[Pdns-dev] Invalid signer in RRSIG for CNAME where CNAME target zone is on the same server

Peter van Dijk peter.van.dijk at netherlabs.nl
Mon Dec 12 17:14:40 CET 2011


Hello Jimmy,

On Dec 12, 2011, at 14:23 , Jimmy Bergman wrote:

> Just wanted to give heads up to the ones using the powerdns DNSSEC support in production that
> a client of mine ran into a problem with CNAME's pointing to another zone on the same server.
> 
> For such zones the RRSIG got an invalid signer name, causing validating bind resolvers to SERVFAIL.
> 
> A description of the problem and a patch can be found at:
> http://wiki.powerdns.com/trac/ticket/411

Your patch has been applied in rev 2314. Many thanks!

Kind regards,
Peter van Dijk


More information about the Pdns-dev mailing list