| View previous topic :: View next topic |
| Author |
Message |
ayeyes
Tux's lil' helper
Joined: 03 Dec 2017
Posts: 104
|
 Posted: Sun Aug 19, 2018 2:34 pm Post subject: DNSSEC and Gentoo not working |
 |
|
| Gentoo.org doesn't work with DNSSEC enabled, and neither does the keyservers so I can't sync. Disable DNSSEC, or install another distro are my options. |
|
| Back to top |
|
 |
NeddySeagoon
Administrator
Joined: 05 Jul 2003
Posts: 54874
Location: 56N 3W
|
| Posted: Sun Aug 19, 2018 3:29 pm Post subject: |
|
|
ayeyes,
Please file a bug.
_________________
Regards,
NeddySeagoon
Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail. |
|
| Back to top |
|
|
ayeyes
Tux's lil' helper
Joined: 03 Dec 2017
Posts: 104
|
| Posted: Sun Aug 19, 2018 3:53 pm Post subject: |
|
|
| NeddySeagoon wrote: | ayeyes,
Please file a bug. |
Thanks NeddySeagin. Good idea.Trying out DNSSEC servers now. Will probably use a non DNSSEC server for now, if I cannot get it to work. |
|
| Back to top |
|
|
Ant P.
Watchman
Joined: 18 Apr 2009
Posts: 6920
|
| Posted: Tue Aug 21, 2018 2:23 am Post subject: |
|
|
It's working fine from here:
| Code: | $ dig +dnssec +multi gentoo.org
; <<>> DiG 9.12.2 <<>> +dnssec +multi gentoo.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61025
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
; COOKIE: d3bbcb562f1e232c658080b95b7b7732f6bdbb72c8a4db1c (good)
;; QUESTION SECTION:
;gentoo.org. IN A
;; ANSWER SECTION:
gentoo.org. 859 IN A 89.16.167.134
gentoo.org. 859 IN RRSIG A 5 2 900 (
20190214095137 20180818095137 52980 gentoo.org.
P1iy4XqTdLHWAPBTZ1BAH4oSmFw5yniah9HTT9eGTBoE
eaHQ/4ksLQHdmXsdWFVgPwPBMvGnvIoyabHHZ2MjJ32v
J7OfWKstJP7fW2timrzGveCYxpqHhfTIiJqs1zO0Lbpv
d4WAM/hwVAnIrhsqdzUDDkFlM6EbBhY1lsD+PveW9xrG
cAJo8CZMSTBTFgmBNXhH42+xULLhwsFrKX/QZA== )
;; Query time: 1 msec
;; SERVER: fd2b:5c2a:ec8f:3::7#53(fd2b:5c2a:ec8f:3::7)
;; WHEN: Tue Aug 21 03:21:38 BST 2018
;; MSG SIZE rcvd: 285
$ dig +dnssec +multi www.dnssec-failed.org
; <<>> DiG 9.12.2 <<>> +dnssec +multi www.dnssec-failed.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 63337
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
; COOKIE: 6bcab76df823c73b385ac4495b7b771cbcdfe217ced04440 (good)
;; QUESTION SECTION:
;www.dnssec-failed.org. IN A
;; Query time: 356 msec
;; SERVER: fd2b:5c2a:ec8f:3::7#53(fd2b:5c2a:ec8f:3::7)
;; WHEN: Tue Aug 21 03:21:16 BST 2018
;; MSG SIZE rcvd: 78 |
|
|
| Back to top |
|
|
ayeyes
Tux's lil' helper
Joined: 03 Dec 2017
Posts: 104
|
| Posted: Wed Aug 22, 2018 11:59 am Post subject: |
|
|
| Ant P. wrote: | | It's working fine from here |
I got it working too using a Canadian server.  |
|
| Back to top |
|
|
|
Gentoo Chat
