[Pkg-dns-devel] Bug#877683: Bug#877683: jessie version of dns-root-data lacks new ksk in root.ds

[Daniel Kahn Gillmor]

On Thu 2017-10-19 23:23:08 +0200, Sergio Gelato wrote:
> * Daniel Kahn Gillmor [2017-10-19 15:44:40 -0400]:
>> However, i'm not convinced that dnssec-dsfromkey is at fault, because i
>> think the versions of dnssec-dsfromkey in stretch and buster both have
>> the same behavior.
>
> It turns out the following change from version 2017020200 of the package
> was not included in the jessie backport:
>
>   * Rewrite DS creation check to xml2 and ldnsutils, as neither xmllint
>     nor bind9utils handle multiple DNSKEY in one file correctly

Thanks for the pointer.  This isn't the only problem, though, as the
build verification still isn't working out quite right.

after a bit of investigation, it looks like we're also missing a few
other commits, which i'll try to cherry-pick and build later tonight.

   --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 832 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-dns-devel/attachments/20171019/9d999b55/attachment.sig>