Bug#954490: systemd: resolved.conf "allow-downgrade" doesn't work

2020-04-15 Thread Zbigniew Jędrzejewski-Szmek
On Sat, Apr 04, 2020 at 10:41:31AM +0300, Fanis Dokianakis wrote: > I confirm that this bug exists after upgrading systemd. Systemd-resolved > *sometimes* does not downgrade and SERVERFAILS on all domains that do not > have a signature dns record. That's not what "allow-downgrade" means. The downg

Bug#954490: systemd: resolved.conf "allow-downgrade" doesn't work

2020-04-04 Thread Fanis Dokianakis
I confirm that this bug exists after upgrading systemd. Systemd-resolved *sometimes* does not downgrade and SERVERFAILS on all domains that do not have a signature dns record. The error with resolvectl query is $ resolvectl query example.domain example.domain: resolve call failed: DNSSEC validatio

Bug#954490: systemd: resolved.conf "allow-downgrade" doesn't work

2020-03-22 Thread Michael Biebl
Control: severity -1 normal Control: tags -1 moreinfo Am 22.03.20 um 08:44 schrieb Nicola: > Package: systemd > Version: 244.3-1 > Severity: important > > Dear Maintainer, > > The default DNSSEC="allow-downgrade" doesn't work and the result is that DNS > queries doesn't work. > > Temporally fix