On Thu, Jul 18, 2019 at 06:41:12AM +0000, Mik J wrote:

> Hello,
> I'm using Openbsd 6.5 and have DiG 9.4.2-P2 provided with it.This version 
> seems to be old (from 2009) but I couldn't find exactly when it dates.
> However new DNS records appeared in 2013 such as CAA in RFC 6844When I dig 
> the CAA record dig returns NXDOMAIN 
> insteadhttps://dns.google.com/query?name=google.com&type=CAA&dnssec=true
> Do you think we could have an updated version of dig in Openbsd base ?
> Thank you
> 
> $ dig CAA google.com

Yes, known. It is on my list to update it, but I don't know when I
will get to it.

If you really need a newer one, you can install isc-bind from packages, it
comes with a newer dig in /usr/local/bin

        -Otto

> 
> ; <<>> DiG 9.4.2-P2 <<>> CAA google.com
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 680
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;CAA.                           IN      A
> ;; AUTHORITY SECTION:
>                        9534    IN      SOA     a.root-servers.net. 
> nstld.verisign-grs.com. 2019071800 1800 900 604800 86400
> 
> ;; Query time: 23 msec
> ;; WHEN: Thu Jul 18 08:13:43 2019
> ;; MSG SIZE  rcvd: 96
> 
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2230
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 8
> 
> ;; QUESTION SECTION:
> ;google.com.                    IN      A
> ;; ANSWER SECTION:
> google.com.             300     IN      A       172.217.18.206
> 
> 
> 
> 

Reply via email to