On Oct 13, Jason Bolger <[email protected]> wrote:
This package is shipping with outdated dns trust anchor information in /usr/share/dnsmasq-base/trust-anchors.conf causing all DNSSEC validations to fail.Rather than correcting it I suggest making the package dependent on dns-root-data which appears to be the Debian package for maintaining DNS data.
As the dns-root-data maintainer I fully agree. Not duplicating the trust anchors should be a policy-level requirement.dnsmasq does not read natively any of the file formats provided by dns-root-data, but its trust-anchor configuration parameters can be trivially generated from /usr/share/dns/root.ds using e.g. awk.
-- ciao, Marco
signature.asc
Description: PGP signature
