[Opendnssec-develop] Re: [validns-users] NSEC3 and unsupported RR types

[Matthijs Mekking]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/10/2013 01:56 PM, Anton Berezin wrote:
> Hi,
> 
> On Wed, Apr 10, 2013 at 01:21:03PM +0200, Matthijs Mekking wrote:
> 
>> We are planning to use validns in our test scripts, as we believe
>> it is good to validate zones with a different code base than the
>> signer. We see one test failing. The zone in question covers all
>> RR types.
>> 
>> First, the zone also includes all obsoleted RR types and validns
>> does not support those. Second, it complains about a broken NSEC3
>> chain. I don't know if the two have correlation.
> 
> Yes, lsjuf2e6mg5p2lhd4ifn9j1d0tau9v6m NSEC3 was not parsed
> correctly due to all the unsupported RR types it mentions, so I
> think there is only one real problem - unsupported RR types.
> 
> I'll see about adding support for them.

Cool. Thanks a lot.

> 
> Do you mind if I include your wonderfully convoluted zone into my
> own test suite?

Not at all :)

Best regards,
  Matthijs

> 
> Cheers, \Anton.
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iQEcBAEBAgAGBQJRZV04AAoJEA8yVCPsQCW5oVoIAJfgbUwMSzPLogiYRKRfgDmB
vNBRLXvdJVC0J47q28x2Yp38Y8z/ZkC3OYXXBFchbb4a4YVOU0PVM3DscERtMM/V
/rs8y8AygEy33d/bxY3Qtg04jsqsOLiZYP3B+8+X0I1WXTc1IQiph81irMioWeky
VT+WPPSx8o0+NNKaAjLfYp7/JyIIVMxmhch7y6K8OxEdfFjG+VI3+5spssmhXd8A
Qm7EPDfxu/3sqjMUCADm/sKDHIw3nYrUcQjEP/7duMAOGAjk9Lc/NqYULt9m0ghY
dNonr1X3e/reKrasolqBEx3cDH/fTN8VBrnck4Gh2HrtbPmx1cksgQXFBudZveo=
=StsA
-----END PGP SIGNATURE-----