Package: unbound-host
Version: 1.4.12-1
Severity: normal
Dear Maintainer,
Using a simple "aptitude install unbound-host", the installed
unbound-host doesn't seem to know about the root trust anchor. And
there is no description in the man page, or in
/ush/share/doc/unbound-host, about how to get and install this anchor.
The DNS root is now signed. Since I expect most people will use the
root trust anchor, then it would make sense for this to be
preconfigured. If the root anchor is changed, then an update can be
put into the Debian volative repository.
To document that the current unbound-host installation don't know
about the root trust anchor, I ran the following commands:
t@h ~> unbound-host -v isc.org
isc.org has address 149.20.64.42 (insecure)
isc.org has IPv6 address 2001:4f8:0:2::d (insecure)
isc.org mail is handled by 10 mx.ams1.isc.org. (insecure)
isc.org mail is handled by 10 mx.pao1.isc.org. (insecure)
t@h ~> unbound-host -v -y ". IN DS 19036 8 2
49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5" isc.org
isc.org has address 149.20.64.42 (secure)
isc.org has IPv6 address 2001:4f8:0:2::d (secure)
isc.org mail is handled by 10 mx.pao1.isc.org. (secure)
isc.org mail is handled by 10 mx.ams1.isc.org. (secure)
Regards, Thue
PS: why doesn't running
t@h ~> unbound-host isc.org
isc.org has address 149.20.64.42
isc.org has IPv6 address 2001:4f8:0:2::d
isc.org mail is handled by 10 mx.pao1.isc.org.
isc.org mail is handled by 10 mx.ams1.isc.org.
Throw a warning or error, since by running with -v I can see that validation
failed?
-- System Information:
Debian Release: wheezy/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.0.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=da_DK.UTF-8, LC_CTYPE=da_DK.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages unbound-host depends on:
ii libc6 2.13-21
ii libev4 1:4.04-1
ii libgcc1 1:4.6.1-10
ii libldns1 1.6.10-2
ii libpython2.6 2.6.7-4
ii libssl1.0.0 1.0.0e-2
ii libunbound2 1.4.12-1
unbound-host recommends no packages.
unbound-host suggests no packages.
-- no debconf information
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
