[Pdns-users] DNSSEC Slave: RRSIG matching

bert hubert bert.hubert at netherlabs.nl
Thu Jun 9 13:20:01 UTC 2011


On Thu, Jun 09, 2011 at 02:57:44PM +0200, Christof Meerwald wrote:
> My suspicion is that PowerDNS doesn't just use the RRSIG for the SOA
> record in the DNS response, but looks for the maximum timestamp in any
> RRSIG in the DNS response (even if that might be in the additional
> section)?

Very good analysis! Fix is in r2209, thanks. Also available through
powerdnssec.org/downloads.

	Bert



More information about the Pdns-users mailing list