> BIND in netbsd-8 is version 9.10.5-P1. > > BIND compiled from ISC, version 9.10.5-P3 also does this correctly: > > castor: {11} dig . dnskey | bin/dnssec/dnssec-dsfromkey -f - . > . IN DS 20326 8 1 AE1EA5B974D4C858B740BD03E3CED7EBFCBD1724 > . IN DS 20326 8 2 > E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D > castor: {12} > > I'm going to do 9.10.5-P1 from ISC next.
Same, it's working as it should: castor: {5} dig . dnskey | bin/dnssec/dnssec-dsfromkey -f - . . IN DS 20326 8 1 AE1EA5B974D4C858B740BD03E3CED7EBFCBD1724 . IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D castor: {6} In these builds dnssec-dsfromkey links dynamically (among others) against -lcrypt.1 => /lib/libcrypt.so.1 -lcrypto.12 => /usr/lib/libcrypto.so.12 So now I'm a bit confused where this error comes from. Its root cause does not seem to be the in-tree compiler (the "standalone" BIND releases I've built are built with "-g -O2"), and it's not the original BIND code either by the looks of it, as this is the same code which is in netbsd-8. Regards, - HÃ¥vard