On Wed 2017-10-04 14:45:30 +0200, Sergio Gelato wrote: > * Sergio Gelato [2017-10-04 11:26:02 +0200]: >> The corresponding package in stretch-updates looks OK. Could it be that the >> one in jessie-updates needs to be built with a newer version of bind9utils? > > Indeed it seems that jessie's (including jessie-updates') dnssec-dsfromkey > only processes the first key in the file.
I can also confirm that the jessie package only has the first key.
However, i'm not convinced that dnssec-dsfromkey is at fault, because i
think the versions of dnssec-dsfromkey in stretch and buster both have
the same behavior.
So more digging needs to be done to figure out why this is happening
on jessie.
--dkg
signature.asc
Description: PGP signature
