Re: [Dnsmasq-discuss] DNSSEC validation failing on Cloudflare test domain

2019-07-17 Thread Hamish Moffatt
It looks like it's the same. I can't query the www.vp4.navy.mil site listed in that other report with validation enabled either. dnsmasq[14688]: 323 192.168.42.2/60372 query[A] www.vp4.navy.mil from 192.168.42.2 dnsmasq[14688]: 323 192.168.42.2/60372 forwarded www.vp4.navy.mil to 1.1.1.1

Re: [Dnsmasq-discuss] Dnsmasq-discuss Digest, Vol 170, Issue 5

2019-07-17 Thread Jayke Peters
Can you please unsubscribe me from your mailing list? Thanks! On Tue, Jul 9, 2019 at 6:05 AM < dnsmasq-discuss-requ...@lists.thekelleys.org.uk> wrote: > Send Dnsmasq-discuss mailing list submissions to > dnsmasq-discuss@lists.thekelleys.org.uk > > To subscribe or unsubscribe via the

Re: [Dnsmasq-discuss] DNSSEC validation failing on Cloudflare test domain

2019-07-17 Thread Simon Kelley
I'm not in a position to look at this for a few days, but in the meantime, http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2019q1/012910.html discusses a situation which looks, at least superficially, similar. It might be worth turning on DNS logging and seeing if the similarity goes

Re: [Dnsmasq-discuss] crash with DNSSEC on 2.80

2019-07-17 Thread Graham Menhennitt
Thanks for replying, Simon. I won't be able to test until the weekend. Graham On 16/7/19 7:06 am, Simon Kelley wrote: Ugh, that's nasty. Thanks for the good bug report. It this reproducible? A domain which when validated always prompts a crash would be very useful. From the information we

[Dnsmasq-discuss] DNSSEC validation failing on Cloudflare test domain

2019-07-17 Thread Hamish Moffatt
Hi, I'm trying to enable DNSSEC validation in dnsmasq 2.80, on my OpenWRT router. For upstream, I'm using 1.1.1.1. With DNSSEC validation on, when I visit the Cloudflare test site https://www.cloudflare.com/ssl/encrypted-sni/ , it says it can't determine if I have secure DNS enabled. It's