Your message dated Fri, 02 Nov 2018 22:02:08 +0000 with message-id <[email protected]> and subject line Bug#862682: fixed in gnupg2 2.1.18-8~deb9u3 has caused the Debian Bug report #862682, regarding dirmngr fails to resolve keyservers over IPv6 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 862682: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862682 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: dirmngr Version: 2.1.18-6 When nameservers in /etc/resolv.conf are only IPv6 addresses, dirmngr fails to resolve hostnames. System is up-to-date Stretch install (kernel 4.9.0-2-amd64 #1 SMP Debian 4.9.18-1, glibc 2.24-10). Expected behaviour: dirmngr works with IPv6 DNS resolvers. ~/.gnupg/dirmngr.conf: debug-all verbose Transcript (gpg): $ gpg -vv --debug-all --keyserver keyserver.cns.vt.edu --recv-keys B2F41D360340F41AE0B2841773AC5687477EB9EE gpg: Note: no default option file '/home/eric/.gnupg/gpg.conf' gpg: enabled debug flags: packet mpi crypto filter iobuf memory cache memstat trust hashing ipc clock lookup extprog gpg: DBG: [not enabled in the source] start gpg: DBG: chan_3 <- # Home: /home/eric/.gnupg gpg: DBG: chan_3 <- # Config: /home/eric/.gnupg/dirmngr.conf gpg: DBG: chan_3 <- OK Dirmngr 2.1.18 at your service gpg: DBG: connection to the dirmngr established gpg: DBG: chan_3 -> GETINFO version gpg: DBG: chan_3 <- D 2.1.18 gpg: DBG: chan_3 <- OK gpg: DBG: chan_3 -> KEYSERVER --clear hkp://keyserver.cns.vt.edu gpg: DBG: chan_3 <- OK gpg: DBG: chan_3 -> KS_GET -- 0xB2F41D360340F41AE0B2841773AC5687477EB9EE gpg: DBG: chan_3 <- ERR 167772379 Server indicated a failure <Dirmngr> gpg: keyserver receive failed: Server indicated a failure gpg: DBG: chan_3 -> BYE gpg: DBG: [not enabled in the source] stop gpg: random usage: poolsize=600 mixed=0 polls=0/0 added=0/0 outmix=0 getlvl1=0/0 getlvl2=0/0 gpg: secmem usage: 0/65536 bytes in 0 blocks System Journal: May 15 15:29:59 cannondale dirmngr[2563]: handler for fd 5 started May 15 15:29:59 cannondale dirmngr[2563]: DBG: chan_5 -> # Home: /home/eric/.gnupg May 15 15:29:59 cannondale dirmngr[2563]: DBG: chan_5 -> # Config: /home/eric/.gnupg/dirmngr.conf May 15 15:29:59 cannondale dirmngr[2563]: DBG: chan_5 -> OK Dirmngr 2.1.18 at your service May 15 15:29:59 cannondale dirmngr[2563]: connection from process 2759 (1000:1000) May 15 15:29:59 cannondale dirmngr[2563]: DBG: chan_5 <- GETINFO version May 15 15:29:59 cannondale dirmngr[2563]: DBG: chan_5 -> D 2.1.18 May 15 15:29:59 cannondale dirmngr[2563]: DBG: chan_5 -> OK May 15 15:29:59 cannondale dirmngr[2563]: DBG: chan_5 <- KEYSERVER --clear hkp://keyserver.cns.vt.edu May 15 15:29:59 cannondale dirmngr[2563]: DBG: chan_5 -> OK May 15 15:29:59 cannondale dirmngr[2563]: DBG: chan_5 <- KS_GET -- 0xB2F41D360340F41AE0B2841773AC5687477EB9EE May 15 15:29:59 cannondale dirmngr[2563]: number of system provided CAs: 173 May 15 15:29:59 cannondale dirmngr[2563]: DBG: http.c:connect_server: trying name='keyserver.cns.vt.edu' port=11371 May 15 15:29:59 cannondale dirmngr[2563]: DBG: dns: resolve_dns_name(keyserver.cns.vt.edu): Server indicated a failure May 15 15:29:59 cannondale dirmngr[2563]: resolving 'keyserver.cns.vt.edu' failed: Server indicated a failure May 15 15:29:59 cannondale dirmngr[2563]: can't connect to 'keyserver.cns.vt.edu': host not found May 15 15:29:59 cannondale dirmngr[2563]: error connecting to 'http://keyserver.cns.vt.edu:11371': Server indicated a failure May 15 15:29:59 cannondale dirmngr[2563]: command 'KS_GET' failed: Server indicated a failure May 15 15:29:59 cannondale dirmngr[2563]: DBG: chan_5 -> ERR 167772379 Server indicated a failure <Dirmngr> May 15 15:29:59 cannondale dirmngr[2563]: DBG: chan_5 <- BYE May 15 15:29:59 cannondale dirmngr[2563]: DBG: chan_5 -> OK closing connection May 15 15:29:59 cannondale dirmngr[2563]: handler for fd 5 terminated When I add a legacy IP DNS server to my /etc/resolv.conf and restart dirmngr.socket, things behave as expected (I won't include transcript). I also ran a tcpdump; no network traffic is generated by dirmngr to my DNS servers when I only specify IPv6 addresses, and the SRV query (when I modify my resolv.conf) is over legacy IP. Regards, Eric C. Landgraf
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---Source: gnupg2 Source-Version: 2.1.18-8~deb9u3 We believe that the bug you reported is fixed in the latest version of gnupg2, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Daniel Kahn Gillmor <[email protected]> (supplier of updated gnupg2 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 05 Oct 2018 15:43:38 -0500 Source: gnupg2 Binary: gnupg-agent scdaemon gpgsm gnupg gnupg2 gpgv gpgv2 dirmngr gpgv-udeb gpgv-static gpgv-win32 gnupg-l10n Architecture: source Version: 2.1.18-8~deb9u3 Distribution: stretch Urgency: medium Maintainer: Debian GnuPG Maintainers <[email protected]> Changed-By: Daniel Kahn Gillmor <[email protected]> Description: dirmngr - GNU privacy guard - network certificate management service gnupg - GNU privacy guard - a free PGP replacement gnupg-agent - GNU privacy guard - cryptographic agent gnupg-l10n - GNU privacy guard - localization files gnupg2 - GNU privacy guard - a free PGP replacement (dummy transitional pa gpgsm - GNU privacy guard - S/MIME version gpgv - GNU privacy guard - signature verification tool gpgv-static - minimal signature verification tool (static build) gpgv-udeb - minimal signature verification tool (udeb) gpgv-win32 - GNU privacy guard - signature verification tool (win32 build) gpgv2 - GNU privacy guard - signature verification tool (dummy transition scdaemon - GNU privacy guard - smart card support Closes: 862682 878952 906545 Changes: gnupg2 (2.1.18-8~deb9u3) stretch; urgency=medium . * block trivial access to scdaemon memory (Closes: #878952) * Update crypto defaults for 2018 (new keys are RSA 3072, prefer AES256) * d/control: move Vcs*: to salsa * dirmngr: implement querying nameservers over IPv6 (Closes: #862682) * use DEP-14 branch naming * refresh patches * backport --no-symkey-cache * backport improved import and export filtering * backport display of revocation certificates * backport stripping unusable subkey material during export-minimal * backport fix to make --dry-run work when listing secret keys * backport fix showing secret keys when listing keys * backport fix to clean keys before importing (Closes: #906545) Checksums-Sha1: 9349ce6a6042f28e4a2f43d5c067d00c153d94b2 2537 gnupg2_2.1.18-8~deb9u3.dsc d978051d77fd5662d7871302032d52c4e93090e4 117913 gnupg2_2.1.18-8~deb9u3.debian.tar.bz2 cab1d1310a2a623100c73995bf22850d607a8ad8 16460 gnupg2_2.1.18-8~deb9u3_amd64.buildinfo Checksums-Sha256: d4665c6bef3eab1a65a94492358529ba62d3976f8b955e3502da057a94d6f126 2537 gnupg2_2.1.18-8~deb9u3.dsc d2525b74bf703b5aefc66b9d029f330ec316e0aa35b54710b132e3754144ac67 117913 gnupg2_2.1.18-8~deb9u3.debian.tar.bz2 37a1ced8a677b38a924cceae2a397caa7584117aa810c7c512a84bc3cb0f0c77 16460 gnupg2_2.1.18-8~deb9u3_amd64.buildinfo Files: 8a221a7db97255d5cf0e1039fcbb9b76 2537 utils optional gnupg2_2.1.18-8~deb9u3.dsc 2ad5655de4465eb4f561416f35d9d22b 117913 utils optional gnupg2_2.1.18-8~deb9u3.debian.tar.bz2 1052f072b1418bf0a4037078f6b08508 16460 utils optional gnupg2_2.1.18-8~deb9u3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQTTaP514aqS9uSbmdJsHx7ezFD6UwUCW9Z1vwAKCRBsHx7ezFD6 U6xcAP9+/KiRlHoWQaegRiesleaRLAEKJo4QSv7VPClatHW3uAD+KS2VjT/j0pkB wWau8iOW+BdTKdxkzNDgXQtpNQ7YkAE= =nkaZ -----END PGP SIGNATURE-----
--- End Message ---
