[Pdns-dev] Invalid signer in RRSIG for CNAME where CNAME target zone is on the same server
Peter van Dijk
peter.van.dijk at netherlabs.nl
Mon Dec 12 17:14:40 CET 2011
Hello Jimmy,
On Dec 12, 2011, at 14:23 , Jimmy Bergman wrote:
> Just wanted to give heads up to the ones using the powerdns DNSSEC support in production that
> a client of mine ran into a problem with CNAME's pointing to another zone on the same server.
>
> For such zones the RRSIG got an invalid signer name, causing validating bind resolvers to SERVFAIL.
>
> A description of the problem and a patch can be found at:
> http://wiki.powerdns.com/trac/ticket/411
Your patch has been applied in rev 2314. Many thanks!
Kind regards,
Peter van Dijk
More information about the Pdns-dev
mailing list