Re: verify failed for dnssec enabled senderdomain

From: Murray S. Kucherawy <msk_at_blackops.org>
Date: Wed, 24 Nov 2010 11:20:56 -0800 (PST)

On Wed, 24 Nov 2010, Daniel Black wrote:
> DNSSEC looks fine here. Try from your receiver machine.

libunbound does verify it, but at a library level it also does return the
RRSIG record in the answer section of the reply, which was unexpected. It
looks like "unbound-host" doesn't show it to you, but it is there in the
returned buffer so libopendkim has to be told to deal with it.

It's fixed for 2.2.2.
Received on Wed Nov 24 2010 - 19:21:23 PST