[Touch-packages] [Bug 1825378] Re: systemd-networkd doesn't set wireguard peer endpoint

2019-05-31 Thread jrb0001
disco-proposed fixed it for me as well: - Clean disco installation. - Create .netdev file. - reboot --> Endpoint is not set. - Update systemd from disco-proposed. - reboot --> Endpoint is set. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is

[Touch-packages] [Bug 1796501] Re: systemd-resolved tries to mitigate DVE-2018-0001 even if DNSSEC=yes

2019-04-08 Thread jrb0001
Has there been any progress so far? systemd-resolved would be nice in theory, but not if it breaks half of the websites like it did before I stopped using it. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to systemd in Ubuntu.

[Touch-packages] [Bug 1796501] Re: systemd-resolved tries to mitigate DVE-2018-0001 even if DNSSEC=yes

2018-10-23 Thread jrb0001
I think the downgrade behaviour of systemd-resolved is the same as in that upstream bug although it is triggered differently. Except that it only breaks that single NXDOMAIN query in my case while it sounds like a permanent failure in the upstream bug. -- You received this bug notification becaus

[Touch-packages] [Bug 1796501] Re: systemd-resolved tries to mitigate DVE-2018-0001 even if DNSSEC=yes

2018-10-06 Thread jrb0001
** Attachment added: "Filtered packet capture" https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1796501/+attachment/5198078/+files/systemd-resolved-bug.pcapng -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to systemd i

[Touch-packages] [Bug 1796501] [NEW] systemd-resolved tries to mitigate DVE-2018-0001 even if DNSSEC=yes

2018-10-06 Thread jrb0001
Public bug reported: I ask systemd-resolved through dig to resolve the SOA of test.asdf. (doesn't exist) but it returns SERVFAIL instead of NXDOMAIN. It seems to do the following steps: 1. Ask upstream for SOA of test.asdf. with EDNS0, DO-bit and 4k size. 2. Ask upstream for SOA of test.asdf. wi