Re: nsec3 opt-out confusion (bug report)

2014-04-01 Thread Evan Hunt
> Nevertheless, it seems there are still two bugs: > 1. The NSEC3 chain is not properly cleared when switching from > non-opt-out to opt-out That does seem incorrect (though under the circumstances it may be harmless). Could you please report it to bind9-b...@isc.org, including details of how yo

Re: nsec3 opt-out confusion (bug report)

2014-04-01 Thread Klaus Darilion
On 01.04.2014 17:09, Chris Thompson wrote: On Apr 1 2014, Klaus Darilion wrote: [...] Nevertheless, it seems there are still two bugs: 1. The NSEC3 chain is not properly cleared when switching from non-opt-out to opt-out 2. The NSEC3PARAM record always has the opt-out flag clear, even if opt-

Re: nsec3 opt-out confusion (bug report)

2014-04-01 Thread Chris Thompson
On Apr 1 2014, Klaus Darilion wrote: [...] Nevertheless, it seems there are still two bugs: 1. The NSEC3 chain is not properly cleared when switching from non-opt-out to opt-out 2. The NSEC3PARAM record always has the opt-out flag clear, even if opt-out is activated. That last, at least, is

Re: nsec3 opt-out confusion (bug report)

2014-04-01 Thread Klaus Darilion
It seems Bind is a bit broken. I just removed NSEC3 and added NSEC3 again with "1 0 10 BEEF", and suddenly all NSEC3 records had the opt-out flag clear. Then I changed NSEC3 params to "1 1 10 BEEF". Then almost all NSEC3 records had the opt-out flag set, but two NSEC3 records still had the fl