Re: [Dnsmasq-discuss] dnssec-check-unsigned failure with v2.73rc9

2015-06-14 Thread Stéphane Guedon
Le vendredi 12 juin 2015, 13:16:09 Maciej Soltysiak a écrit : I think I have discovered what the problem is and it's unlikely to be dnsmasq. What I do is that I have a setup which is basically a split horizon: - users who are not on the service get A record for using.dnscrypt from a DNSSEC

Re: [Dnsmasq-discuss] DNSSEC failure with v2.73rc10

2015-06-14 Thread Toke Høiland-Jørgensen
Simon Kelley si...@thekelleys.org.uk writes: Thanks Toke, finding these failure cases and fixing them, one at a time, is very necessary, but somewhat gruelling. Yup, mapping out the DNS tree one corner case at a time. Appreciate the effort, and glad I can help in a small way! :) The two

Re: [Dnsmasq-discuss] dnssec-check-unsigned failure with v2.73rc9

2015-06-14 Thread Maciej Soltysiak
Hi, On Sun, Jun 14, 2015 at 9:06 AM, Stéphane Guedon steph...@22decembre.eu wrote: Le vendredi 12 juin 2015, 13:16:09 Maciej Soltysiak a écrit : A user on my service, who has dnssec-check-unsigned enabled gets an unsigned response from a signed zone and the intended reaction of dnsmasq

[Dnsmasq-discuss] Announce: dnsmasq-2.73

2015-06-14 Thread Simon Kelley
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 After many delays and tribulations, I've just released dnsmasq-2.73 Get it here: http://www.thekelleys.org.uk/dnsmasq/dnsmasq-2.73.tar.gz Release notes are below. Cheers, Simon. -

Re: [Dnsmasq-discuss] dnssec-check-unsigned failure with v2.73rc9

2015-06-14 Thread Maciej Soltysiak
On Fri, Jun 12, 2015 at 10:18 PM, Simon Kelley si...@thekelleys.org.uk wrote: On 12/06/15 12:16, Maciej Soltysiak wrote: I think I have discovered what the problem is and it's unlikely to be dnsmasq. Without doing an exhaustive analysis (I've done too many DNSSEC post-mortems recently)