host: couldn't get address for '+noidnout': not found

[andy-igoshin]

getssl: domain.com - rsa certificate obtained but certificate on server is different from the new certificate
host: couldn't get address for '+noidnout': not found
Usage:
nslookup [-opt ...] # interactive mode using default server
nslookup [-opt ...] - server # interactive mode using 'server'
nslookup [-opt ...] host # just look up 'host' using default server
nslookup [-opt ...] host server # just look up 'host' using 'server'
Usage:
nslookup [-opt ...] # interactive mode using default server
nslookup [-opt ...] - server # interactive mode using 'server'
nslookup [-opt ...] host # just look up 'host' using default server
nslookup [-opt ...] host server # just look up 'host' using 'server'

To Reproduce
getssl domain.com

Operating system (please complete the following information):

• OS: Ubuntu 20.04.2
• GNU bash, version 5.0.17(1)-release (x86_64-pc-linux-gnu)
• getssl V2.37
• bind9 1:9.16.1-0ubuntu2.8

[timkimber]

@andy-igoshin

Thanks for reporting this - obviously a code path not tested in the automated tests. I'll reproduce and fix asap!

[webservicebe]

I had the same problem, it' because SANS-domains insert an extra +noidnout.
Fixed it with the following patch, this also excludes host/nslookup-test if dig already found the ip:

538c538
<     if [[ ("${d}" == xn--* || "${d}" == *".xn--"*) && ! $DNS_CHECK_OPTIONS =~ "noidnout" ]]; then
---
>     if [[ "${d}" == xn--* || "${d}" == *".xn--"* ]]; then
697c697
<       if [[ ("${d}" == xn--* || "${d}" == *".xn--"*) && ! $DNS_CHECK_OPTIONS =~ "noidnout" ]]; then
---
>       if [[ "${d}" == xn--* || "${d}" == *".xn--"* ]]; then
716c716
<       if [[ "$HAS_HOST" == "true" && $found_ip = false ]]; then
---
>       if [[ "$HAS_HOST" == "true" ]]; then
724c724
<       if [[ "$HAS_NSLOOKUP" == "true"  && $found_ip = false ]]; then
---
>       if [[ "$HAS_NSLOOKUP" == "true" ]]; then

[timkimber]

Fix made in the fix-host-idn-bug branch, just creating a PR now