5 Čen
2018
5 Čen
'18
13:35
Hi,
today I wanted to try the ta sentinel functionality.
Unfortunately do I not get the expected results.
Maybe somebody could show me some example querries?
I tried:
dig +dnssec kskroll-sentinel-is-ta-20326.iis.se
dig +dnssec kskroll-sentinel-not-ta-20326.iis.se
dig +dnssec kskroll-sentinel-is-ta-19036.iis.se
dig +dnssec kskroll-sentinel-not-ta-19036.iis.se
All with the same result. No answer section.
dig +dnssec iis.se
iis.se. 60 IN A 91.226.37.214
iis.se. 60 IN RRSIG A 5 2 60 20180615103001 20180605103001 6150 iis.se.
XAbt3nM5DmpsDsvZN6gRW94mGwTsCYpAQxurTJYp4FHZXaXt82o+3SMD
ZEZjWsDswy3WsYp087Wx7Y4sH6HbuP0VYuwg1yLsBegrj6xNlcd5JarN
wi8ZGbTytnDBG5rvpqwUp8fat3ZZ6kko4t7BtsD4cFzdL2xpw4MPbBKz p0s=
What am I doing wrong?
/Ulrich
--
Ulrich Wisser
ulrich(a)wisser.se
5 Čen
5 Čen
14:53
On 06/05/2018 01:35 PM, Ulrich Wisser wrote:
today I wanted to try the ta sentinel functionality.
Unfortunately do > I not get the expected results.
Code in current release was
based on an older version of the RFC draft
that used different names for the labels. New WIP, probably usable
already: https://gitlab.labs.nic.cz/knot/knot-resolver/merge_requests/596
--Vladimir
14:56
Hi Vladimir,
I copied the labels from the module kskroll-sentinel-is-ta-... but that
didn't help.
Maybe I am asking the wrong questions? An example of questions that should
work (kresd version 2.3) would be of great help.
/Ulrich
Vladimír Čunát <vladimir.cunat(a)nic.cz> schrieb am Di., 5. Juni 2018 um
14:53 Uhr:
On 06/05/2018 01:35 PM, Ulrich Wisser wrote:
Ulrich Wisser
ulrich(a)wisser.se
today I wanted to try the ta sentinel
functionality. Unfortunately do >
I not get the expected results.
Code in current release was based on an older version of the RFC draft
that used different names for the labels. New WIP, probably usable
already: https://gitlab.labs.nic.cz/knot/knot-resolver/merge_requests/596
--Vladimir
--
15:09
On 06/05/2018 02:56 PM, Ulrich Wisser wrote:
I copied the labels from the module
kskroll-sentinel-is-ta-... but
that didn't help.
Maybe I am asking the wrong questions? An example of questions that
should work (kresd version 2.3) would be of great help.
The spec. used hexadecimal key IDs, too. Example SERVFAIL:
kskroll-sentinel-not-ta-4f66.ksk-test.net
2160
days inactive
2160
days old
knot-resolver-users@lists.nic.cz
3 comments
2 participants
participants (2)
-
Ulrich Wisser -
Vladimír Čunát