Re: dnssec with freebsd's resolver(3)

2011-06-23 Thread Osterweil, Eric
On 6/22/11 5:58 PM, Matthew Seaman m.sea...@infracaninophile.co.uk wrote: On 22/06/2011 20:02, Osterweil, Eric wrote: On 6/22/11 2:56 PM, Leon Meßner l.mess...@physik.tu-berlin.de wrote: On Mon, Jun 20, 2011 at 06:17:23AM +0100, Matthew Seaman wrote: On 20/06/2011 01:37, Leon

Re: dnssec with freebsd's resolver(3)

2011-06-23 Thread Leon Meßner
This mail got only send to Matthew because of bad time of day ;) On Wed, Jun 22, 2011 at 10:58:00PM +0100, Matthew Seaman wrote: On 22/06/2011 20:02, Osterweil, Eric wrote: On 6/22/11 2:56 PM, Leon Meßner l.mess...@physik.tu-berlin.de wrote: On Mon, Jun 20, 2011 at 06:17:23AM

Re: dnssec with freebsd's resolver(3)

2011-06-23 Thread Osterweil, Eric
On 6/23/11 2:23 PM, Leon Meßner l.mess...@physik.tu-berlin.de wrote: This mail got only send to Matthew because of bad time of day ;) On Wed, Jun 22, 2011 at 10:58:00PM +0100, Matthew Seaman wrote: On 22/06/2011 20:02, Osterweil, Eric wrote: On 6/22/11 2:56 PM, Leon Meßner

Re: dnssec with freebsd's resolver(3)

2011-06-22 Thread Leon Meßner
On Mon, Jun 20, 2011 at 06:17:23AM +0100, Matthew Seaman wrote: On 20/06/2011 01:37, Leon Meßner wrote: does the freebsd resolver(3) support sending the DO bit in queries and thus do DNSSEC validation ? I tried using ssh with SSHFP RR's in a signed zone but i still get the insecure Key

Re: dnssec with freebsd's resolver(3)

2011-06-22 Thread Osterweil, Eric
On 6/22/11 2:56 PM, Leon Meßner l.mess...@physik.tu-berlin.de wrote: On Mon, Jun 20, 2011 at 06:17:23AM +0100, Matthew Seaman wrote: On 20/06/2011 01:37, Leon Meßner wrote: does the freebsd resolver(3) support sending the DO bit in queries and thus do DNSSEC validation ? I tried using ssh

Re: dnssec with freebsd's resolver(3)

2011-06-22 Thread Matthew Seaman
On 22/06/2011 20:02, Osterweil, Eric wrote: On 6/22/11 2:56 PM, Leon Meßner l.mess...@physik.tu-berlin.de wrote: On Mon, Jun 20, 2011 at 06:17:23AM +0100, Matthew Seaman wrote: On 20/06/2011 01:37, Leon Meßner wrote: does the freebsd resolver(3) support sending the DO bit in queries

dnssec with freebsd's resolver(3)

2011-06-19 Thread Leon Meßner
Hi, does the freebsd resolver(3) support sending the DO bit in queries and thus do DNSSEC validation ? I tried using ssh with SSHFP RR's in a signed zone but i still get the insecure Key message from ssh on FreeBSD (works on some other OS). cherio, Leon

Re: dnssec with freebsd's resolver(3)

2011-06-19 Thread Matthew Seaman
On 20/06/2011 01:37, Leon Meßner wrote: does the freebsd resolver(3) support sending the DO bit in queries and thus do DNSSEC validation ? I tried using ssh with SSHFP RR's in a signed zone but i still get the insecure Key message from ssh on FreeBSD (works on some other OS). My understanding