Re: [Pdns-users] pdns/gmysql/slave for signed zone: records being mangled

2011-01-25 Thread Mark Huizer
On 1/25/2011 8:32, bert hubert wrote: After some off-list discussion, we found that Mark runs 2.9.22, which indeed has 'padding' issues on base64 RRSIG records. In any case, slaving a DNSSEC zone to 2.9.22 is of little use since while it can serve DNSSEC records (albeit slightly damaged as above

Re: [Pdns-users] pdns/gmysql/slave for signed zone: records being mangled

2011-01-24 Thread Mark Huizer
On 1/24/2011 0:04, power...@dns-lab.com wrote: On Sun, 23 Jan 2011, Mark Huizer wrote: # DIG RRSIG @ns.example.com someentry.example.com Keep in mind that the limit can sit in dig, not powerdns. Especially occurs at older version from a default OS install. So what about $ drill

[Pdns-users] pdns/gmysql/slave for signed zone: records being mangled

2011-01-23 Thread Mark Huizer
Hello there, I recently switched a machine from bind to PowerDNS, and 99% works like a charm. My only issue is with a slave zone that uses DNSSEC. After changing the length of the content field in the database (DNSKEY didn't fit otherwise), I'm left with an issue with RRSIG records. If I take