Package: knot-dnsutils Version: 2.5.4-1 Severity: important Dear Maintainer,
dig from knot-dnsutils version 2.5.4-1 strips underscore characters which makes it impossible to query service based qnames used for TLSA,SRV etc. # dig -q _25._tcp.smtp.wuji.cz. -t TLSA ;; ->>HEADER<<- opcode: QUERY; status: NXDOMAIN; id: 52089 ;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 1; ADDITIONAL: 0 ;; QUESTION SECTION: ;; 25.tcp.smtp.wuji.cz. IN TLSA ;; AUTHORITY SECTION: wuji.cz. 2178 IN SOA ns1.wuji.cz. hostmaster.wuji.cz. 2017032005 7200 1800 604800 3600 version 2.4.0-3+deb9u1 from stretch works as expected # dig -q _25._tcp.smtp.wuji.cz. -t TLSA ;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 116 ;; Flags: qr rd ra; QUERY: 1; ANSWER: 1; AUTHORITY: 0; ADDITIONAL: 0 ;; QUESTION SECTION: ;; _25._tcp.smtp.wuji.cz. IN TLSA ;; ANSWER SECTION: _25._tcp.smtp.wuji.cz. 3600 IN TLSA 3 1 1 C6F9ABECBFEB04E94ADB8623FBE9AAA1373FA0B15903B3BA378787AA688A0B7D regards Martin Kraus -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.12.4-1 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=cs_CZ.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: sysvinit (via /sbin/init) Versions of packages knot-dnsutils depends on: ii libc6 2.24-17 ii libdnssec4 2.5.4-1 ii libfstrm0 0.3.0-1+b1 ii libgnutls30 3.5.15-2 ii libidn2-0 2.0.2-3 ii libknot6 2.5.4-1 ii libprotobuf-c1 1.2.1-2 ii libzscanner1 2.5.4-1 knot-dnsutils recommends no packages. knot-dnsutils suggests no packages. -- no debconf information