SERVFAIL with ocsp.entrust.net.

2012-04-24 Thread Bischof, Ralph F. (MSFC-IS40)[NICS]
Hello, I have been trying to find out why my caching servers are giving SERVFAIL as an answer for any type of query except for an A record for the domain in the subject. Whether I try a , TXT, SOA, PTR, TXT, etc, I get a SERVFAIL answer. Yet, it seems that anyone else in the world

9.9.x Train Inquiry for ISC

2012-04-24 Thread Fr34k
Dear ISC et al., Within the last month, we've seen new versions for the 9.8.x, 9.7.x, and 9.6.x trains. http://www.isc.org/software/bind/versions Should we expect a 9.9.0 update in the near future (e.g., 9.9.1)? Any status would be appreciated. Thank you for all your support!

Re: SERVFAIL with ocsp.entrust.net.

2012-04-24 Thread Barry Margolin
In article mailman.576.1335276428.63724.bind-us...@lists.isc.org, Bischof, Ralph F. (MSFC-IS40)[NICS] ralph.bisc...@nasa.gov wrote: Hello, I have been trying to find out why my caching servers are giving SERVFAIL as an answer for any type of query except for an A record for the

Re: SERVFAIL with ocsp.entrust.net.

2012-04-24 Thread Fr34k
Perhaps provide the ocsp.entrust.net folks 3rd party evaluation tool(s) to identify areas of concerns? For example, here are two: http://www.dnsvalidation.com/reports/4f96bdec7d79ee78db44 http://www.intodns.com/ocsp.entrust.net These find more than one critical item to fix. Why is

RE: SERVFAIL with ocsp.entrust.net.

2012-04-24 Thread Bischof, Ralph F. (MSFC-IS40)[NICS]
-Original Message- From: bind-users-bounces+ralph.bischof=nasa@lists.isc.org [mailto:bind-users-bounces+ralph.bischof=nasa@lists.isc.org] On Behalf Of Barry Margolin Sent: Tuesday, April 24, 2012 9:37 AM To: comp-protocols-dns-b...@isc.org Subject: Re: SERVFAIL with

Re: 9.9.x Train Inquiry for ISC

2012-04-24 Thread Mark Andrews
In message 1335278154.47306.yahoomail...@web121404.mail.ne1.yahoo.com, Fr34k writes: Dear ISC et al., Within the last month, we've seen new versions for the 9.8.x, 9.7.x, and 9.6. x trains. http://www.isc.org/software/bind/versions Should we expect a 9.9.0 update in the near future

Re: 9.9.x Train Inquiry for ISC

2012-04-24 Thread Scott Mann
At this point, we think that 9.9.1 will be out mid- to late summer. The other versions will follow. And, actually, the versions you note below followed 9.9.0, even though it took a bit of time (sorry about that). -Scott On 04/24/2012 08:35 AM, Fr34k wrote: Dear ISC et al., Within the last

Re: SERVFAIL with ocsp.entrust.net.

2012-04-24 Thread Mark Andrews
Entrust is definitely aware of the issue and are working on it. Yes it is a misconfiguration. This breaks FaceTime on dual stack machines on dual stack machines. They reported that they had fixed it earlier today but hadn't when I tested. They acknowledge the report that it was still broken

How to influence forwarder selection BIND 9.7.3

2012-04-24 Thread Bob McDonald
ANYCAST (in one cloud). ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

SERVFAIL with ocsp.entrust.net.

2012-04-24 Thread Bischof, Ralph F. (MSFC-IS40)[NICS]
Hi Mark, Good to hear. I have been working with someone at Entrust for a while now and had an email last night from him to check again. And, yes, my main concern is dual-stack IPv6 machines, hence the queries being important. Thank you, Ralph F. Bischof, Jr. NASA Agency