[Dnsmasq-discuss] DNSSEC enabled dnsmasq dies very quickly

2014-01-26 Thread e9hack
Hi,

for testing purpose, I compile dnsmasq with option -DHAVE_DNSSEC. After a few 
name
queries, dnsmasq dies. In the example, I start firefox on Windows 7. After a 
few queries,
dnsmasq isn't longer running:

Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: query[A] 
secure.informaction.com from
192.168.100.2
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded 
secure.informaction.com to
192.168.26.1
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded 
secure.informaction.com to
8.8.8.8
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded 
secure.informaction.com to
2001:4860:4860::
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded 
secure.informaction.com to
fe80::1
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: reply 
secure.informaction.com is
69.195.141.179
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: query[] 
secure.informaction.com
from 192.168.100.2
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded 
secure.informaction.com to
192.168.26.1
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: reply 
secure.informaction.com is
NODATA-IPv6
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: query[A] ocsp.godaddy.com 
from
192.168.100.2
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded ocsp.godaddy.com 
to 192.168.26.1
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: reply ocsp.godaddy.com is 
CNAME
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: reply 
ocsp.godaddy.com.akadns.net is
188.121.36.239
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: query[] 
ocsp.godaddy.com from
192.168.100.2
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: cached ocsp.godaddy.com is 
CNAME
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded ocsp.godaddy.com 
to 192.168.26.1
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: reply ocsp.godaddy.com is 
CNAME
Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: reply 
ocsp.godaddy.com.akadns.net is
NODATA-IPv6

My test setup is a carambola box with the current trunk of OpenWRT. If I 
compile it
without -DHAVE_DNSSEC, it runs perfectly.

Regards,
Hartmut

___
Dnsmasq-discuss mailing list
Dnsmasq-discuss@lists.thekelleys.org.uk
http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss


Re: [Dnsmasq-discuss] DNSSEC enabled dnsmasq dies very quickly

2014-01-26 Thread Dave Taht
Dnsmasq is barely in git with dnssec support,
So it would help to clearly identify what commit number you are working
from. ?

And: Pull early, pull often.
 On Jan 26, 2014 5:47 PM, e9hack e9h...@gmail.com wrote:

 Hi,

 for testing purpose, I compile dnsmasq with option -DHAVE_DNSSEC. After a
 few name
 queries, dnsmasq dies. In the example, I start firefox on Windows 7. After
 a few queries,
 dnsmasq isn't longer running:

 Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: query[A]
 secure.informaction.com from
 192.168.100.2
 Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded
 secure.informaction.com to
 192.168.26.1
 Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded
 secure.informaction.com to
 8.8.8.8
 Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded
 secure.informaction.com to
 2001:4860:4860::
 Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded
 secure.informaction.com to
 fe80::1
 Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: reply
 secure.informaction.com is
 69.195.141.179
 Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: query[]
 secure.informaction.com
 from 192.168.100.2
 Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded
 secure.informaction.com to
 192.168.26.1
 Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: reply
 secure.informaction.com is
 NODATA-IPv6
 Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: query[A]
 ocsp.godaddy.com from
 192.168.100.2
 Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded
 ocsp.godaddy.com to 192.168.26.1
 Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: reply ocsp.godaddy.comis 
 CNAME
 Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: reply
 ocsp.godaddy.com.akadns.net is
 188.121.36.239
 Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: query[]
 ocsp.godaddy.com from
 192.168.100.2
 Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: cached
 ocsp.godaddy.com is CNAME
 Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: forwarded
 ocsp.godaddy.com to 192.168.26.1
 Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: reply ocsp.godaddy.comis 
 CNAME
 Sun Jan 26 12:04:57 2014 daemon.info dnsmasq[1880]: reply
 ocsp.godaddy.com.akadns.net is
 NODATA-IPv6

 My test setup is a carambola box with the current trunk of OpenWRT. If I
 compile it
 without -DHAVE_DNSSEC, it runs perfectly.

 Regards,
 Hartmut

 ___
 Dnsmasq-discuss mailing list
 Dnsmasq-discuss@lists.thekelleys.org.uk
 http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss

___
Dnsmasq-discuss mailing list
Dnsmasq-discuss@lists.thekelleys.org.uk
http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss


Re: [Dnsmasq-discuss] DNSSEC enabled dnsmasq dies very quickly

2014-01-26 Thread Simon Kelley

On 26/01/14 22:47, e9hack wrote:

Hi,

for testing purpose, I compile dnsmasq with option -DHAVE_DNSSEC. After a few 
name
queries, dnsmasq dies. In the example, I start firefox on Windows 7. After a 
few queries,
dnsmasq isn't longer running:




DNSSEC is still rather experimental, so no apologies if it breaks at the 
moment. Are you actually enabling dnssec validation with --dnssec?


If not, then compiling with CFLAGS=-g and running under gdb to get a 
backtrace of exactly where it's crashing would be useful, as long as 
you're using the very latest git code.


Cheers,

Simon.




My test setup is a carambola box with the current trunk of OpenWRT. If I 
compile it
without -DHAVE_DNSSEC, it runs perfectly.

Regards,
Hartmut

___
Dnsmasq-discuss mailing list
Dnsmasq-discuss@lists.thekelleys.org.uk
http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss




___
Dnsmasq-discuss mailing list
Dnsmasq-discuss@lists.thekelleys.org.uk
http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss