[Pdns-users] DNSSEC Slave: RRSIG matching

[Christof Meerwald]

Hi,

I think I have found another problem related to RRSIG matching - this
time I am trying to use PowerDNS as a slave for a bind master. My
PowerDNS always thinks that the RRSIGs don't match.

My suspicion is that PowerDNS doesn't just use the RRSIG for the SOA
record in the DNS response, but looks for the maximum timestamp in any
RRSIG in the DNS response (even if that might be in the additional
section)?


Christof

-- 

http://cmeerw.org                              sip:cmeerw at cmeerw.org
mailto:cmeerw at cmeerw.org                   xmpp:cmeerw at cmeerw.org