Public bug reported:

systemd-resolved returns a malformed packet when looking up an openpgp
key (via a cert record rfc4398) from my internal authoritative dns
server.

The command I used was gpg2 -v --auto-key-locate=clear,cert,local
--locate-keys [Email Address]

This works correctly if I change /etc/resolv.conf symlink to point at
/run/systemd/resolve/resolv.conf so that it doesn't use the local
systemd-resolved resolver/cache instead of /run/resolvconf/resolv.conf

I'm including a wireshark capture of the malformed packet (filtered for
127.0.0.53).

I noticed that this was over udp.  If I recall correctly, cert records
are usually big enough that they require using tcp.

Description:    Ubuntu Artful Aardvark (development branch)
Release:        17.10

systemd:
  Installed: 233-8ubuntu3
  Candidate: 233-8ubuntu3

** Affects: systemd (Ubuntu)
     Importance: Undecided
         Status: New

** Attachment added: "bug.pcapng"
   https://bugs.launchpad.net/bugs/1719062/+attachment/4955485/+files/bug.pcapng

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/1719062

Title:
  systemd-resolved malformed packet on cert dns lookup

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1719062/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

Reply via email to