[Pkg-pdns-maintainers] Bug#675410: pdns-server: generates bogus rrsigs

[Florian Obser]

On 08/15/12 20:04, Marc Haber wrote:
> tags #675410 - moreinfo
> thanks
> 
> On Mon, Aug 13, 2012 at 06:49:05PM +0200, Florian Obser wrote:
>> Problem remains with:
>>
>> ii  pdns-backend-mysql                               3.1-4
>> ii  pdns-server                                      3.1-4
> 
> I think I have it now. Debian's PowerDNS is not built with Botan,
> since the autofoo code does not properly detect botan's includes on
> Debian. Upstream's pdns-static generates its keys with botan, which
> Debian's PolarSSL chokes on. It works the other way around.
> 
> I have built Debian PowerDNS packages with Botan support, with kind
> help of darix (upstream ticket #555), who fixed the autofoo stuff.
> 
> If you want to try the new packages, I can upload them to a web server
> if you say so.

This fixes the problem. perl's Net::DNS and
http://dnssec-debugger.verisignlabs.com successfully verify the zones.

> 
> Greetings
> Marc
>