[Pkg-dns-devel] Bug#877683: Bug#877683: jessie version of dns-root-data lacks new ksk in root.ds

Sergio Gelato Sergio.Gelato at astro.su.se
Thu Oct 19 21:23:08 UTC 2017


* Daniel Kahn Gillmor [2017-10-19 15:44:40 -0400]:
> However, i'm not convinced that dnssec-dsfromkey is at fault, because i
> think the versions of dnssec-dsfromkey in stretch and buster both have
> the same behavior.

It turns out the following change from version 2017020200 of the package
was not included in the jessie backport:

  * Rewrite DS creation check to xml2 and ldnsutils, as neither xmllint
    nor bind9utils handle multiple DNSKEY in one file correctly



More information about the pkg-dns-devel mailing list