Bug#751560: opendkim: Please enable DNSSEC by default

2015-06-29 Thread Scott Kitterman
On Monday, April 27, 2015 03:27:16 PM Scott Kitterman wrote: > On Monday, April 27, 2015 02:47:00 PM James Cloos wrote: > > opendkim could depend on dns-root-data and have: > > > > TrustAnchorFile /usr/share/dns/root.key > > > > in the default opendkim.conf. > > > > I've been using TrustAnchorFi

Bug#751560: opendkim: Please enable DNSSEC by default

2015-04-27 Thread Scott Kitterman
On Monday, April 27, 2015 02:47:00 PM James Cloos wrote: > opendkim could depend on dns-root-data and have: > > TrustAnchorFile /usr/share/dns/root.key > > in the default opendkim.conf. > > I've been using TrustAnchorFile /var/lib/unbound/root.key on my MXs for > the longer of: > > as long as

Bug#751560: opendkim: Please enable DNSSEC by default

2015-04-27 Thread James Cloos
opendkim could depend on dns-root-data and have: TrustAnchorFile /usr/share/dns/root.key in the default opendkim.conf. I've been using TrustAnchorFile /var/lib/unbound/root.key on my MXs for the longer of: as long as opendkim has supported TrustAnchorFile or as long as I've run opendkim (I

Bug#751560: opendkim: Please enable DNSSEC by default

2015-04-27 Thread Scott Kitterman
On Monday, April 27, 2015 07:54:50 PM Kurt Roeckx wrote: > On Mon, Apr 27, 2015 at 08:47:21AM -0400, Scott Kitterman wrote: > > On Monday, April 27, 2015 12:36:06 PM cl...@jhcloos.com wrote: > > > > but I did add unbound to suggests and update the shipped config file > > > > to include a commented

Bug#751560: opendkim: Please enable DNSSEC by default

2015-04-27 Thread Kurt Roeckx
On Mon, Apr 27, 2015 at 08:47:21AM -0400, Scott Kitterman wrote: > On Monday, April 27, 2015 12:36:06 PM cl...@jhcloos.com wrote: > > > but I did add unbound to suggests and update the shipped config file > > > to include a commented out entry about this to make it easy to enable > > > for those th

Bug#751560: opendkim: Please enable DNSSEC by default

2015-04-27 Thread Scott Kitterman
On Monday, April 27, 2015 09:57:06 AM Scott Kitterman wrote: > On Monday, April 27, 2015 09:48:47 AM James Cloos wrote: > > > "SK" == Scott Kitterman writes: > SK> The package is compiled with and linked against libunbound. I don't > have SK> DNSSEC, so I can't test this. Reading the docume

Bug#751560: opendkim: Please enable DNSSEC by default

2015-04-27 Thread Scott Kitterman
On Monday, April 27, 2015 09:48:47 AM James Cloos wrote: > > "SK" == Scott Kitterman writes: SK> The package is compiled with and linked against libunbound. I don't have SK> DNSSEC, so I can't test this. Reading the documentation, I think you SK> additionally have to install unbound (not ju

Bug#751560: opendkim: Please enable DNSSEC by default

2015-04-27 Thread James Cloos
> "SK" == Scott Kitterman writes: SK> The package is compiled with and linked against libunbound. I don't have SK> DNSSEC, so I can't test this. Reading the documentation, I think you SK> additionally have to install unbound (not just the lib) and configure it with a SK> trust anchor.

Bug#751560: opendkim: Please enable DNSSEC by default

2015-04-27 Thread Scott Kitterman
On Monday, April 27, 2015 12:36:06 PM cl...@jhcloos.com wrote: > > but I did add unbound to suggests and update the shipped config file > > to include a commented out entry about this to make it easy to enable > > for those that have DNSSEC. > > That commented-out line is of no value; uncommenting

Bug#751560: opendkim: Please enable DNSSEC by default

2015-04-27 Thread cloos
> but I did add unbound to suggests and update the shipped config file > to include a commented out entry about this to make it easy to enable > for those that have DNSSEC. That commented-out line is of no value; uncommenting it generates an unrecognized config error on restart. OpenDKIM only sup

Bug#751560: opendkim: Please enable DNSSEC by default

2015-04-26 Thread Scott Kitterman
On Saturday, June 14, 2014 11:51:03 AM Kurt Roeckx wrote: > Package: opendkim > Version: 2.9.2-1 > Severity: important > > It seems that opendkim has support for DNSSEC, is compiled with > unbound, but the default config does not enable DNSSEC. It looks like DNSSEC needs both a defined trust anch

Bug#751560: opendkim: Please enable DNSSEC by default

2014-06-14 Thread Kurt Roeckx
Package: opendkim Version: 2.9.2-1 Severity: important It seems that opendkim has support for DNSSEC, is compiled with unbound, but the default config does not enable DNSSEC. Kurt -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? C