[Pdns-users] DNSSEC name not resolved

Thu Apr 28 15:28:22 UTC 2016

Hi Frederico,

On Thu, 28 Apr 2016 15:52:27 +0100
Federico Olivieri <lvrfrc87 at gmail.com> wrote:

> On my dns server running pdns recursor I have noticed that I am not able to
> reslove the domain www.hollandandbarrett.com if I have DNSSEC enabled

This is a bug in the current Alpha or the recursor, where Insecure delegations in
NSEC3-zones are seen as BOGUS. This was fixed yesterday in master [1,2] and will
be part of the upcoming prerelease.

Best regards,

Pieter

1 - https://github.com/PowerDNS/pdns/commit/9503aa8413eaf4221341bcd008df5d2765b576df
2 - https://github.com/PowerDNS/pdns/commit/528c121818fe2639016dbeaea60b913e8e60d848

-- 
Pieter Lexis
PowerDNS.COM BV -- https://www.powerdns.com