[dns-operations] DNSViz 0.6.7 (FreeBSD 11.1-RELEASE-p10) reports all but first NSEC3 RRSIG as "BOGUS"
Viktor Dukhovni
ietf-dane at dukhovni.org
Mon Aug 6 17:54:45 UTC 2018
Thanks. I installed the devel snapshot of graphviz, and the problem is gone,
much appreciated! I can now generate matching results independently, see
below...
> On Aug 6, 2018, at 12:32 PM, Casey Deccio <casey at deccio.net> wrote:
>
>>> The problem is actually caused by a bug in graphviz. I first noticed it in 2016:
>>>
>>> https://groups.google.com/forum/#!topic/pygraphviz-discuss/rkoqKhN-R9o
>>>
>>> Then there was an issue filed in 2017:
>>>
>>> https://github.com/ellson/MOTHBALLED-graphviz/issues/1252
>>>
>>> Apparently it had been fixed in the development version, but had not been backported to 2.39/2.40. I haven't done enough poking around to find out which graphviz patch(es) need to be backported and log an official issue, but it could be done here:
>>>
>>> https://gitlab.com/graphviz/graphviz/issues
{
"name": "9MFR2OMBDF81GDKCUF061OMEJQKILG4R.transip.nl.",
"rdata": [
"1 0 100 d49622cfe9b651eb 9MO6DHSRG3KU7A56D5FNASQE5AMA8S4D A MX AAAA RRSIG"
],
"rrsig": {
"sig": "FHbn898jmUu0NogE8y3WhjpJDWtZWuD84TTi7zaWQWqte5qmfCX12M/mKXKmOP5Z3tmS/0uAz+9GHM2iwsK5HllN//WtNZWGOYQBL0Ah46kAhH9FGbAVz7ZUt7lG2rE3FXrCKWvCulIiFm4P5KmIv3wwDI4tDB233ET+VUFW6+o=",
"status": "VALID"
},
"status": "SECURE"
}
{
"name": "V76GL0PAGI9QD1JD6EAHT3PCHPPVCRKO.transip.nl.",
"rdata": [
"1 0 100 d49622cfe9b651eb V7LS6RI0659KANKL96OE5JOK5DB3QLT1 A RRSIG"
],
"rrsig": {
"sig": "LraWdQZpDada4DTiduutHGExok6A6d6L01W5k5Gd0oDdZzNBQbkth1lu9i5cCzx+RmesXSI9RQ11D+QO/Rbhf0QkedlWdHnWZDXsxQEFU3vKJcF1aR48VRfO/6rMuFecSo3tbIJU6ebW3MrUP1ef7v2jkHaOX064tiyLwsEtBW0=",
"status": "VALID"
},
"status": "SECURE"
}
{
"name": "23J0JOEEPMKN4SR9SSDPL0SEBEA8R110.transip.nl.",
"rdata": [
"1 0 100 d49622cfe9b651eb 271FTOUB3CVOKVRJ5FFOLDUM9VRU3T4M CNAME RRSIG"
],
"rrsig": {
"sig": "ohWd/eXxZl7zb8GXJjycnfSKNrm7bXfFs8WgRBQsniS62F+/nIJF1XQvarjk42idsKmExSz4xSrrbHWQibxDJf/Vksy8hv8JG1NcECYuKFhllP+A4BOynPWAwwC/IwQRgmK1LWPJ0baj0Gjs5ogCk9pfguOn7xyp9aQ8Aj8hEfI=",
"status": "VALID"
},
"status": "SECURE"
}
--
Viktor.
More information about the dns-operations
mailing list