On 4 May 2010, at 09:36, Shanmuga Rajan wrote:

> I have written a simple script which will query (dnssec) the bind 9.6.
> The query was working fine and also i did the same query with dig. But
> there was some mismatch between these two results(only in RRSIG
> signature content). I have given both the query results below. Some
> empty space character was introduced in the dnspython query. Dig
> result was exactly matched with the domain data available in bind flat
> file but dnspython query results are not.  Could anyone clarify on
> this?

Whitespace in the encoded base64 signature data is ignored.  dnspython adds 
whitespace differently than BIND does when generating base64, so that's why 
you're seeing a difference.  It's harmless, and BIND should be able to read 
what dnspython outputs without any trouble (and vice versa).

/Bob


_______________________________________________
dnspython-users mailing list
[email protected]
http://howl.play-bow.org/mailman/listinfo.cgi/dnspython-users

Reply via email to