[Pkg-dns-devel] Bug#877683: Bug#877683: jessie version of dns-root-data lacks new ksk in root.ds

[Daniel Kahn Gillmor]

On Wed 2017-10-04 14:45:30 +0200, Sergio Gelato wrote:
> * Sergio Gelato [2017-10-04 11:26:02 +0200]:
>> The corresponding package in stretch-updates looks OK. Could it be that the
>> one in jessie-updates needs to be built with a newer version of bind9utils?
>
> Indeed it seems that jessie's (including jessie-updates') dnssec-dsfromkey
> only processes the first key in the file.

I can also confirm that the jessie package only has the first key.

However, i'm not convinced that dnssec-dsfromkey is at fault, because i
think the versions of dnssec-dsfromkey in stretch and buster both have
the same behavior.

So more digging needs to be done to figure out why this is happening
on jessie.

    --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 832 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-dns-devel/attachments/20171019/50ba5211/attachment-0001.sig>