[dns-operations] DNSViz 0.6.7 (FreeBSD 11.1-RELEASE-p10) reports all but first NSEC3 RRSIG as "BOGUS"

Viktor Dukhovni ietf-dane at dukhovni.org
Mon Aug 6 17:54:45 UTC 2018


Thanks.  I installed the devel snapshot of graphviz, and the problem is gone,
much appreciated!  I can now generate matching results independently, see
below...

> On Aug 6, 2018, at 12:32 PM, Casey Deccio <casey at deccio.net> wrote:
> 
>>> The problem is actually caused by a bug in graphviz.  I first noticed it in 2016:
>>> 
>>> https://groups.google.com/forum/#!topic/pygraphviz-discuss/rkoqKhN-R9o
>>> 
>>> Then there was an issue filed in 2017:
>>> 
>>> https://github.com/ellson/MOTHBALLED-graphviz/issues/1252
>>> 
>>> Apparently it had been fixed in the development version, but had not been backported to 2.39/2.40.  I haven't done enough poking around to find out which graphviz patch(es) need to be backported and log an official issue, but it could be done here:
>>> 
>>> https://gitlab.com/graphviz/graphviz/issues

{
  "name": "9MFR2OMBDF81GDKCUF061OMEJQKILG4R.transip.nl.",
  "rdata": [
    "1 0 100 d49622cfe9b651eb 9MO6DHSRG3KU7A56D5FNASQE5AMA8S4D A MX AAAA RRSIG"
  ],
  "rrsig": {
    "sig": "FHbn898jmUu0NogE8y3WhjpJDWtZWuD84TTi7zaWQWqte5qmfCX12M/mKXKmOP5Z3tmS/0uAz+9GHM2iwsK5HllN//WtNZWGOYQBL0Ah46kAhH9FGbAVz7ZUt7lG2rE3FXrCKWvCulIiFm4P5KmIv3wwDI4tDB233ET+VUFW6+o=",
    "status": "VALID"
  },
  "status": "SECURE"
}
{
  "name": "V76GL0PAGI9QD1JD6EAHT3PCHPPVCRKO.transip.nl.",
  "rdata": [
    "1 0 100 d49622cfe9b651eb V7LS6RI0659KANKL96OE5JOK5DB3QLT1 A RRSIG"
  ],
  "rrsig": {
    "sig": "LraWdQZpDada4DTiduutHGExok6A6d6L01W5k5Gd0oDdZzNBQbkth1lu9i5cCzx+RmesXSI9RQ11D+QO/Rbhf0QkedlWdHnWZDXsxQEFU3vKJcF1aR48VRfO/6rMuFecSo3tbIJU6ebW3MrUP1ef7v2jkHaOX064tiyLwsEtBW0=",
    "status": "VALID"
  },
  "status": "SECURE"
}
{
  "name": "23J0JOEEPMKN4SR9SSDPL0SEBEA8R110.transip.nl.",
  "rdata": [
    "1 0 100 d49622cfe9b651eb 271FTOUB3CVOKVRJ5FFOLDUM9VRU3T4M CNAME RRSIG"
  ],
  "rrsig": {
    "sig": "ohWd/eXxZl7zb8GXJjycnfSKNrm7bXfFs8WgRBQsniS62F+/nIJF1XQvarjk42idsKmExSz4xSrrbHWQibxDJf/Vksy8hv8JG1NcECYuKFhllP+A4BOynPWAwwC/IwQRgmK1LWPJ0baj0Gjs5ogCk9pfguOn7xyp9aQ8Aj8hEfI=",
    "status": "VALID"
  },
  "status": "SECURE"
}


-- 
	Viktor.





More information about the dns-operations mailing list