[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Sks-devel] Not in pool on status page
|
From: |
Kristian Fiskerstrand |
|
Subject: |
Re: [Sks-devel] Not in pool on status page |
|
Date: |
Sun, 24 Nov 2013 16:00:00 +0100 |
|
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.1.1 |
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On 11/19/2013 05:41 PM, Kristian Fiskerstrand wrote:
..
>
>
>> Also I notice that I'm having issues resolving the domain name
>> keyserver.linuxpro.nl from my server. Make sure the keyservers
>> are properly set up (or is there any DNSSEC configuration that
>> might stop the request?)
>
> Following up on this, please verify your lookaside settings. I
> notice that if I disable dnssec-lookaside auto; I get a valid
> response.
>
>
A few recommended links to help debugging; [0, 1]. In particular note
keyserver.linuxpro.nl/A:This RRset is not covered by any RRSIG.
keyserver.linuxpro.nl/AAAA:This RRset is not covered by any RRSIG.
Despite getting indications that it should be used from the ISC DLV[2]
(see $(dig linuxpro.nl.dlv.isc.org any) )
References:
[0] http://dnsviz.net/d/keyserver.linuxpro.nl/dnssec/
[1] http://dnssec-debugger.verisignlabs.com/keyserver.linuxpro.nl
[2] https://dlv.isc.org/
- --
- ----------------------------
Kristian Fiskerstrand
Blog: http://blog.sumptuouscapital.com
Twitter: @krifisk
- ----------------------------
Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
- ----------------------------
Nunc aut numquam
Now or never
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=35RU
-----END PGP SIGNATURE-----