From owner-dnssec-trac at kirei.se Wed Feb 2 13:27:14 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Wed, 02 Feb 2011 13:27:14 -0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #208: Auditor fails if domain name configured with trailing dot In-Reply-To: <065.b214dd5c7a3c09056dfbd271488e6099@kirei.se> References: <065.b214dd5c7a3c09056dfbd271488e6099@kirei.se> Message-ID: <074.37a756c0d33ee94c849d5ae9e38d1025@kirei.se> #208: Auditor fails if domain name configured with trailing dot ------------------------------------------+--------------------------------- Reporter: Ond?ej Sur? | Owner: alex Type: defect | Status: closed Priority: major | Component: Auditor Version: trunk | Resolution: fixed Keywords: | ------------------------------------------+--------------------------------- Changes (by alex): * status: new => closed * resolution: => fixed Comment: This should be fixed in ODS svn r4368 -- Ticket URL: OpenDNSSEC OpenDNSSEC From AlexD at nominet.org.uk Thu Feb 3 14:06:52 2011 From: AlexD at nominet.org.uk (Alex Dalitz) Date: Thu, 3 Feb 2011 14:06:52 +0000 Subject: [Opendnssec-develop] Auditor support Message-ID: <4B466243-F2AA-4226-B33A-E3698159A37E@nominet.org.uk> Hi - I've been wondering about the status of the auditor for opendnssec. IMHO, it was extremely useful to have this as a development and test tool, while coming up to the version 1.0 release of ODS. It still has its uses now, for high risk environments. However, for some installations, it is a bit of a pain to install (what with Ruby support in package managers and all), and the value it adds can be limited. Is it really worth the pain? ;-) IMHO, we should change the default installation to NOT install the auditor (leaving it optional), instead of the current default. WDYT? Thanks, Alex. From rickard.bellgrim at iis.se Thu Feb 3 14:23:52 2011 From: rickard.bellgrim at iis.se (Rickard Bellgrim) Date: Thu, 3 Feb 2011 15:23:52 +0100 Subject: [Opendnssec-develop] Auditor support In-Reply-To: <4B466243-F2AA-4226-B33A-E3698159A37E@nominet.org.uk> References: <4B466243-F2AA-4226-B33A-E3698159A37E@nominet.org.uk> Message-ID: On 3 feb 2011, at 15.06, Alex Dalitz wrote: > Hi - > > I've been wondering about the status of the auditor for opendnssec. IMHO, it was extremely useful to have this as a development and test tool, while coming up to the version 1.0 release of ODS. It still has its uses now, for high risk environments. > > However, for some installations, it is a bit of a pain to install (what with Ruby support in package managers and all), and the value it adds can be limited. > > Is it really worth the pain? ;-) > > IMHO, we should change the default installation to NOT install the auditor (leaving it optional), instead of the current default. > > WDYT? And it will also be tricky to integrate the Auditor with the new adapters. // Rickard From patrik.wallstrom at iis.se Thu Feb 3 16:05:49 2011 From: patrik.wallstrom at iis.se (=?iso-8859-1?Q?Patrik_Wallstr=F6m?=) Date: Thu, 3 Feb 2011 17:05:49 +0100 Subject: [Opendnssec-develop] Auditor support In-Reply-To: <4B466243-F2AA-4226-B33A-E3698159A37E@nominet.org.uk> References: <4B466243-F2AA-4226-B33A-E3698159A37E@nominet.org.uk> Message-ID: On Feb 3, 2011, at 3:06 PM, Alex Dalitz wrote: > Hi - > > I've been wondering about the status of the auditor for opendnssec. IMHO, it was extremely useful to have this as a development and test tool, while coming up to the version 1.0 release of ODS. It still has its uses now, for high risk environments. > > However, for some installations, it is a bit of a pain to install (what with Ruby support in package managers and all), and the value it adds can be limited. > > Is it really worth the pain? ;-) > > IMHO, we should change the default installation to NOT install the auditor (leaving it optional), instead of the current default. > > WDYT? It is still a useful tool to use when testing a setup, and for high-value zones to do auditing on a regular basis. But yes, we should default to not installing the auditor, as I don't think most users will benefit from it. Packaging Ruby is also getting harder, looking at the recent Debian announcements (one of the current maintainers is stepping down). But I am curious of how you see the auditor and future development work. Are you willing to having it adapted to the new adapter functionality? And is it possible, without too much work? -- Patrik Wallstr?m Project Manager, R&D .SE (Stiftelsen f?r Internetinfrastruktur) E-mail: patrik.wallstrom at iis.se Web: http://www.iis.se/ From AlexD at nominet.org.uk Thu Feb 3 16:19:36 2011 From: AlexD at nominet.org.uk (Alex Dalitz) Date: Thu, 3 Feb 2011 16:19:36 +0000 Subject: [Opendnssec-develop] Auditor support In-Reply-To: References: <4B466243-F2AA-4226-B33A-E3698159A37E@nominet.org.uk> Message-ID: > But I am curious of how you see the auditor and future development work. Are you willing to having it adapted to the new adapter functionality? And is it possible, without too much work? To be honest, I'm not entirely clear what the "new adapter functionality" actually means. If it means IXFR, and reading zone updates from a DB, then I'm not sure how much value the auditor can usefully add (other than checking individual RRSIGs, which are pretty much working correctly now). Key lifetime tracking can still be performed - but, IMHO, it would be better done by a monitor process watching the (possibly private) nameserver (as we have for .uk), rather than an in-line auditor process. If folks disagree, I'd be quite happy to write a new, stripped-down auditor which only did key lifetime and RRSIG checking. Again, I wouldn't see this as being the default installation option. Thanks, Alex. From matthijs at NLnetLabs.nl Fri Feb 4 08:46:37 2011 From: matthijs at NLnetLabs.nl (Matthijs Mekking) Date: Fri, 04 Feb 2011 09:46:37 +0100 Subject: [Opendnssec-develop] Auditor support In-Reply-To: References: <4B466243-F2AA-4226-B33A-E3698159A37E@nominet.org.uk> Message-ID: <4D4BBCED.6050306@nlnetlabs.nl> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, If it means reading a zone from a different source (like DB or AXFR, instead of file), I don't think the auditor needs much adaptations (if any at all). The signer makes copies of the unsigned and signed zone in file format, that it can directly feed to the auditor. IXFR is quite a different story. Best regards, Matthijs On 02/03/2011 05:19 PM, Alex Dalitz wrote: >> But I am curious of how you see the auditor and future development work. Are you willing to having it adapted to the new adapter functionality? And is it possible, without too much work? > > To be honest, I'm not entirely clear what the "new adapter functionality" actually means. If it means IXFR, and reading zone updates from a DB, then I'm not sure how much value the auditor can usefully add (other than checking individual RRSIGs, which are pretty much working correctly now). Key lifetime tracking can still be performed - but, IMHO, it would be better done by a monitor process watching the (possibly private) nameserver (as we have for .uk), rather than an in-line auditor process. > > If folks disagree, I'd be quite happy to write a new, stripped-down auditor which only did key lifetime and RRSIG checking. Again, I wouldn't see this as being the default installation option. > > Thanks, > > > Alex._______________________________________________ > Opendnssec-develop mailing list > Opendnssec-develop at lists.opendnssec.org > https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJNS7ztAAoJEA8yVCPsQCW5gZgH/2U3UyAtvHgNKfdx4CTpRO2y gH2TbHQFAQEwH+phjreX4M4vjQoD9/EGptoH4dmymKsL2kKF+VWpLSx375qzwvQi RSnoo8eVQY8VAyl7deIJ/Gy8j7OLaiSRz3MVE3YVVGQY6JI6e3rDFWQBxuZibtNl KTriMTPzTWj1Io8/aWk0FL7MxRxtm7QChGe/9EM8HpaE+loNauJGcXBailg69OpF MwUgCSbtbKRP/b94+CCWWTw9I6fLUdAO4ABqvr5WVWguw7vyTchPyblrhESulB4l W5xoRy2lWz9euljctNFzyjQoLpgY8/qOhKwQGocH8GGv15iHbhKkUBDLJ1JtuR8= =tP2t -----END PGP SIGNATURE----- From owner-dnssec-trac at kirei.se Sun Feb 6 23:30:08 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Sun, 06 Feb 2011 23:30:08 -0000 Subject: [Opendnssec-develop] =?utf-8?b?W09wZW5ETlNTRUNdICMyMDk6INCR0LU=?= =?utf-8?b?0YHQv9C70LDRgtC90L7QtSDQv9C+0YDQvdC+INCy0LjQtNC10L4=?= Message-ID: <047.0822be9191aba507af850ec7b776a26d@kirei.se> #209: ?????????? ????? ????? ----------------------+----------------------------------------------------- Reporter: anonymous | Owner: rb Type: defect | Status: new Priority: major | Component: Unknown Version: trunk | Keywords: ----------------------+----------------------------------------------------- http://video.xxxactions.info/gallery/21660 Rhyse Richards ????????? ? ??????? http://video.xxxactions.info/gallery/26628 ??????? ???? - ?????? ?????? http://video.xxxactions.info/gallery/25223 ????????? ??????????? ????????? http://video.xxxactions.info/gallery/25907 ??????????? ?????? ????? ???? http://video.xxxactions.info/gallery/21783 ??????????? Avy ????? ?????? http://video.xxxactions.info/gallery/27280 Roxy Panther ??????? ??????? http://video.xxxactions.info/gallery/22056 ????? ????? ???? ?? ???? ?????????? http://video.xxxactions.info/gallery/28209 ????????? ???? ? ???????? http://video.xxxactions.info/gallery/24703 ???? ????????? ????????? ???? http://video.xxxactions.info/gallery/25251 ???????? ????? ????? http://video.xxxactions.info/gallery/23317 ???????????????? ???????? ?? ??????? http://video.xxxactions.info/gallery/23065 ???????? ???????? ???????????? ????? http://video.xxxactions.info/gallery/13215 ?? ???????? ? ????? http://video.xxxactions.info/gallery/17978 ??????-?? ??? ???? ? ??? http://video.xxxactions.info/gallery/23604 ??????? ?????? ??? http://video.xxxactions.info/gallery/26321 ???????????? ???????? ? ??????????? ????? http://video.xxxactions.info/gallery/24787 ????? ?? ?????? http://video.xxxactions.info/gallery/28242 ??????????? ????? ? ???????? http://video.xxxactions.info/gallery/28633 ??????????? ??????????? ??????? ?? ??? ?????????? ????? http://video.xxxactions.info/gallery/28041 Kamy - ?????????? ??????? ?????????? -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Sun Feb 6 23:31:41 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Sun, 06 Feb 2011 23:31:41 -0000 Subject: [Opendnssec-develop] =?utf-8?b?W09wZW5ETlNTRUNdICMyMTA6INCR0LU=?= =?utf-8?b?0YHQv9C70LDRgtC90L7QtSDQv9C+0YDQvdC+INCy0LjQtNC10L4=?= Message-ID: <047.d38c8989ed4b1a7ce4022904b466d0d6@kirei.se> #210: ?????????? ????? ????? ----------------------+----------------------------------------------------- Reporter: anonymous | Owner: rb Type: defect | Status: new Priority: major | Component: Unknown Version: trunk | Keywords: ----------------------+----------------------------------------------------- http://video.xxxactions.info/gallery/23194 ?????? ????????? ???????? ????????? http://video.xxxactions.info/gallery/22923 Jenna Haze ?????? ??????? http://video.xxxactions.info/gallery/26998 ??? ???????? ????????? ???????? http://video.xxxactions.info/gallery/7779 ???????????? ??????? Naomi http://video.xxxactions.info/gallery/7992 ???????? ??????-???? ?????? ????????? ?? ??? ???? ??????????? http://video.xxxactions.info/gallery/8497 ???????? ????????? ? ???????? http://video.xxxactions.info/gallery/14 ??????????? ?????????? ??????????? ????? ?????????? http://video.xxxactions.info/gallery/6628 ?????????? ????????? ??????? http://video.xxxactions.info/gallery/8337 Naomi ???? ?????????? ???? ???????? ????????? http://video.xxxactions.info/gallery/2268 ????????????-??????? ?????????? ?????? ????????? http://video.xxxactions.info/gallery/13154 ???????? ????????? ?????????? ?????? ? ???? http://video.xxxactions.info/gallery/15073 Katie ??????? ????? ??????????? ???? http://video.xxxactions.info/gallery/9399 ??? ??????????? ????????? - ??? http://video.xxxactions.info/gallery/28227 Ally ??????? ?????? http://video.xxxactions.info/gallery/2697 ?????? ??????? ????? ?? ?????????? ???????? http://video.xxxactions.info/gallery/7493 ?????? ????????? ???????? ??????????? ???????????????? ??????? ?????? http://video.xxxactions.info/gallery/13697 ???????? ??????? ? ?????? ? ??? ???? ???????? ?????? http://video.xxxactions.info/gallery/10785 ???????? ????????? ? ?????? ??????? http://video.xxxactions.info/gallery/12677 ???????????? ???? Jena Vive Joli ? ?????????? ? ??? http://video.xxxactions.info/gallery/8288 ??? ????????? ? ??? ???????????? ???????? - ?????? ???????? http://video.xxxactions.info/gallery/13165 ?????????? ??????? ????? ????? ???? http://video.xxxactions.info/gallery/21408 ??????????? ????????? ?? ??????? ?? ????? ?????????? http://video.xxxactions.info/gallery/21743 ??????????? ????? ??????? ????????? ????? ? ????????? http://video.xxxactions.info/gallery/22714 ?????????? ??????? ????????? ????? ? ????????? http://video.xxxactions.info/gallery/25232 ????? ???? ???????? http://video.xxxactions.info/gallery/22926 ???????? ??? ??????? ? ???????? ??????????? ?????, ??? ?? ??????????? http://video.xxxactions.info/gallery/22854 ????? ??? ???? ?????? ????? ? ??? ??????????? ????? http://video.xxxactions.info/gallery/23644 ??????? ?????????? ???????? ?? ?????? ??????? http://video.xxxactions.info/gallery/26791 Tianna Lynn ??????? ??? ?????? http://video.xxxactions.info/gallery/12504 ??????????? ???? ???????? http://video.xxxactions.info/gallery/7291 Keri Sable - ???? ? ???? http://video.xxxactions.info/gallery/107 ?????? ???? ????? ? ???????? ???????? http://video.xxxactions.info/gallery/8262 ????????? ???????? ??????? ???? ???? ????????? ????? http://video.xxxactions.info/gallery/10 ??? ????????? - ??????? ??????? ? ?????, ????? ????? ??????? -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Sun Feb 6 23:32:52 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Sun, 06 Feb 2011 23:32:52 -0000 Subject: [Opendnssec-develop] =?utf-8?b?W09wZW5ETlNTRUNdICMyMTE6INCR0LU=?= =?utf-8?b?0YHQv9C70LDRgtC90L7QtSDQv9C+0YDQvdC+INCy0LjQtNC10L4=?= Message-ID: <047.eb2c3af221e20e3cfaedb196b24f7050@kirei.se> #211: ?????????? ????? ????? ----------------------+----------------------------------------------------- Reporter: anonymous | Owner: rb Type: defect | Status: new Priority: major | Component: Unknown Version: trunk | Keywords: ----------------------+----------------------------------------------------- http://video.xxxactions.info/gallery/6105 ??????? ????? ?????? ???????? ?? ????? http://video.xxxactions.info/gallery/21 ??????? ????? - ??????? ?????? http://video.xxxactions.info/gallery/14214 ???????????? ????????? Kayden Kross ? ???? http://video.xxxactions.info/gallery/16671 ???????? ???????????? ????? http://video.xxxactions.info/gallery/15044 ????? ???????? - ???? ? ????? http://video.xxxactions.info/gallery/15049 ????????? ????? ???????? ???????? ??????????? http://video.xxxactions.info/gallery/23191 ?????? ????????? ???????? ??????? ????? ???? http://video.xxxactions.info/gallery/22882 ??? ????? ?? ???? ????, ? ? ?????????? ?????? ??? ??? ? ??? http://video.xxxactions.info/gallery/23495 ??????? ??????? ????? ? ?????? ? ???? ???????? http://video.xxxactions.info/gallery/3115 ???? ? ???????? - ?????? ?? ????? ? ??? http://video.xxxactions.info/gallery/8335 Anetta Keys - ??????? ???? ? ???????????? ??????????? ?????? http://video.xxxactions.info/gallery/19795 Eva Angelina - ????????????????????? ?????????? http://video.xxxactions.info/gallery/2223 Teagan Presley ????? ??????? ?????? http://video.xxxactions.info/gallery/8996 ??????? ??????, ??????????? ??????? ? ??????? ???? http://video.xxxactions.info/gallery/14492 Georgia Jones ??????? ???????????? ? ???? http://video.xxxactions.info/gallery/343 Alektra Blue ? Julia Bond ?????????? ????-????? ????? http://video.xxxactions.info/gallery/19613 ???????????? ????? ? ????????? ???????? ??????? ???????????? http://video.xxxactions.info/gallery/22367 ???????? ????????? ??????? ????-????? ?????????? ? ?????? ??????? http://video.xxxactions.info/gallery/24078 ?????????? ??????? ????????? ?? ????? ?????????????? ?????????? http://video.xxxactions.info/gallery/15878 ??? ??????? ??????? ?? ??????????? ??????? ??? ?????? ??? http://video.xxxactions.info/gallery/13690 ???????? ??????? ???? ? ?????? ??????? http://video.xxxactions.info/gallery/13158 ???????? ???????? ?????? ???????? ?? ????????? http://video.xxxactions.info/gallery/13920 Gianna Michaels ?????????? ???????? ??? ???????? http://video.xxxactions.info/gallery/14213 ?????? Georgia Jones ??????????? ?? ??????? http://video.xxxactions.info/gallery/16955 ????????????? ?? ?????? ????????? ? ?????????? ???? http://video.xxxactions.info/gallery/22311 ?????????? ?????? ?? ????? ??????? ???????? http://video.xxxactions.info/gallery/23202 ??????? ????? ? ???????? ???????? ? ????, ???? ?? ? ??????? http://video.xxxactions.info/gallery/2988 ?????????? ???????? Vanessa Blue ?????? ?? ??? ???? http://video.xxxactions.info/gallery/7048 ????????? ???? ??????? http://video.xxxactions.info/gallery/16648 ??? ??? ? ??? ????? ???????? http://video.xxxactions.info/gallery/15454 Nina Hartley ????? ??? ? ?????? http://video.xxxactions.info/gallery/150 ??????????? ????? ??? http://video.xxxactions.info/gallery/21821 ???????? ?????? ?? ??????? ??? -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Sun Feb 6 23:34:05 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Sun, 06 Feb 2011 23:34:05 -0000 Subject: [Opendnssec-develop] =?utf-8?b?W09wZW5ETlNTRUNdICMyMTI6INCR0LU=?= =?utf-8?b?0YHQv9C70LDRgtC90L7QtSDQv9C+0YDQvdC+INCy0LjQtNC10L4=?= Message-ID: <047.1353c6d0107668a6643c9417edc0a0fa@kirei.se> #212: ?????????? ????? ????? ----------------------+----------------------------------------------------- Reporter: anonymous | Owner: rb Type: defect | Status: new Priority: major | Component: Unknown Version: trunk | Keywords: ----------------------+----------------------------------------------------- http://video.xxxactions.info/gallery/23598 ??????? ???????, ????????? ????? ??????? http://video.xxxactions.info/gallery/7521 ???????????? ????????? ???????? ? ?????????? ???? http://video.xxxactions.info/gallery/8364 ????????? ? ????? ????????? http://video.xxxactions.info/gallery/14055 ?????????? ??????? ??????? ?? ??? ???? ????????? http://video.xxxactions.info/gallery/2350 Lacey DuValle - ????? ??? ??????? http://video.xxxactions.info/gallery/12664 ???????? ????????????? ???????? ???????? ? ????????? http://video.xxxactions.info/gallery/13167 ??? ??????????? ????? ????? ?????? http://video.xxxactions.info/gallery/18961 ?????? ?????? ???????? ????????? http://video.xxxactions.info/gallery/22328 ??? ?????????? ????????? ?????????? ?????????? ??????? http://video.xxxactions.info/gallery/23246 ?????????? ?????????? ???? ? ????? http://video.xxxactions.info/gallery/22878 ???????? ????? ???????? ?????? ??? ??????, ????? ???? http://video.xxxactions.info/gallery/22765 ????????????? ??????????? ?????????? ?????????? ???? ??????????? ?????? http://video.xxxactions.info/gallery/11890 ??? ????? ?????? ???? ????????? ?? ??? ???? http://video.xxxactions.info/gallery/17878 ????? ??? ?????????? ????????? http://video.xxxactions.info/gallery/9067 ???????? ?????? - ??????????? ????? http://video.xxxactions.info/gallery/27001 ??????? ?????????? ??????? ?????? http://video.xxxactions.info/gallery/8713 Caramel Moore ??????? http://video.xxxactions.info/gallery/8377 ???????? ?????? (I deepthroat) - ????????????? http://video.xxxactions.info/gallery/11734 Lela ?????? ?????? http://video.xxxactions.info/gallery/14096 ???????? ??????? ????? ???? ???????? http://video.xxxactions.info/gallery/7329 ????? ??????? ???????? ? ???? ??????? ?????? ???? http://video.xxxactions.info/gallery/15674 ???????????? ???????? ????? http://video.xxxactions.info/gallery/26002 ????? ????? ?????? ??????? ???? ???????? http://video.xxxactions.info/gallery/535 ????????-??????????? ????? ???? ???? ???? http://video.xxxactions.info/gallery/7713 ????????? ???? ???????? http://video.xxxactions.info/gallery/3097 ???????? ????????? ?? ??????? http://video.xxxactions.info/gallery/8385 Daisy Mexicana, ?????????? ?????? ? ????????? ????? http://video.xxxactions.info/gallery/15880 ??????? - ????????? ?????? ?? ???????? ?????, ???? ?? ???????????? ?????? http://video.xxxactions.info/gallery/13155 ???????? ???? ?????????? ???????? ???????????? ?????? http://video.xxxactions.info/gallery/20646 ?????? ???????? ?????, ??????? ??? ????????? ?????????? ? ???? http://video.xxxactions.info/gallery/25519 ?????????? ????? ? ????? ?????? ??????? ? ???, ? ????? ? ??????? ?? ???? http://video.xxxactions.info/gallery/3258 ??????? ???????? ???????????? ?????? ????? ????????? http://video.xxxactions.info/gallery/7052 ????????? ? ???????? ?????? ???????????? ?????? http://video.xxxactions.info/gallery/6633 ??????? ???????? ??????????? ?????????? http://video.xxxactions.info/gallery/2207 ??????????? ????????? ?????????? -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Sun Feb 6 23:35:33 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Sun, 06 Feb 2011 23:35:33 -0000 Subject: [Opendnssec-develop] =?utf-8?b?W09wZW5ETlNTRUNdICMyMTM6INCR0LU=?= =?utf-8?b?0YHQv9C70LDRgtC90L7QtSDQv9C+0YDQvdC+INCy0LjQtNC10L4=?= Message-ID: <047.cd80bb0d993dc0806714aadaecb76a15@kirei.se> #213: ?????????? ????? ????? ----------------------+----------------------------------------------------- Reporter: anonymous | Owner: rb Type: defect | Status: new Priority: major | Component: Unknown Version: trunk | Keywords: ----------------------+----------------------------------------------------- http://video.xxxactions.info/gallery/8317 Amy Reid ?????? ??? ??????? http://video.xxxactions.info/gallery/22169 ??????? ???????? ???????? ???? http://video.xxxactions.info/gallery/26907 ???????? ???????? ???????? ?? ???? ????????????? ?????????, ? ????? ??????? http://video.xxxactions.info/gallery/24009 ???????? ??????? ????? ??????? ?????? http://video.xxxactions.info/gallery/23580 ????? ???? ??????????? ? ??????? ???? http://video.xxxactions.info/gallery/23161 ??????????? ??????????? ??????? ? ????? ? ?????? ???????? http://video.xxxactions.info/gallery/22847 ??? ??????? ?????? ? ????? ?????? http://video.xxxactions.info/gallery/24540 ???????? ??????????? ???????? ? ??????? ? ??? http://video.xxxactions.info/gallery/23115 ???? ?????????? ???????? ????? ? ?????? ? ? ???? ?????? http://video.xxxactions.info/gallery/24382 ???? ? ???????? ??? ???? ??????? ?????? ???????????? ? ?????????? http://video.xxxactions.info/gallery/25215 ????? ? ???????? ???? ??????? ???????????, ? ????? ???????????? ?????????? ????????? http://video.xxxactions.info/gallery/7278 ???????? ?????? Heather ? ?????? ?????? http://video.xxxactions.info/gallery/8132 ??????? ??????? ????, ? ??? ?????? ???????? http://video.xxxactions.info/gallery/8700 ??????????? ????????? ??????? ?? ??????, ??? ??? ????????????, ???? ?? ??????? http://video.xxxactions.info/gallery/157 ??????? ?????? ??????????? ???????? ?? ????? http://video.xxxactions.info/gallery/19782 ???????? ????????? ? ??????? ?????????? ??????????? ????? ??????? ? ???????? ?????????????? http://video.xxxactions.info/gallery/186 ????? ?? ????????? ???? ?????? ? ???? http://video.xxxactions.info/gallery/24203 Madelyn ? Phoenix ???????? ???? ????????? http://video.xxxactions.info/gallery/24901 ??????????? ????????? ? ?????? ????????? ?????, ?? ???? ?????? ???????? ? ???? http://video.xxxactions.info/gallery/22944 ??? ??????? ???????? ?????????? ????-????? ????? http://video.xxxactions.info/gallery/8180 ?????????? ??????? ?????? ??? ? ?? ???????? ????????? http://video.xxxactions.info/gallery/3202 ????????? ????? ???? ??????? ?? ??? ???? http://video.xxxactions.info/gallery/2681 ????? ??????????? ?? ?????? ????????? ?????? ????? ? ?????????? http://video.xxxactions.info/gallery/10910 ??????? ????????? ? ?????? ??????? http://video.xxxactions.info/gallery/15886 ????? ???????? ?????????? ?????? http://video.xxxactions.info/gallery/9653 ??????????? ???????? ?????????? ??????? ????? ? ????? http://video.xxxactions.info/gallery/14033 ???????? ??????????? ??????? ?????????? ???????? http://video.xxxactions.info/gallery/16942 Darryl ? Morgan ?????????? ???? ? ????? http://video.xxxactions.info/gallery/23200 ?????????? ???????? ?????????? ???????? ? ??? ??? http://video.xxxactions.info/gallery/22846 ????? ???????? ???????????? ? ?????????? http://video.xxxactions.info/gallery/24049 ??? ????? ?????? ?? ??? ??? http://video.xxxactions.info/gallery/20819 ??????? ?????? ????? ???????? ???-?????? ?? ????????? http://video.xxxactions.info/gallery/1472 ?????? ??????? ???????? ???????? ?? ??? ????, ???????? ????? ? ???????? ??? ???? -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Sun Feb 6 23:36:57 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Sun, 06 Feb 2011 23:36:57 -0000 Subject: [Opendnssec-develop] =?utf-8?b?W09wZW5ETlNTRUNdICMyMTQ6INCR0LU=?= =?utf-8?b?0YHQv9C70LDRgtC90L7QtSDQv9C+0YDQvdC+INCy0LjQtNC10L4=?= Message-ID: <047.2232c86e98b1d57d853fa6e66b6516d2@kirei.se> #214: ?????????? ????? ????? ----------------------+----------------------------------------------------- Reporter: anonymous | Owner: rb Type: defect | Status: new Priority: major | Component: Unknown Version: trunk | Keywords: ----------------------+----------------------------------------------------- http://video.xxxactions.info/gallery/8903 ?????????? ? ??????? ??????? ???????? ????? ?? ??????? ????? http://video.xxxactions.info/gallery/162 ???????????? ????? - ????????????? ??????? ????????? ?????????? http://video.xxxactions.info/gallery/15321 ????????-????? ? ????????? ??????????? ????????????? http://video.xxxactions.info/gallery/12701 ??????????? ??????? ? ???????????? ???? ?? ??????? ??????? http://video.xxxactions.info/gallery/12661 ??????? ????? ??????? ???????? ?? ??????? ????????? http://video.xxxactions.info/gallery/20661 ??????????? ????? ???? ???????? ??????? -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Mon Feb 7 04:37:58 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Mon, 07 Feb 2011 04:37:58 -0000 Subject: [Opendnssec-develop] [OpenDNSSEC] #215: Minor change to NOT_READY_KEY error message Message-ID: <078.fd190b119962b07be00a733def89935c@kirei.se> #215: Minor change to NOT_READY_KEY error message -----------------------------------------------------+---------------------- Reporter: Sebastian Castro | Owner: sion Type: enhancement | Status: new Priority: trivial | Component: Enforcer Version: trunk | Keywords: -----------------------------------------------------+---------------------- When you reach the state of not having ready keys for a zone, the system complains with a generic WARNING. If you are trapping those warnings and feeding them into a monitoring system, you will need with an error that doesn't say anything useful. You will find attached a small patch that adds the key type and zone that triggered the error. -- Ticket URL: OpenDNSSEC OpenDNSSEC From Roland.vanRijswijk at surfnet.nl Mon Feb 7 15:33:08 2011 From: Roland.vanRijswijk at surfnet.nl (Roland van Rijswijk) Date: Mon, 7 Feb 2011 16:33:08 +0100 Subject: [Opendnssec-develop] Meeting minutes Enforcer TNG meeting 2011-02-07 Message-ID: <7F3BE111-A068-4D84-8D9D-54ADACC9E07F@surfnet.nl> Hi guys, The meeting minutes for the Enforcer TNG can be found on the Wiki: http://trac.opendnssec.org/wiki/Meetings/Minutes/2011-02-07 Cheers, Roland -- Roland M. van Rijswijk -- SURFnet Middleware Services -- t: +31-30-2305388 -- e: roland.vanrijswijk at surfnet.nl From jakob at kirei.se Tue Feb 8 09:34:46 2011 From: jakob at kirei.se (Jakob Schlyter) Date: Tue, 8 Feb 2011 10:34:46 +0100 Subject: [Opendnssec-develop] Buildfarm Message-ID: hi, I'm slowly getting the build environment on the build farm ready, and I'm documenting the progress on the WIKI at http://trac.opendnssec.org/wiki/BuildFarm. If you need accounts, please talk to Roland. jakob From owner-dnssec-trac at kirei.se Tue Feb 8 12:16:56 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Tue, 08 Feb 2011 12:16:56 -0000 Subject: [Opendnssec-develop] =?utf-8?b?W09wZW5ETlNTRUNdICMyMTY6INGC0L4=?= =?utf-8?b?0LvRgdGC0YvQtSDQv9GA0L7RgdGC0LjRgtGD0YLQutC4INGE0L7RgtC+?= Message-ID: <040.ebd0e22a1eeebebbac577e587878bf65@kirei.se> #216: ??????? ??????????? ???? -------------------------------------+-------------------------------------- Reporter: ??????? ??????????? ???? | Owner: rb Type: defect | Status: new Priority: major | Component: Unknown Version: trunk | Keywords: ??????? ??????????? ???? -------------------------------------+-------------------------------------- ????? ?????????? ??????? ?????? ????? http://deshevye- individualki.co.cc/index.html ????? ? ??????? ? ????????? ????????? ?????, ?? ??????? ????????? ?? ????? ??????? ?? ?????????. http://deshevye- individualki.co.cc/news-6.html ????????????? ??????????? ????? ???????? ???? ?????? ? ?????? ????? ?????? http://elitnye-putany.co.cc/index.html ????? ????????? ? ????????? ?????????? ??????? ???????. O?? ??????????? ??????, http://elitnye-putany.co.cc/news-10.html www ????? ru ???????? ??????? ? ?? ????. ????? ??? ???????? ???? - ??? ????? ?? ????? http ://funny-putana.co.cc/cat_1.html ????? ??????? ??????????? ? ?????? ??????? ????, ? ????? ????? ?? ? ???. http://funny- putana.co.cc/page-12.html ??????????? ???????????? ???????????? ??????? ??? ????????? ??? ??? ?????? ????, ????????????? ????????? ???, ????? ???? ??????? ? ????? ??????? http://individualki-minet.co.cc/index.html ???????? ??????????? ?????? ?????????? ?????????? ???? ? ?????. ?? ???????? ?????? ? ??????? ???? ??????? ? ???????? ???? ??????? ?? ?????????, ????? http://individualki-minet.co.cc/new-11.html ?????? ??????????? ?????????? ??????. ?????? ?????????????? ???? ?????? ??? ??????? ??? ?????????? ???????? ????, ?? ???? ?? ?????????. ?? ???????? ?????? ? ?? ???? ? ??????? ???? ?? ????????? http://intimrelax.co.cc/index.html ????????????? ?? ?????? ???????? ????? ???????? ?????????? ???? ?????????? ?????? ??????, ???????????? ?????? ?????? ????? ??????. ????? ??????? ? ??????????, ??????? ?? ????? ?? ???????????? ???????? ???????. http://intimrelax.co.cc/news-10.html ????? ?????????? ??? ?????????? ??? ?????? ???? ?????? ? ?????????? ?? ??????? ? ?????? ???????????? ??????, ??? ?? ?????? ????????, ??? 3 ???? ????? ?????????? ?? ?????????? ? ??? ?????????????. ????? ??????? ? ???? ????? ? ????????? ?????? ??????? ??????? http://superhookers.co.cc/index.html ??????? ????? ????? ????? ??? ??????????? ???????, ???????? ??? ???????? ??????, ??????? ? ??????? ????. http://superhookers.co.cc/pages_28.html ??????????? ????? ??????????? ??????? ???? ???????? ??????? ???? ???? ?? ?????????. ???? ????????? ?????????? ? ????????. ?? ?????? ??????, ? ??????? ????????? ?? ???? http://sweet-dreams.co.cc/index.html ??????? ??????????? ???? ???? ????????, ?? ?????? ???????? ??????, ???? ?? ?????????? ? ??????? ?????? ?? ?????? ????????? http://sweet- dreams.co.cc/docs_121.html ????? ?????? ? ?????????? ???????? ?????? ?????? ???????. -- Ticket URL: OpenDNSSEC OpenDNSSEC From rick at openfortress.nl Tue Feb 8 13:33:07 2011 From: rick at openfortress.nl (Rick van Rein) Date: Tue, 8 Feb 2011 13:33:07 +0000 Subject: [Opendnssec-develop] Better late than never: minutes Message-ID: <20110208133307.GA16304@phantom.vanrein.org> Hello, I had forgotten to put the last phone meeting's notes online, but here they are: http://trac.opendnssec.org/wiki/Meetings/Minutes/2011-01-26 Sorry for the delay. Cheers, -Rick From owner-dnssec-trac at kirei.se Tue Feb 8 18:31:28 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Tue, 08 Feb 2011 18:31:28 -0000 Subject: [Opendnssec-develop] =?utf-8?b?UmU6IFtPcGVuRE5TU0VDXSAjMTU5OiA=?= =?utf-8?b?0KHQvdGP0YLRjCDQv9GA0L7RgdGC0LjRgtGD0YLQutGDINCyINCc0L7RgdC6?= =?utf-8?b?0LLQtQ==?= In-Reply-To: <047.ae256a906fce183ce9a3916adebbd970@kirei.se> References: <047.ae256a906fce183ce9a3916adebbd970@kirei.se> Message-ID: <062.69cc0a370c883843f2f43cfd53b4e2b5@kirei.se> #159: ????? ??????????? ? ?????? ----------------------+----------------------------------------------------- Reporter: anonymous | Owner: alex Type: defect | Status: closed Priority: blocker | Component: Auditor Version: | Resolution: invalid Keywords: | ----------------------+----------------------------------------------------- Comment (by anonymous): http://seksplace.ru/diary/posts.phtml?user_id=504869317&hit=8 -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Wed Feb 9 14:39:30 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Wed, 09 Feb 2011 14:39:30 -0000 Subject: [Opendnssec-develop] [OpenDNSSEC] #216: migrate_keyshare_sqlite3.pl broken Message-ID: <077.69322dad9fb2997a31ce2ef3dc7a0297@kirei.se> #216: migrate_keyshare_sqlite3.pl broken -----------------------------------------------------+---------------------- Reporter: Marc Dequ?nes (Duck) | Owner: sion Type: defect | Status: new Priority: major | Component: Enforcer Version: 1.2.0 | Keywords: database migration -----------------------------------------------------+---------------------- The script fails during repopulate keypairs phase. The logic is good, but unfortunately SQLite3 has got a silly limitation, which does not allow having a different number of columns in a INSERT?SELECT statement, even if these missing columns have a DEFAULT clause. As pre_backup is not set, the query fails. The following patch fixes this issue. Priotity major as it breaks upgrades. -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Wed Feb 9 17:29:21 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Wed, 09 Feb 2011 17:29:21 -0000 Subject: [Opendnssec-develop] [OpenDNSSEC] #217: Business cards Message-ID: <047.a5b5d838d8e1262ff6c635534e137cb9@kirei.se> #217: Business cards ----------------------+----------------------------------------------------- Reporter: anonymous | Owner: rb Type: defect | Status: new Priority: major | Component: Unknown Version: trunk | Keywords: ----------------------+----------------------------------------------------- Business cards There are several sorts of business cards available in the market nowadays. This is by far the most important things that the brand new entrepreneur needs. While he starts a totally new online business and trying to produce clients, he or she should make sure that his clients have the contact details. This assists through the marketing and as well in the operation of marketing within the firm. When you are getting the business card completed, there are many things that you must take into consideration. ??? Details- The details that your card holds are the first as well as the foremost thing you'll want to establish. Primarily, the name of the organization along with your name need to be mentioned inside the card. Your street address together with the other contact details also have to be mentioned. You also have the option for adding just about every other aspects may possibly find necessary according to your requirements. ??? Design- The design of the business card also represents a crucial role here. That is certainly the kind of component that well identifies your personality and thoughts about your company . While you have got into contact with a business card printing company, you can easily request them for their style and design portfolio. In case you are incapable of find anything from their pre- existing portfolio, you can ask them to individualize the card design according to your specifications. While they are designing the card for your needs, they are going to ask you a couple of questions regarding the business based on exactly what the card will be designed for. ??? Material- The type of material that you want the card to be produced in has an effect on the longevity of the card. You'll find [http://rubyprints.com frosted plastic business cards] that make use of plastic to generate the cards. The cards are generally not transparent along with the content is pasted on the card using paints which stick onto the cards for several years . These cards deliver the function of longevity. ??? Print- the type of print that you select can often have an impact on the outlook on the card. These are [http://rubyprints.com print business cards] which might be in both color or even in white and black. The latter style of printing cost less when compared to the color printing. These cards work with different kinds of paper and therefore are termed as the most traditional forms of [http://rubyprints.com business cards] that you can get today. ??? Price tag- All the above factors put with each other will identify the price of the business card. The color print cards will cost you above and beyond the white and black cards. Similarly, the plastic cards will definitely cost much more than the paper print cards. The design of the card carries a certain impression on the associated fee. Another factor that determines the price of them can be the volume. The amount of cards that you'd like that should be printed will either cut down or add to the price range. ??? Printing company- this company with which you associate to get your cars printed matters a lot. You'll find vendors which have superior modern technology when it comes to possessing high quality outcomes of the cards which were being printed. -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Thu Feb 10 10:07:25 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Thu, 10 Feb 2011 10:07:25 -0000 Subject: [Opendnssec-develop] [OpenDNSSEC] #217: KASP accepts algorithm 2 for NSEC3 records Message-ID: <078.4dc43063b26f5410ceecdfaab3ac44fc@kirei.se> #217: KASP accepts algorithm 2 for NSEC3 records -----------------------------------------------------+---------------------- Reporter: Sebastian Castro | Owner: matthijs Type: defect | Status: new Priority: major | Component: Signer Version: 1.2.0 | Keywords: -----------------------------------------------------+---------------------- We set NSEC3.Hash.Algorithm=2 in a policy, the KASP was correctly validated and the signer generated NSEC3 and NSEC3PARAM records with algorithm 2 but the hashes are SHA-1. According to IANA, algorithm 2 hasn't been assigned yet. -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Thu Feb 10 10:48:43 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Thu, 10 Feb 2011 10:48:43 -0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #217: KASP accepts algorithm 2 for NSEC3 records In-Reply-To: <078.4dc43063b26f5410ceecdfaab3ac44fc@kirei.se> References: <078.4dc43063b26f5410ceecdfaab3ac44fc@kirei.se> Message-ID: <093.93d616368a5afe4db684613ac8899f5d@kirei.se> #217: KASP accepts algorithm 2 for NSEC3 records -----------------------------------------------------+---------------------- Reporter: Sebastian Castro | Owner: matthijs Type: defect | Status: new Priority: major | Component: Signer Version: 1.2.0 | Resolution: Keywords: | -----------------------------------------------------+---------------------- Comment (by matthijs): I would say that ods-kaspcheck should return an error. The signer should error, but the bug is actually in ldns. Will fix it there. -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Thu Feb 10 10:53:17 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Thu, 10 Feb 2011 10:53:17 -0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #217: KASP accepts algorithm 2 for NSEC3 records In-Reply-To: <078.4dc43063b26f5410ceecdfaab3ac44fc@kirei.se> References: <078.4dc43063b26f5410ceecdfaab3ac44fc@kirei.se> Message-ID: <093.e041ea32782ce3d601f34cb04eeadb02@kirei.se> #217: KASP accepts algorithm 2 for NSEC3 records -----------------------------------------------------+---------------------- Reporter: Sebastian Castro | Owner: alex Type: defect | Status: assigned Priority: major | Component: Signer Version: 1.2.0 | Resolution: Keywords: | -----------------------------------------------------+---------------------- Changes (by matthijs): * owner: matthijs => alex * status: new => assigned -- Ticket URL: OpenDNSSEC OpenDNSSEC From AlexD at nominet.org.uk Thu Feb 10 11:47:03 2011 From: AlexD at nominet.org.uk (Alex Dalitz) Date: Thu, 10 Feb 2011 11:47:03 +0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #217: KASP accepts algorithm 2 for NSEC3 records In-Reply-To: <093.e041ea32782ce3d601f34cb04eeadb02@kirei.se> References: <078.4dc43063b26f5410ceecdfaab3ac44fc@kirei.se> <093.e041ea32782ce3d601f34cb04eeadb02@kirei.se> Message-ID: <55420F14-7574-40EE-9ED1-619BD9725E85@nominet.org.uk> done On 10 Feb 2011, at 10:53, OpenDNSSEC wrote: > #217: KASP accepts algorithm 2 for NSEC3 records > -----------------------------------------------------+---------------------- > Reporter: Sebastian Castro | Owner: alex > Type: defect | Status: assigned > Priority: major | Component: Signer > Version: 1.2.0 | Resolution: > Keywords: | > -----------------------------------------------------+---------------------- > Changes (by matthijs): > > * owner: matthijs => alex > * status: new => assigned > > > -- > Ticket URL: > OpenDNSSEC > OpenDNSSEC > _______________________________________________ > Opendnssec-develop mailing list > Opendnssec-develop at lists.opendnssec.org > https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop From owner-dnssec-trac at kirei.se Thu Feb 10 12:04:05 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Thu, 10 Feb 2011 12:04:05 -0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #217: KASP accepts algorithm 2 for NSEC3 records In-Reply-To: <078.4dc43063b26f5410ceecdfaab3ac44fc@kirei.se> References: <078.4dc43063b26f5410ceecdfaab3ac44fc@kirei.se> Message-ID: <093.3f967b54f5ab3a0c4ad0c1f0af5e23ca@kirei.se> #217: KASP accepts algorithm 2 for NSEC3 records -----------------------------------------------------+---------------------- Reporter: Sebastian Castro | Owner: alex Type: defect | Status: assigned Priority: minor | Component: Signer Version: 1.2.0 | Resolution: Keywords: | -----------------------------------------------------+---------------------- Changes (by matthijs): * priority: major => minor Comment: Alex has committed a fix in trunk -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Thu Feb 10 19:54:07 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Thu, 10 Feb 2011 19:54:07 -0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #217: KASP accepts algorithm 2 for NSEC3 records In-Reply-To: <078.4dc43063b26f5410ceecdfaab3ac44fc@kirei.se> References: <078.4dc43063b26f5410ceecdfaab3ac44fc@kirei.se> Message-ID: <093.f26fd96bf6b4bfa607a582e7b2750e54@kirei.se> #217: KASP accepts algorithm 2 for NSEC3 records -----------------------------------------------------+---------------------- Reporter: Sebastian Castro | Owner: alex Type: defect | Status: assigned Priority: minor | Component: Signer Version: 1.2.0 | Resolution: Keywords: | -----------------------------------------------------+---------------------- Comment (by Sebastian Castro ): Replying to [comment:1 matthijs]: > I would say that ods-kaspcheck should return an error. > > The signer should error, but the bug is actually in ldns. Will fix it there. ods-kaspcheck happily validates the policy as you can see in the attached file. The zone is signed, but it won't validate by any modern DNS server. -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Fri Feb 11 13:13:25 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Fri, 11 Feb 2011 13:13:25 -0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #216: migrate_keyshare_sqlite3.pl broken In-Reply-To: <077.69322dad9fb2997a31ce2ef3dc7a0297@kirei.se> References: <077.69322dad9fb2997a31ce2ef3dc7a0297@kirei.se> Message-ID: <092.fb7705ef9b6ce942312129a7f5dcd26e@kirei.se> #216: migrate_keyshare_sqlite3.pl broken -----------------------------------------------------+---------------------- Reporter: Marc Dequ?nes (Duck) | Owner: sion Type: defect | Status: closed Priority: major | Component: Enforcer Version: 1.2.0 | Resolution: fixed Keywords: database migration | -----------------------------------------------------+---------------------- Changes (by sion): * status: new => closed * resolution: => fixed Comment: Thank you for that. I have tested and applied your patch to both trunk and the 1.2 branch. Sion -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Mon Feb 14 02:00:22 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Mon, 14 Feb 2011 02:00:22 -0000 Subject: [Opendnssec-develop] =?utf-8?b?UmU6IFtPcGVuRE5TU0VDXSAjMTU5OiA=?= =?utf-8?b?0KHQvdGP0YLRjCDQv9GA0L7RgdGC0LjRgtGD0YLQutGDINCyINCc0L7RgdC6?= =?utf-8?b?0LLQtQ==?= In-Reply-To: <047.ae256a906fce183ce9a3916adebbd970@kirei.se> References: <047.ae256a906fce183ce9a3916adebbd970@kirei.se> Message-ID: <062.565a4a85a425a52018f28c5b06eab69e@kirei.se> #159: ????? ??????????? ? ?????? ----------------------+----------------------------------------------------- Reporter: anonymous | Owner: alex Type: defect | Status: closed Priority: blocker | Component: Auditor Version: | Resolution: invalid Keywords: | ----------------------+----------------------------------------------------- Comment (by anonymous): http://ivotenin.land.ru/index.html http://ivotenin.land.ru/skachat-opera-molodye-final-na-russkom.html http://ivotenin.land.ru/foto-dlya-dokumentov-programma-skachat.html http://ivotenin.land.ru/netshade-skachat.html http://ivotenin.land.ru/skachat-programmu-bit-torrent.html http://kyogregimses.land.ru/neat-image-425-skachat.html http://kyogregimses.land.ru/skachat-fotoschop.html http://kyogregimses.land.ru/skachat-windows-installer-45.html http://kyogregimses.land.ru/skachat-besplatnye-animacionnye-temy-na- telefon.html http://muybackliro.land.ru/skachat-programmy-dlya-vzloma-msn.html http://muybackliro.land.ru/skachat-programmu-dlya-vzloma-starforce.html http://muybackliro.land.ru/skachat-total-uninstall-542.html http://muybackliro.land.ru/skachat-film-s-subtitrami-avroraaurora.html http://nasawake.land.ru/skachat-eroticheskie-porno-igry-dlya- nokia5800-sis.html http://nasawake.land.ru/skachat-amber-journeys-beyond.html http://nasawake.land.ru/kak-skachat-iz-cydia-mobile-terminal.html http://nasawake.land.ru/skachat-bez-registracii-i-sms-klipy-gruppy- cerroni.html http://schafeatbalna.land.ru/skachat-va-dj-l-gee-rnb-junkies-pt.html http://schafeatbalna.land.ru/skachat-upl-na-fifa-09.html http://schafeatbalna.land.ru/skachat-futazhi-serdechki.html http://schafeatbalna.land.ru/algo-skachat.html http://schafeatbalna.land.ru/skachat-age-of-pirates-captain-blood.html http://aninnamaht.land.ru/index.html http://aninnamaht.land.ru/skachat-nero-94molodye-crack-russkaya- versiya.html http://aninnamaht.land.ru/skachat-kasperskiy-70-versiya-701325.html http://aninnamaht.land.ru/skachat-temy-pod-vista-dlya-win-me.html http://aninnamaht.land.ru/rostov-navigator-2008-skachat.html http://aninnamaht.land.ru/skachat-referaty-avtoran.html http://aninnamaht.land.ru/skachat-cops-2molodye-the-power-of-law.html http://aninnamaht.land.ru/skachat-keygen-cinema-4d-studio-bundle- vmolodye.html http://conmynorwa.land.ru/44-molodye-video-skachat.html http://conmynorwa.land.ru/skachat-graft-shrifti-na-fotoshop.html http://conmynorwa.land.ru/skachat-windows-7-build-7201-rus.html http://conmynorwa.land.ru/skachat-programmu-dlya-preobrazovaniya-formata- muzyki-i-umensheniya-mb.html http://conmynorwa.land.ru/skachat-soft-dlya-raboty-s-audiofaylami.html http://napaninla.land.ru/skachat-adobe-shockwave-player-molodye.html http://napaninla.land.ru/dalnoboyschiki-2-mdf-skachat.html http://napaninla.land.ru/skachat-freedos-bootable-dlya-pocket-dos.html http://napaninla.land.ru/skachat-autocad-2007.html http://napaninla.land.ru/antivirus-kasperskogo-skachat-bez-sms.html http://reijorremic.land.ru/akvis-enhancer-programma-dlya-obrabotki- fotografiy-obnovilas-do-molodye-y-versii-skachat.html http://reijorremic.land.ru/audio-player-mobile-skachat-besplatno.html http://reijorremic.land.ru/skachat-jugular-street-luge-racing.html http://reijorremic.land.ru/skachat-ad-aware-2008-portable-rusifikator.html http://resxaboni.land.ru/skachat-shareman.html http://resxaboni.land.ru/skachat-bad-day-la.html http://resxaboni.land.ru/skachat-eset-smart-security-40-rus.html http://resxaboni.land.ru/skachat-programmu-dlya-pdb-formata.html http://resxaboni.land.ru/skachatskiny-dlya-opery.html http://resxaboni.land.ru/skachat-ashampoo-burning-studio-8-rus.html http://ringporbepa.land.ru/skachat-professionalnaya-ochistka-reestra.html http://ringporbepa.land.ru/current-practice-guidelines-in-primary- care-2008-skachat.html http://ringporbepa.land.ru/skachat-vibrus-na-iphone.html http://ringporbepa.land.ru/skachat-kluch-dlya-multi-password-recovery.html http://timontrepve.land.ru/index.html http://timontrepve.land.ru/skachat-swf-maestro-scr-1molodye.html http://timontrepve.land.ru/skachat-konvekter-v-3gp.html http://timontrepve.land.ru/skachat-pinball-dreams-deluxe.html http://timontrepve.land.ru/skachat-rabotauschiy-kluch-dlya- kis8-ot-200809.html http://tiohangstofog.land.ru/skachat-platypus.html http://tiohangstofog.land.ru/skachat-reel-deal-casino.html http://tiohangstofog.land.ru/skachat-smayly-dlya-kvip.html http://amaphtuysa.land.ru/skachat-film-gayver-1-2.html http://amaphtuysa.land.ru/skachat-kluch-na-avira-key.html http://amaphtuysa.land.ru/skachat-race-tracks-unlimited.html http://amaphtuysa.land.ru/skachat-besplatna-pleer-dlya-n73-rus.html http://amaphtuysa.land.ru/keygen-online-tv-player-29-skachat.html http://barasofi.land.ru/bazis-sklad-70-skachat.html http://barasofi.land.ru/sekret-2-skachat-s-hostinga.html http://barasofi.land.ru/corporate-business-skachat.html http://barasofi.land.ru/skachat-virtualdub-169.html http://barasofi.land.ru/paydox-skachat.html http://breedwestdawest.land.ru/skachat-sayt-galaktika.html http://breedwestdawest.land.ru/skachat-swgb-clone-campaigns.html http://breedwestdawest.land.ru/skachat-strong-dc.html http://breedwestdawest.land.ru/ultimate-boot-cd-skachat.html http://breedwestdawest.land.ru/skachat-programma-dlya-proverki-i-chistki- reestra.html http://carlenypo.land.ru/skachat-kody-k-vsem-igram.html http://carlenypo.land.ru/skachat-elektronnye-dokumenty-buhgaltera.html http://carlenypo.land.ru/skachat-igru-animagiya-na-pc.html http://carlenypo.land.ru/skachat-perevodchik-s-russkogo-na-angliyskiy-na- telefon.html http://graphtunade.land.ru/skachat-internet-radio-dlya-sh7molodye.html http://graphtunade.land.ru/skachat-total-uninstall-542-serial.html http://graphtunade.land.ru/skachat-felching.html http://graphtunade.land.ru/skachat-windows-media-player-bezplatno.html http://mantealases.land.ru/skachat-yarlyki-dlya-papok.html http://mantealases.land.ru/sims-3-skachat-odezhdu.html http://mantealases.land.ru/skachat-burnout-paradise.html http://mantealases.land.ru/php-edit-53-rus-skachat.html http://mantealases.land.ru/skachat-windows-7-toolkit-18-micro- wincomexe.html http://maynasicont.land.ru/skachat-treki-iz-richarda-baha-illuzii.html http://maynasicont.land.ru/skachat-trial-versiu-office-2003.html http://maynasicont.land.ru/adobe-cs3-keygen-skachat.html http://maynasicont.land.ru/obook-skachat.html http://backrajsuppde.land.ru/index.html http://backrajsuppde.land.ru/skachat-samp-02x.html http://backrajsuppde.land.ru/skachat-kollekciu-ikonok-cherno-belyh.html http://backrajsuppde.land.ru/vista-home-premium-oem-kupit-cena- skachat.html http://gugdanistde.land.ru/acrobat-professional-portable-skachat.html http://gugdanistde.land.ru/skachat-internet-explor.html http://gugdanistde.land.ru/skachat-patch-123-na-124.html http://gugdanistde.land.ru/hp-recovery-dvd-skachat.html http://gugdanistde.land.ru/kameskaya5-skachat.html http://gugdanistde.land.ru/skachat-drayver-setevoy-karty-gigabit- ethernet.html http://khalconvidis.land.ru/skachat-lekarstvo-internet-access-monitor- pro-39-dlya-isa.html http://khalconvidis.land.ru/skachat-ritm-gitara-v-stile-heavy-metal.html http://khalconvidis.land.ru/deductor-tree-analyzer-skachat.html http://khalconvidis.land.ru/skachat-futazh-nachalo-svadby.html http://netstyczgrubgu.land.ru/skachat-drayver-videokarty-ati-mobility- radeon-x2300-xt.html http://netstyczgrubgu.land.ru/skachat-duke-nukem-endangered-species.html http://netstyczgrubgu.land.ru/skachat-drayver-dlya-tunera-msi.html http://netstyczgrubgu.land.ru/kak-uvelichit-chlen-skachat.html http://netstyczgrubgu.land.ru/skachat-escape-of-bipeds.html http://samrechtphyna.land.ru/skachat-obnovlenie-opera-964.html http://samrechtphyna.land.ru/skachat-robbins-pathology.html http://samrechtphyna.land.ru/skachat-rise-the-vieneo-province.html http://samrechtphyna.land.ru/skachat-programmy-dlya-translita.html http://samrechtphyna.land.ru/alyans-na-zare-golosa-zovut-menya- mp3-skachat.html http://samrechtphyna.land.ru/3dmark-skachat.html http://semaminlink.land.ru/skachat-recepty-dlya-termomiksa.html http://semaminlink.land.ru/adobe-photoshop-cs4-cybershop-edition- rusifikator-skachat.html http://semaminlink.land.ru/skachat-hellboy.html http://semaminlink.land.ru/skachat-shpionskie-programmy-dlya- telefonov.html http://semaminlink.land.ru/skachat-xvidpsp.html http://semaminlink.land.ru/skachat-nexus-expansion-pack.html http://semaminlink.land.ru/atomic-pst-password-recovery-190-skachat.html http://tiospirpeddho.land.ru/skachat-ofisnye-prilozheniya-dlya-pechatbz- nakladnyh.html http://tiospirpeddho.land.ru/ngo-nvidia-optimized-driver-skachat.html http://tiospirpeddho.land.ru/skachat-pinkie-pie-party-parade.html http://bezewendcom.land.ru/s3drv-skachat.html http://bezewendcom.land.ru/skachat-sega-mega-pack.html http://bezewendcom.land.ru/skachat-crazy-plugin-133-dlya-commfort.html http://bezewendcom.land.ru/skachat-water-online.html http://bezewendcom.land.ru/skachat-yahoo-widgets-rus.html http://bezewendcom.land.ru/skachat-mosmap-standard-31.html http://bezewendcom.land.ru/skachat-kontr-strayk-setevaya.html http://bezewendcom.land.ru/skachat-torrentom-max-payn2.html http://inunvehen.land.ru/antivirus-kasperskogo-9-skachat.html http://inunvehen.land.ru/skachat-icq-7russkaya-versiya.html http://inunvehen.land.ru/skachat-antivirus-kaspersky.html http://inunvehen.land.ru/skachat-skachat-daemon-tools.html http://inunvehen.land.ru/novaya-versiya-opery-10-skachat.html http://inunvehen.land.ru/avast-zagruzochnyy-cd-skachat.html http://jahpickversso.land.ru/skachat-pust-govoryat.html http://jahpickversso.land.ru/skachat-jewel-quest-2.html http://jahpickversso.land.ru/rusifikator-dlya-turbo-photo-editor-thial- version-skachat.html http://jahpickversso.land.ru/skachat-blank-ankety-avtoshkoly.html http://jahpickversso.land.ru/avtoplanirovanie-skachat.html http://jahpickversso.land.ru/skachat-svadebne-foto.html http://jahpickversso.land.ru/mui-sp3-skachat.html http://rockcagoli.land.ru/skachat-programmu-dlya-bystroy-zagruzki- stranic.html http://rockcagoli.land.ru/stolknovenie-galaktik-skachat.html http://rockcagoli.land.ru/skachat-mega-man-legends.html http://rockcagoli.land.ru/skachat-guard-folder-rus-letitbit.html http://rockcagoli.land.ru/skachat-film-titanik-bez-sms-na-psp.html http://rockcagoli.land.ru/skachat-sbornik-zadach-po-auditu.html http://rockcagoli.land.ru/ccextractor-skachat.html http://rockcagoli.land.ru/zhurnal-shkola-gastronoma- avgust-2009-skachat.html http://rockcagoli.land.ru/kak-skachat-programmu-torent-v-komputer.html http://sturmenbuckly.land.ru/skachat-aliens-colonial-marines.html http://sturmenbuckly.land.ru/skachat-call-of-duty-5-cherez-torrent.html http://sturmenbuckly.land.ru/skachat-pam-296.html http://sturmenbuckly.land.ru/skachat-windows-xp-sp3-po-pryamym-ssylkam- bez-sms-kodov-i-registracii.html http://sturmenbuckly.land.ru/skachat-download-master-55molodye.html http://sturmenbuckly.land.ru/skachat-sega-rally-rus-jar.html http://dizoomloucom.land.ru/skachat-igru-counter-strike-demo.html http://dizoomloucom.land.ru/skachat-nobunaga-no-yabou-online.html http://dizoomloucom.land.ru/upp-1224-skachat.html http://dizoomloucom.land.ru/skachat-krizis.html http://dizoomloucom.land.ru/skachat-photoshop-cs-80-torrent.html http://dizoomloucom.land.ru/skachat-pesnu-brunetka.html http://dizoomloucom.land.ru/skachat-shokiruuschiy-minet.html http://dizoomloucom.land.ru/skachat-pdf-reader-cab.html http://dizoomloucom.land.ru/skachat-skin-dlya-icq-65-stalker.html http://ehylonlum.land.ru/skachat-patch-alcogol-molodye.html http://ehylonlum.land.ru/skachat-djvureader-v20027.html http://ehylonlum.land.ru/skachat-programma-bazis-mebelschik.html http://ehylonlum.land.ru/uchenie-o-gallucinaciyah-skachat.html http://ehylonlum.land.ru/need-for-speed-shift-skachat-igru.html http://ehylonlum.land.ru/skachat-igru-rybalka-dlya-visty.html http://ehylonlum.land.ru/3-d-mark-skachat.html http://ehylonlum.land.ru/skachat-the-hardy-boys-and-the-tower- treasure.html http://flarleapfvoroo.land.ru/proga-dlya-konvertacii-s-avi-v-3pg-format- skachat.html http://flarleapfvoroo.land.ru/skachat-kluch-k-avira.html http://flarleapfvoroo.land.ru/skachat-nero-flash.html http://flarleapfvoroo.land.ru/skachat-kalkulyator-inzhenernyy-graabrb- ghjbpdjlyst.html http://flarleapfvoroo.land.ru/skachat-mysql-v5136.html http://flarleapfvoroo.land.ru/skachat-video-negr-s-ogromnym-chlenom.html http://flarleapfvoroo.land.ru/skachat-video-uroki-po- fotoshopu-s-retushi.html http://handlestawork.land.ru/skachat-time-warriors.html http://handlestawork.land.ru/dvd-oblozhki-venchanie-skachat.html http://handlestawork.land.ru/skayp-versiya-36-skachat.html http://handlestawork.land.ru/drupal-shablony-skachat.html http://handlestawork.land.ru/vzlom-paroley-rar-81-arhivov-skachat.html http://handlestawork.land.ru/skachat-1-sentyabrya-shablon-dvd- oblozhki.html http://lisenpaicors.land.ru/skachat-windows-7-7600-molodye-rtm- rus-x86.html http://lisenpaicors.land.ru/everest-aida-skachat.html http://lisenpaicors.land.ru/skachat-klip-natashi-korolevoy-konfetti.html http://lisenpaicors.land.ru/skachat-bespltnye-programmy-dlya-komp.html http://lisenpaicors.land.ru/skachat-destroy-mediaplay-v140.html http://taiconsimplawn.land.ru/skachat-virusnye-bazy-dlya-nod32-27.html http://taiconsimplawn.land.ru/skachat-windows-xp-sp3-molodye-idimm-rus- vlk-full-torrent.html http://taiconsimplawn.land.ru/skachat-samplitude-producer-605.html http://taiconsimplawn.land.ru/skachat-mini-igru-schastlivyy-fermer.html http://taiconsimplawn.land.ru/skachat-s-torrent.html http://taiconsimplawn.land.ru/skachat-progu-goldwave.html http://dwelamderend.land.ru/skachat-igry-iz-windows-vista-dlya-xp.html http://dwelamderend.land.ru/skachat-ocean-radio-feat-axioma-rmx.html http://dwelamderend.land.ru/elekran-3d-flat-2d-place-3d-constructor- skachat.html http://dwelamderend.land.ru/tv-proga-skachat.html http://dwelamderend.land.ru/skachat-zhurnaly-hq.html http://dycommyca.land.ru/index.html http://dycommyca.land.ru/skachat-doctor-web-50.html http://dycommyca.land.ru/skachat-winamp-pro-556.html http://giocokithza.land.ru/index.html http://giocokithza.land.ru/fisting-skachat-video-vip-files.html http://giocokithza.land.ru/windows-xp-live-cd-skachat.html http://giocokithza.land.ru/elektronnyy-zhurnal-uspevaemosti-skachat.html http://parectheotic.land.ru/skachat-brian-lara-international- cricket-2005.html http://parectheotic.land.ru/skachat-artisteer-22-keygen.html http://parectheotic.land.ru/videoglyad-skachat.html http://parectheotic.land.ru/skachat-russko-tureckiy-perevodchik.html http://passmumepanch.land.ru/skachat-na-pk-karta-marshrutok-kazani.html http://passmumepanch.land.ru/skachat-ums-90.html http://passmumepanch.land.ru/ikonki-voyny-na-rabochem-stole-skachat- programmu.html http://passmumepanch.land.ru/skachat-ssx-on-tour-na-psp.html http://passmumepanch.land.ru/microsoft-mapi-driver-skachat.html http://stephdisbemy.land.ru/skachat-hide-ip-ng-350-i-keygen.html http://stephdisbemy.land.ru/skachat-knigu-biznes-idei.html http://stephdisbemy.land.ru/skachat-bezplatno-dj-jim.html http://stephdisbemy.land.ru/skachat-programmu-menyauschaya-formaty-na-3gp- rus.html http://sudezardwerk.land.ru/norton-windoctor-2009-skachat.html http://sudezardwerk.land.ru/skachat-kartu-dlya-doty-661.html http://sudezardwerk.land.ru/antiplagiat-killer-2-0-skachat.html http://sudezardwerk.land.ru/novaya-versiya-google-chrome-dev-20molodye- skachat.html http://sudezardwerk.land.ru/noesis-interactive-skachat.html http://sudezardwerk.land.ru/skachat-kluch-k-polotna-bogemskogo-zamka.html http://testtovave.land.ru/super-uniform-trance-big-tits-cosplay-girl-2009 -dvdrip-skachat-rapidosheroy.html http://testtovave.land.ru/skachat-opera-92.html http://testtovave.land.ru/skachat-arcon-2009.html http://testtovave.land.ru/odinokiy-pastuh-skachat-bes.html http://testtovave.land.ru/sku0molodye-skachat.html http://taiconsimplawn.land.ru/timati-odnoklassnica-skachat-mr3.html http://totervibuck.land.ru/skachat-klip-quest-pistols-ya-ustal.html http://totervibuck.land.ru/skachat-perfectdisk-70.html http://totervibuck.land.ru/skachat-programmu-dlya-sozdaniya-iso.html http://totervibuck.land.ru/nod32antivirusv40314-skachat.html http://totervibuck.land.ru/skachat-obnovlenie-ot-50909-dlya-drp-su- professional.html http://totervibuck.land.ru/podbor-pricheski-po-foto-skachat-programmu.html http://tiospirpeddho.land.ru/skachat-saluty.html http://tiospirpeddho.land.ru/programma-partishen-medzhik-08-skachat.html http://tiospirpeddho.land.ru/skachat-skanvord.html http://tiospirpeddho.land.ru/perekrstok-film-skachat.html http://tiospirpeddho.land.ru/skachat-cabelas-big-game- hunter-2009-addiction.html http://maynasicont.land.ru/skachat-dumbow--cool.html http://rovorele.land.ru/skachat-dmb.html http://rovorele.land.ru/elvenstar-ii-skachat.html http://rovorele.land.ru/skachat-nero-8-micro.html http://rovorele.land.ru/proxy-graber-skachat.html http://rovorele.land.ru/skachat-nero-7-s-kluchom.html http://rovorele.land.ru/skachat-us-most-wanted.html http://tiohangstofog.land.ru/skachat-antivirus-nod32.html http://tiohangstofog.land.ru/skachat-uroki-po-photoshop-cs3.html http://schafeatbalna.land.ru/skachat-3d-dostoprimechatelnosti.html http://tavkatiges.land.ru/skachat-igru-wwe-raw-ultimate- impact-s-letitbitnet.html http://tavkatiges.land.ru/skachat-progu-ot-komarov-dlya-bes-platno.html http://tavkatiges.land.ru/skachat-cms-drupal-6-pro-drupal-development.html http://tavkatiges.land.ru/skachat-asku-dlya-telefona-samsung- star-5230.html http://tavkatiges.land.ru/skachat-toca-race-driver-2.html http://tavkatiges.land.ru/skachat-windows-media-pleer-molodye.html http://tippfamudsi.land.ru/skachat-tatsumaki-land-at-war.html http://tippfamudsi.land.ru/skachat-shadowflare.html http://tippfamudsi.land.ru/skachat-smart-setting-dlya-simbian-9-1.html http://tippfamudsi.land.ru/skachat-rusifikator-dlya-nestopia.html http://tippfamudsi.land.ru/zapisnaya-knizhka-skachat.html http://tippfamudsi.land.ru/avidemux-russkaya-versiya-skachat.html -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Mon Feb 14 08:51:45 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Mon, 14 Feb 2011 08:51:45 -0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #217: KASP accepts algorithm 2 for NSEC3 records In-Reply-To: <078.4dc43063b26f5410ceecdfaab3ac44fc@kirei.se> References: <078.4dc43063b26f5410ceecdfaab3ac44fc@kirei.se> Message-ID: <093.69428fda587861fc6988163556c7d255@kirei.se> #217: KASP accepts algorithm 2 for NSEC3 records -----------------------------------------------------+---------------------- Reporter: Sebastian Castro | Owner: alex Type: defect | Status: assigned Priority: minor | Component: Signer Version: 1.2.0 | Resolution: Keywords: | -----------------------------------------------------+---------------------- Comment (by matthijs): Replying to [comment:4 Sebastian Castro ]: > Replying to [comment:1 matthijs]: > > I would say that ods-kaspcheck should return an error. > > > > The signer should error, but the bug is actually in ldns. Will fix it there. > > ods-kaspcheck happily validates the policy as you can see in the attached file. The zone is signed, but it won't validate by any modern DNS server. Yes, ods-kaspcheck validated the policy. Alex has committed a fix in trunk (rev 4433) that fixes this. The signer bug is fixed in ldns, but that doesn't help OpenDNSSEC for now of course. We decided to fix the enforcer such that it will make sure not to accept policies that are not validated by ods-kaspcheck. -- Ticket URL: OpenDNSSEC OpenDNSSEC From sion at nominet.org.uk Mon Feb 14 11:05:34 2011 From: sion at nominet.org.uk (Sion Lloyd) Date: Mon, 14 Feb 2011 11:05:34 +0000 Subject: [Opendnssec-develop] ID fields in MySQL Message-ID: <201102141105.34861.sion@nominet.org.uk> I have a script (attached) to change the datatype of the keypairs id column. (For some fairly dull reasons I have written it in perl because it can not be done with just SQL.) So here is a question, should we "upgrade" some other id fields while we are there? Also, is there anything here that effects the enforcerNG? The following tables have a tinyint id, i.e. a maximum of 127: securitymodules - store information about all the hsms used categories - stores the possible categories (or uses) of parameters serialmodes - SOA serial strategies Then, the following have mediumints, i.e. a maximum of 8388607: parameters - stores the types of parameters available policies zones parameters_policies - join table to hold the values of parameters The only one I'd be tempted to increase is the securitymodules. What do people think? Is there a good reason _not_ to bump security modules to at least a mediumint? Cheers. Sion -------------- next part -------------- A non-text attachment was scrubbed... Name: migrate_id_mysql.pl Type: application/x-perl Size: 3107 bytes Desc: not available URL: From owner-dnssec-trac at kirei.se Tue Feb 15 01:27:00 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Tue, 15 Feb 2011 01:27:00 -0000 Subject: [Opendnssec-develop] [OpenDNSSEC] #218: ods-signerd crashes on stop Message-ID: <078.3a57febe631406cd1c74fd51350b2544@kirei.se> #218: ods-signerd crashes on stop -----------------------------------------------------+---------------------- Reporter: Sebastian Castro | Owner: matthijs Type: defect | Status: new Priority: minor | Component: Signer Version: trunk | Keywords: -----------------------------------------------------+---------------------- Using OpenDNSSEC 1.2.0 in our test environment (Linux CentOS 5.5, SCA6000, openCryptoki), we've seeing consistent ods-signerd crashes after receiving the 'stop' command. Steps to replicate: ods-signerd -d -vvvvvv .. let the signer sign the configured zones .. ods-signer stop ods-signerd dies with message "Segmentation fault (core dumped)" Log file says "Feb 15 12:39:33 sign2 kernel: ods-signerd[21345]: segfault at 00002aaaaaab7ff8 rip 00002b42d6428a30 rsp 00007fff0ebfb3a8 error 4" There is a core dump available, I'm attaching to the report some basic output from the core like backtrace. -- Ticket URL: OpenDNSSEC OpenDNSSEC From AlexD at nominet.org.uk Tue Feb 15 08:20:50 2011 From: AlexD at nominet.org.uk (Alex Dalitz) Date: Tue, 15 Feb 2011 08:20:50 +0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #217: KASP accepts algorithm 2 for NSEC3 records In-Reply-To: <093.69428fda587861fc6988163556c7d255@kirei.se> References: <078.4dc43063b26f5410ceecdfaab3ac44fc@kirei.se> <093.69428fda587861fc6988163556c7d255@kirei.se> Message-ID: > Yes, ods-kaspcheck validated the policy. Alex has committed a fix in trunk > (rev 4433) that fixes this. > > The signer bug is fixed in ldns, but that doesn't help OpenDNSSEC for now > of course. We decided to fix the enforcer such that it will make sure not > to accept policies that are not validated by ods-kaspcheck. Eek! Has anybody tested this? Thanks, Alex. From rickard.bellgrim at iis.se Tue Feb 15 08:26:59 2011 From: rickard.bellgrim at iis.se (Rickard Bellgrim) Date: Tue, 15 Feb 2011 09:26:59 +0100 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #217: KASP accepts algorithm 2 for NSEC3 records In-Reply-To: References: <078.4dc43063b26f5410ceecdfaab3ac44fc@kirei.se> <093.69428fda587861fc6988163556c7d255@kirei.se> Message-ID: <2CA49A95-89CF-4395-9BBD-55F0CC4EC23C@iis.se> On 15 feb 2011, at 09.20, Alex Dalitz wrote: > Has anybody tested this? I am doing some testing today. // Rickard From matthijs at NLnetLabs.nl Tue Feb 15 09:09:22 2011 From: matthijs at NLnetLabs.nl (Matthijs Mekking) Date: Tue, 15 Feb 2011 10:09:22 +0100 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #217: KASP accepts algorithm 2 for NSEC3 records In-Reply-To: References: <078.4dc43063b26f5410ceecdfaab3ac44fc@kirei.se> <093.69428fda587861fc6988163556c7d255@kirei.se> Message-ID: <4D5A42C2.5050603@nlnetlabs.nl> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Could you say why it is eek? On 02/15/2011 09:20 AM, Alex Dalitz wrote: >> Yes, ods-kaspcheck validated the policy. Alex has committed a fix in trunk >> (rev 4433) that fixes this. >> >> The signer bug is fixed in ldns, but that doesn't help OpenDNSSEC for now >> of course. We decided to fix the enforcer such that it will make sure not >> to accept policies that are not validated by ods-kaspcheck. > > > Eek! > > Has anybody tested this? > > Thanks, > > > Alex. > _______________________________________________ > Opendnssec-develop mailing list > Opendnssec-develop at lists.opendnssec.org > https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJNWkLCAAoJEA8yVCPsQCW51fgH/jOLP9m9PtULtXy1BR44qy42 q01csZfnnSu71zafRsCkTw0PmvN9DZ1Ynkk8BQKKmS02cHPkPH8i38zFyRg13Ro6 GjfRDCTXpbwjttVtwTP6tMXslwuEpbrS2wlA08rgatWX/LxRWwdgOMneWQJpv5M2 PivFWbC+s2lwyB8EaN+avbHTPOtsoHS62TEKz5dbZPi/mAJzNPMC8P8aCkrCbiww GD1vE5GYciU1vDKZzo/nqNdIPd606y8QOtN2FElfdx/SYMVXZtuOCXcHn8UzHCxm bUON5UvxxqVxquefqn2vI8qq6jjM2bfUwuVlg239b6zYuiID5g8F1uZWweXGNHk= =mMCO -----END PGP SIGNATURE----- From AlexD at nominet.org.uk Tue Feb 15 09:23:35 2011 From: AlexD at nominet.org.uk (Alex Dalitz) Date: Tue, 15 Feb 2011 09:23:35 +0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #217: KASP accepts algorithm 2 for NSEC3 records In-Reply-To: <4D5A42C2.5050603@nlnetlabs.nl> References: <078.4dc43063b26f5410ceecdfaab3ac44fc@kirei.se> <093.69428fda587861fc6988163556c7d255@kirei.se> <4D5A42C2.5050603@nlnetlabs.nl> Message-ID: <3A670249-EE80-4639-B7E7-7C84F79C4744@nominet.org.uk> > Could you say why it is eek? As long as we've tested it, it should be fine. Alex. From patrik.wallstrom at iis.se Wed Feb 16 08:36:34 2011 From: patrik.wallstrom at iis.se (=?iso-8859-1?Q?Patrik_Wallstr=F6m?=) Date: Wed, 16 Feb 2011 09:36:34 +0100 Subject: [Opendnssec-develop] 1.2.0 with 50000 zones Message-ID: So I have now 50000 zones in the system. Previous to the start I had added 20500 zones which both the signer and the enforcer was happy with. After shutting down the system and added another 29500 zones I synced the database to zonelist.xml and started it again with ods-control start. Both the enforcer and the signer started as excepted. The enforcer happily generated all the signconf files, and the signer started doing its thing. However, after coming back this morning, the enforcer was finished having a full 50000 signconfigs in the signconf directory. But the signer only knew about 21823 zones, which was the number both in the queue and in the tmp and signed directories. So, somehow there was some sort of miscommunication between the two components. After shutting down the system, and started the signer again, the signer was working as expected. Any thoughts on this? Why isn't the signer picking up all the signconfs? -- Patrik Wallstr?m Project Manager, R&D .SE (Stiftelsen f?r Internetinfrastruktur) E-mail: patrik.wallstrom at iis.se Web: http://www.iis.se/ From sion at nominet.org.uk Wed Feb 16 11:50:13 2011 From: sion at nominet.org.uk (=?iso-8859-1?q?Si=F4n_Lloyd?=) Date: Wed, 16 Feb 2011 11:50:13 +0000 Subject: [Opendnssec-develop] trailing dots Message-ID: <201102161150.13306.sion@nominet.org.uk> Morning. I have a story about dropping trailing dots in domain names. I'm slightly confused as to where this needs to happen. For instance; if someone manually edits the zonelist to add a domain with a trailing dot I don't imagine that we would want to change that? Or do we? In the worst case they may have 2 zones which are the same apart from a trailing dot... Currently the enforcer will see these as 2 separate zones and create 2 sets of keys for them etc... In the post-dot-removed world the behaviour might be screwed. So should I just remove trailing dots from any ksmutil command that references a zone? Do we need a migration script? Sion From owner-dnssec-trac at kirei.se Wed Feb 16 12:56:50 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Wed, 16 Feb 2011 12:56:50 -0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #217: KASP accepts algorithm 2 for NSEC3 records In-Reply-To: <078.4dc43063b26f5410ceecdfaab3ac44fc@kirei.se> References: <078.4dc43063b26f5410ceecdfaab3ac44fc@kirei.se> Message-ID: <093.b88d328f8afcadac6b068f499b984b38@kirei.se> #217: KASP accepts algorithm 2 for NSEC3 records -----------------------------------------------------+---------------------- Reporter: Sebastian Castro | Owner: alex Type: defect | Status: closed Priority: minor | Component: Signer Version: 1.2.0 | Resolution: fixed Keywords: | -----------------------------------------------------+---------------------- Changes (by rb): * status: assigned => closed * resolution: => fixed Comment: r4461 and some other commits will fix this. -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Wed Feb 16 12:59:15 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Wed, 16 Feb 2011 12:59:15 -0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #218: ods-signerd crashes on stop In-Reply-To: <078.3a57febe631406cd1c74fd51350b2544@kirei.se> References: <078.3a57febe631406cd1c74fd51350b2544@kirei.se> Message-ID: <093.9431dd535d2896710337122b823b574e@kirei.se> #218: ods-signerd crashes on stop -----------------------------------------------------+---------------------- Reporter: Sebastian Castro | Owner: matthijs Type: defect | Status: new Priority: minor | Component: Signer Version: trunk | Resolution: Keywords: | -----------------------------------------------------+---------------------- Comment (by rb): I have not been able to reproduce this one (Ubuntu (32-bit) and Mac OS (64-bit)). Perhaps Matthijs can help you more. -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Wed Feb 16 13:05:36 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Wed, 16 Feb 2011 13:05:36 -0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #198: zone updates ignored? In-Reply-To: <059.89d942b926b7441bc26dfd7bc4b25600@kirei.se> References: <059.89d942b926b7441bc26dfd7bc4b25600@kirei.se> Message-ID: <074.38f05c78121398c2b7f69542bc1933b9@kirei.se> #198: zone updates ignored? ----------------------------------+----------------------------------------- Reporter: matthijs@? | Owner: matthijs Type: defect | Status: closed Priority: minor | Component: Signer Version: 1.1.1 | Resolution: fixed Keywords: | ----------------------------------+----------------------------------------- Changes (by matthijs): * status: new => closed * resolution: => fixed Comment: Fixed in trunk (1.3.0) by simplifying serial maintenance. -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Wed Feb 16 13:10:50 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Wed, 16 Feb 2011 13:10:50 -0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #218: ods-signerd crashes on stop In-Reply-To: <078.3a57febe631406cd1c74fd51350b2544@kirei.se> References: <078.3a57febe631406cd1c74fd51350b2544@kirei.se> Message-ID: <093.8828bb98438f5a22dfadc9ab7a936047@kirei.se> #218: ods-signerd crashes on stop -----------------------------------------------------+---------------------- Reporter: Sebastian Castro | Owner: matthijs Type: defect | Status: new Priority: minor | Component: Signer Version: trunk | Resolution: Keywords: | -----------------------------------------------------+---------------------- Comment (by matthijs): You say this is with trunk? However, the report mentions se_log_debug. But trunk has the log functions renamed from se_log_* to ods_log_*. Perhaps a fresh install will help resolve the issue? -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Wed Feb 16 22:59:01 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Wed, 16 Feb 2011 22:59:01 -0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #218: ods-signerd crashes on stop In-Reply-To: <078.3a57febe631406cd1c74fd51350b2544@kirei.se> References: <078.3a57febe631406cd1c74fd51350b2544@kirei.se> Message-ID: <093.381eb012dc270003de624f7128a1bf8d@kirei.se> #218: ods-signerd crashes on stop -----------------------------------------------------+---------------------- Reporter: Sebastian Castro | Owner: matthijs Type: defect | Status: new Priority: minor | Component: Signer Version: trunk | Resolution: Keywords: | -----------------------------------------------------+---------------------- Comment (by Sebastian Castro ): My bad, actually is in 1.2.0 I acknowledge it's a weird crash because the message passed to se_log_debug it's sane, but I was able to consistently cause the same crash just by calling 'ods-signer stop'. I don't have the testing environment available to replicate, but it's a CentOS 64-bit box. -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Thu Feb 17 10:18:13 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Thu, 17 Feb 2011 10:18:13 -0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #215: Minor change to NOT_READY_KEY error message In-Reply-To: <078.fd190b119962b07be00a733def89935c@kirei.se> References: <078.fd190b119962b07be00a733def89935c@kirei.se> Message-ID: <093.eaf08ef2a59c3a71afab9752b7b68a00@kirei.se> #215: Minor change to NOT_READY_KEY error message -----------------------------------------------------+---------------------- Reporter: Sebastian Castro | Owner: sion Type: enhancement | Status: closed Priority: trivial | Component: Enforcer Version: trunk | Resolution: fixed Keywords: | -----------------------------------------------------+---------------------- Changes (by rb): * status: new => closed * resolution: => fixed Comment: Thanks, committed to r4489 -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Thu Feb 17 10:19:09 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Thu, 17 Feb 2011 10:19:09 -0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #204: ods-hsmutil segfaults when listing keys in TPM chip In-Reply-To: <065.7a1ec9e0075516ab993f1948256b7065@kirei.se> References: <065.7a1ec9e0075516ab993f1948256b7065@kirei.se> Message-ID: <080.c35fdccc9718f85965215a58910d8788@kirei.se> #204: ods-hsmutil segfaults when listing keys in TPM chip ------------------------------------------+--------------------------------- Reporter: Ond?ej Sur? | Owner: rb Type: defect | Status: closed Priority: major | Component: libhsm Version: 1.1.3 | Resolution: fixed Keywords: | ------------------------------------------+--------------------------------- Changes (by rb): * status: accepted => closed * resolution: => fixed -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Thu Feb 17 10:21:33 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Thu, 17 Feb 2011 10:21:33 -0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #199: Issues when removing a zone from signing In-Reply-To: <078.5703655714a16bc038f6e8e422d99276@kirei.se> References: <078.5703655714a16bc038f6e8e422d99276@kirei.se> Message-ID: <093.b8e6895be7c71e33296fd258e64f9097@kirei.se> #199: Issues when removing a zone from signing -----------------------------------------------------+---------------------- Reporter: Sebastian Castro | Owner: rb Type: defect | Status: closed Priority: minor | Component: Enforcer Version: trunk | Resolution: fixed Keywords: | -----------------------------------------------------+---------------------- Changes (by rb): * status: accepted => closed * resolution: => fixed -- Ticket URL: OpenDNSSEC OpenDNSSEC From rickard.bellgrim at iis.se Thu Feb 17 10:52:25 2011 From: rickard.bellgrim at iis.se (Rickard Bellgrim) Date: Thu, 17 Feb 2011 11:52:25 +0100 Subject: [Opendnssec-develop] Release v1.2.1 Message-ID: Hi We have some fixes in the branch. It might be a time for a release? The only thing we have left is this: Signer and Auditor does not agree on a signature https://www.pivotaltracker.com/story/show/9655361 Run away zone serial http://trac.opendnssec.org/ticket/206 ods-signerd crashes on stop http://trac.opendnssec.org/ticket/218 // Rickard From matthijs at NLnetLabs.nl Thu Feb 17 13:02:46 2011 From: matthijs at NLnetLabs.nl (Matthijs Mekking) Date: Thu, 17 Feb 2011 14:02:46 +0100 Subject: [Opendnssec-develop] Release v1.2.1 In-Reply-To: References: Message-ID: <4D5D1C76.80006@nlnetlabs.nl> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 And the NSEC bug has not been backported yet. On 02/17/2011 11:52 AM, Rickard Bellgrim wrote: > Hi > > We have some fixes in the branch. It might be a time for a release? > > The only thing we have left is this: > > Signer and Auditor does not agree on a signature > https://www.pivotaltracker.com/story/show/9655361 > > Run away zone serial > http://trac.opendnssec.org/ticket/206 > > ods-signerd crashes on stop > http://trac.opendnssec.org/ticket/218 > > // Rickard > _______________________________________________ > Opendnssec-develop mailing list > Opendnssec-develop at lists.opendnssec.org > https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJNXRx1AAoJEA8yVCPsQCW5wecH/iS8eNXN8l+xSuDOKXNcrox1 Jf0S4DFg3HoaZA2v/4WI3fpyfJNwz9SZPGy8rVv9RO2o4GW14F9eV+JWk60FZZwn F+Hkjxr/L3FgHncdvVs4gcU0keTHbIXA22daKG8Jb0ZumRA7otJq2QDqtIgf1Oki fpZTxgt3CDb82JKiExkgDD0MYB2GiuoHtb6WOMAj3XK5wj+YMh20a7AKYZDutcU7 IoIQ55R0CGb3MYHpeQmiNd+DghX37d2654tbpEtHRgnQhzCZDpZlReMKEURjLehM kn9rtGTMFN1u6tIE+v5eAk9L9pxxczqxOJdbgG3Bm5+GU9vL0++cPjho/YZSXZ0= =J+7/ -----END PGP SIGNATURE----- From jakob at kirei.se Fri Feb 18 11:04:54 2011 From: jakob at kirei.se (Jakob Schlyter) Date: Fri, 18 Feb 2011 12:04:54 +0100 Subject: [Opendnssec-develop] Release v1.2.1 In-Reply-To: References: Message-ID: On 17 feb 2011, at 11.52, Rickard Bellgrim wrote: > We have some fixes in the branch. It might be a time for a release? yes. jakob -- Jakob Schlyter Kirei AB - http://www.kirei.se/ From owner-dnssec-trac at kirei.se Fri Feb 18 11:47:48 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Fri, 18 Feb 2011 11:47:48 -0000 Subject: [Opendnssec-develop] [OpenDNSSEC] #219: Locating Normal Strategies to Stop Smoking Cigarettes Message-ID: <047.0a3763df8a47e70873cde5a0df9b0efa@kirei.se> #219: Locating Normal Strategies to Stop Smoking Cigarettes ----------------------+----------------------------------------------------- Reporter: anonymous | Owner: rb Type: defect | Status: new Priority: major | Component: Unknown Version: trunk | Keywords: ----------------------+----------------------------------------------------- Locating Normal Strategies to Stop Smoking Cigarettes Are you looking for an choice to result from your cigarettes pattern? If thus, you must be knowledgeable involving the point of which it is besides a person and countless men and women over the world, who may have the exact same aim. Nonetheless, solely a number of will be able to stop smoking cigarettes and come out of this dependency to cigarettes. Once you find yourself in to it, it's possible that you'll obtain this more complicated than anyone predicted, probably, you may definitely not be able to succeed inside your target. Perhaps, you might stop smoking cigarettes for a even though along with yet again pick it up sometime of time. Even though you'll find thousands regarding packages along with products inside the industry, which often assurance that you optimistic result with regards to stop smoking cigarettes, just one or two are capable of offer fulfilling benefits for any people. Furthermore, in case you are making use of the option item without beneficial know-how, you might need to come across several unwanted side effects. Nonetheless, with this content, you might manage to obtain a number of organic tips on how to to give up smoking. Any person is going to be in the position to look at all these methods, since you'll find virtually no side consequences throughout this. Many men and women, whom correctly employed most of these normal methods, had been competent to accomplish their particular goals involving stop smoking help. What's more, these methods are generally less difficult than various other options that are accessible during the industry to help have clear involving using tobacco. Your initial move of which you've got to help take into consideration while gonna give up smoking cigarettes will be, getting a good reason to emerge from this routine. In the event you usually do not get the correct intentions, you may not be able to achieve your goals. In this various other side, in the event that an individual can be forcing anyone to help quit, however you don't really feel enthusiastic from your private self, it may possibly impede the particular development. Your current psychological technique has the crucial factor in serving you to to give up smoking. Listed below shown are a few all-natural ways to stop smoking: Licorice: Many medical evidences as well as lots of involving the actual smokers agree which licorice is able to help these individuals get out of the actual smoking. It is possible to use the stays in the licorice root while you employ a longing for a e cigarette. Nonetheless, make sure you will be making use of it somewhat. Green beans: Following time when you think for instance tobacco, munch some sort of carrot alternatively. Consequently, keep small baggies connected with pumpkin in your car whenever you get out regarding your house. Carrots may also produce you number of well being gains. Also, they will can also make it easier to with all the verbal fixation, which frequently will come when you want a new cigarette. Inflammed clover: Red-colored clover will be furthermore viewed as while a cancers preventer. Them may also help anyone to halt utilizing electronc using tobacco or maybe smoking cigarettes. Rather then using tobacco, gnawing the leaves connected with red clover could assist you to quit the behavior effortlessly. The particular above-mentioned are usually a few of the straightforward along with quick ideas that could help you to occur out connected with the particular smoking cigarettes behavior. Nonetheless, as mentioned above, you must likewise have the correct emotional frame of mind for you to come out connected with this pattern. Taking the particular assistance connected with a stop smoking Hypnosis programs is usually a great approach to acquire positive outcomes. -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Mon Feb 21 03:58:22 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Mon, 21 Feb 2011 03:58:22 -0000 Subject: [Opendnssec-develop] [OpenDNSSEC] #220: Verbosity of new output for 'ods-signer queue' Message-ID: <078.e45e8033df90b0925f8a21f09b7df638@kirei.se> #220: Verbosity of new output for 'ods-signer queue' -----------------------------------------------------+---------------------- Reporter: Sebastian Castro | Owner: matthijs Type: enhancement | Status: new Priority: minor | Component: Signer Version: trunk | Keywords: -----------------------------------------------------+---------------------- On 1.3.0-trunk, the 'ods-signer queue' command shows the state of the scheduled jobs, but once a task is assigned to a worker, disappears from the list. Would be possible to add to the output what's being executed as well? This is particularly useful when operating on large zones. -- Ticket URL: OpenDNSSEC OpenDNSSEC From rickard.bellgrim at iis.se Mon Feb 21 09:03:46 2011 From: rickard.bellgrim at iis.se (Rickard Bellgrim) Date: Mon, 21 Feb 2011 10:03:46 +0100 Subject: [Opendnssec-develop] Meeting 2011-02-23 Message-ID: Hi It is time for a telephone meeting on Wednesday. Date: Wednesday 23 February Time: 14:00-15:00 CET, 13:00-14:00 GMT You can find the agenda here: http://trac.opendnssec.org/wiki/Meetings/Agenda/2011-02-23 // Rickard From jakob at kirei.se Tue Feb 22 07:56:10 2011 From: jakob at kirei.se (Jakob Schlyter) Date: Tue, 22 Feb 2011 08:56:10 +0100 Subject: [Opendnssec-develop] trailing dots In-Reply-To: <201102161150.13306.sion@nominet.org.uk> References: <201102161150.13306.sion@nominet.org.uk> Message-ID: On 16 feb 2011, at 12.50, Si?n Lloyd wrote: > For instance; if someone manually edits the zonelist to add a domain with a > trailing dot I don't imagine that we would want to change that? Or do we? I'm not sure we need to keep the trailing dot, as long as we are able to parse it. IMHO, we should either store all zones with a trailing dot or without one. This means a root zone would be stored as "." or "". jakob From owner-dnssec-trac at kirei.se Wed Feb 23 09:51:29 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Wed, 23 Feb 2011 09:51:29 -0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #218: ods-signerd crashes on stop In-Reply-To: <078.3a57febe631406cd1c74fd51350b2544@kirei.se> References: <078.3a57febe631406cd1c74fd51350b2544@kirei.se> Message-ID: <093.72a100de3070e240199eb589770cd72c@kirei.se> #218: ods-signerd crashes on stop -----------------------------------------------------+---------------------- Reporter: Sebastian Castro | Owner: matthijs Type: defect | Status: new Priority: minor | Component: Signer Version: trunk | Resolution: Keywords: | -----------------------------------------------------+---------------------- Comment (by matthijs): Not being able to reproduce this, makes it hard to resolve. My observation: The argument on line line 84 in segfault-on-exit.log is strange. Perhaps I should explicitly finalize the character array with a '\0'? (But wouldn't the segfault occur earlier?) I tried so in the OpenDNSSEC-1.2 branch (r4512). Could you try it out? -- Ticket URL: OpenDNSSEC OpenDNSSEC From owner-dnssec-trac at kirei.se Thu Feb 24 09:23:38 2011 From: owner-dnssec-trac at kirei.se (OpenDNSSEC) Date: Thu, 24 Feb 2011 09:23:38 -0000 Subject: [Opendnssec-develop] Re: [OpenDNSSEC] #206: Run away zone serial ? In-Reply-To: <055.92187ea21936c331b17c840e99fc5d31@kirei.se> References: <055.92187ea21936c331b17c840e99fc5d31@kirei.se> Message-ID: <070.9d454cef6a3a0b43b3ab03f7d676cc18@kirei.se> #206: Run away zone serial ? ------------------------------+--------------------------------------------- Reporter: hostmaster@? | Owner: matthijs Type: defect | Status: assigned Priority: major | Component: Unknown Version: trunk | Resolution: Keywords: | ------------------------------+--------------------------------------------- Comment (by matthijs): There is one function that updates the internal serial (zonedata.c: zonedata_update_serial()). zd->internal_serial = (prev + update); prev and update are determined depending on the value in the signer configuration. For the datecounter for example (it looks like you are using datecounter): prev = zd->internal_serial; ... soa = (uint32_t) time_datestamp(0, "%Y%m%d", NULL) * 100; soa = se_max(zd->inbound_serial, soa); if (!DNS_SERIAL_GT(soa, prev)) { soa = prev + 1; } update = soa - prev; Furthermore, the internal serial maintained per domain is 0. To me, that is a hint that you just started up the signer engine daemon. However, you do have a file '1.168.192.in-addr.arpa.state'. There should have been a file '1.168.192.in-addr.arpa.denial' as well, that stores the internal states of the domains. I am wondering how that file looked like, that could give me more insight. For now, I have committed a fix in the 1.2. branch that allows any update on the first run (regardless of the previous and new serial value). Basically, an initialised flag that is set or not. Hope this helps. -- Ticket URL: OpenDNSSEC OpenDNSSEC