Hi Folks,
I think we can wrap this up thanks to assistance from the reporting site -
they're running BIND 9.8.1-P1 (stock package in Ubuntu 12.04 LTS).
This means they don't have the following fix, which appeared in 9.8.2b1.
3175. [bug] Fix how DNSSEC positive wildcard responses fro
On Wed, Nov 19, 2014 at 7:03 PM, Graham Clinch
wrote:
> Thanks - that's certainly looking less red. DNSViz is an exceptionally
> useful tool!
>
>
Thanks!
> ...
>
> delv +vtrace continues to report "NSEC3 at super-domain" only for
> foo.cnametest2.palatine.ac.uk records, and not for
> foo.cname
On 19-Nov-14 19:03, Graham Clinch wrote:
> Hi Casey & List folks,
>> My apologies - this was actually a bug in DNSViz. The NSEC3 computation
>> was being performed on the wrong name (the wrong origin was being
>> applied). It should be fixed now, as shown in:
>>
>> http://dnsviz.net/d/foo.cnamete
Hi Casey & List folks,
> My apologies - this was actually a bug in DNSViz. The NSEC3 computation
> was being performed on the wrong name (the wrong origin was being
> applied). It should be fixed now, as shown in:
>
> http://dnsviz.net/d/foo.cnametest.lancs.ac.uk/VGzlkA/dnssec/
> http://dnsviz.n
Hi Graham,
On Wed, Nov 19, 2014 at 11:59 AM, Graham Clinch
wrote:
> Using bind 9.9.5 with inline-signing, I have a test wildcard cname
> record in two zones:
>
> *.cnametest.lancs.ac.uk CNAME www.lancs.ac.uk
> *.cnametest.palatine.ac.uk CNAME www.palatine.ac.uk
>
> dnsviz is showing the error
>
Hello list (and this time it's not the DHCP list...),
Using bind 9.9.5 with inline-signing, I have a test wildcard cname
record in two zones:
*.cnametest.lancs.ac.uk CNAME www.lancs.ac.uk
*.cnametest.palatine.ac.uk CNAME www.palatine.ac.uk
dnsviz is showing the error
"NSEC3 proving non-existence
6 matches
Mail list logo