 issue with sgkb.ch #19
Comments
dig +dnssec +trace mx sgkb.ch shows more on the NSEC3 level... |
Can you please add the output of dig with the +trace flag? I probably won't be able to work in it this week and things might change in the meantime. A full packet capture to add a unit test would also be helpful. Which version of dnssecjava are you using? |
Using the 2018 version
As a non-expert here, what do you recommend to install |
https://packages.debian.org/buster/unbound Then use localhost as your nameserver. I currently don't know which files/options need to be set to get debug output, please refer to the manual. |
And please use dnssecjava 1.2.0. It contains fixes for some CVEs and there was also an issue with stub NS records that has been fixed. You might encounter just that. |
just got today's head from git and still get:
|
Seems that dnsjava-2.1.8.jar (Oct 2018) creates
|
dnsjava 2.1.8 is also outdated, current version is 2.1.9 which fixes dnsjava/dnsjava#17 (among others). dnssecjava 1.2.0 contains the fix for what you experienced (PR #18). |
sgkb.ch's mail is operated (like many others such as tkb.ch) by swisscom and all worked fine till Aug 2, 2019
Now we get
Any hint who made an/the error would be useful ?
The text was updated successfully, but these errors were encountered: