Thank you, Richard, Shumon and Mark, for both the news that Mountain Lion has the newer version of dig and also how to run TLSA queries using the older version of dig. Very useful and I will capture those points in a tutorial blog post. I guess I will block out some time to upgrade my laptop soon.
Thanks, Dan On Friday, September 28, 2012, Mark Andrews wrote: > > In message <[email protected]<javascript:;>>, > Dan York writes: > > Is there a newer version of 'dig' that supports TLSA records? I just = > > received this on Mac OS X 10.7.4: > > ----- > > dyork$ dig +dnssec -t tlsa torproject.org > > ;; Warning, ignoring invalid type tlsa > > ----- > > dig +dnssec type53 torproject.org > > > Here's the version info I have for dig: > > ----- > > dyork$ dig -v > > DiG 9.7.3-P3 > > ----- > > > > If so, any tips on easily getting a newer version[1]? Does Mountain = > > Lion include a newer version? > > Yes > > % /usr/bin/dig tlsa . > > ; <<>> DiG 9.8.3-P1 <<>> tlsa . > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30368 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 > > ;; QUESTION SECTION: > ;. IN TLSA > > ;; AUTHORITY SECTION: > . 10762 IN SOA a.root-servers.net. > nstld.verisign-grs.com. 2012092801 1800 900 604800 86400 > > ;; Query time: 2 msec > ;; SERVER: 127.0.0.1#53(127.0.0.1) > ;; WHEN: Sat Sep 29 13:31:37 2012 > ;; MSG SIZE rcvd: 92 > > % uname -a > Darwin drugs.dv.isc.org 12.2.0 Darwin Kernel Version 12.2.0: Sat Aug 25 > 00:48:52 PDT 2012; root:xnu-2050.18.24~1/RELEASE_X86_64 x86_64 > % > > > Thanks, > > Dan > > > > [1] i.e. outside of going to https://www.isc.org/software/bind and > doing = > > the usual 'configure/make/make install' dance, which I've not actually = > > tried on Mac OS X > > > > --=20 > > Dan York [email protected] <javascript:;> > > http://www.danyork.me/ skype:danyork > > Phone: +1-802-735-1624 > > Twitter - http://twitter.com/danyork > > > > > > > > > > --Apple-Mail=_C3E0E682-C69C-4FA7-9548-358347836933 > > Content-Transfer-Encoding: quoted-printable > > Content-Type: text/html; > > charset=us-ascii > > > > <html><head></head><body style=3D"word-wrap: break-word; = > > -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Is = > > there a newer version of 'dig' that supports TLSA records? I just = > > received this on Mac OS X 10.7.4:<div>-----</div><div><div> dyork$ = > > dig +dnssec -t tlsa <a = > > href=3D"http://torproject.org";>torproject.org</a></div><div>;; Warning, > = > > ignoring invalid type = > > tlsa</div><div>-----</div><div><br></div><div>Here's the version info I = > > have for dig:</div><div>-----</div><div><div>dyork$ dig -v</div><div>DiG > = > > 9.7.3-P3</div></div><div>-----</div><div><br></div><div>If so, any tips = > > on easily getting a newer version[1]? Does Mountain Lion include a > = > > newer = > > > version?</div><div><br></div><div>Thanks,</div><div>Dan</div><div><br></di= > > v><div>[1] i.e. outside of going to <a = > > href=3D"https://www.isc.org/software/bind";> > https://www.isc.org/software/bi= > > nd</a> and doing the usual 'configure/make/make install' dance, = > > which I've not actually tried on Mac OS X</div><div><br></div><div = > > apple-content-edited=3D"true"> > > <div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; = > > -webkit-line-break: after-white-space; "><div style=3D"word-wrap: = > > break-word; -webkit-nbsp-mode: space; -webkit-line-break: = > > after-white-space; "><div><div style=3D"word-wrap: break-word; = > > -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; = > > ">-- <br>Dan York <a = > > href=3D"mailto:[email protected] > > <javascript:;>">[email protected]<javascript:;></a><br><a > = > > href=3D"http://www.danyork.com/";>http://www.danyork.me/ > </a> &nb= > > sp;<a href=3D"skype:danyork">skype:danyork</a><br>Phone: = > > +1-802-735-1624<br>Twitter - <a = > > href=3D"http://twitter.com/danyork";>http://twitter.com/danyork > </a></div><d= > > iv style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; = > > -webkit-line-break: after-white-space; "><br></div></div></div></div><br > = > > class=3D"Apple-interchange-newline"> > > </div> > > <br></div></body></html>= > > > > --Apple-Mail=_C3E0E682-C69C-4FA7-9548-358347836933-- > > > > --===============3012269988459674267== > > Content-Type: text/plain; charset="us-ascii" > > MIME-Version: 1.0 > > Content-Transfer-Encoding: 7bit > > Content-Disposition: inline > > > > _______________________________________________ > > dane mailing list > > [email protected] <javascript:;> > > https://www.ietf.org/mailman/listinfo/dane > > > > --===============3012269988459674267==-- > -- > Mark Andrews, ISC > 1 Seymour St., Dundas Valley, NSW 2117, Australia > PHONE: +61 2 9871 4742 INTERNET: [email protected]<javascript:;> > -- -- Dan York, [email protected] http://danyork.me http://twitter.com/danyork
_______________________________________________ dane mailing list [email protected] https://www.ietf.org/mailman/listinfo/dane
