Unsigned zone:
lac-megantic.qc.ca. IN NS ns1.com2media.ca.
IN NS ns2.com2media.ca.
ville.lac-megantic.qc.ca. IN NS ns1.com2media.ca.
IN NS ns2.com2media.ca.
Signed zone (ODS):
lac-megantic.qc.ca. 86400 IN NS ns1.com2media.ca.
lac-megantic.qc.ca. 86400 IN NS ns2.com2media.ca.
Signed zone (BIND):
lac-megantic.qc.ca. 86400 IN NS ns1.com2media.ca.
86400 IN NS ns2.com2media.ca.
ville.lac-megantic.qc.ca. 86400 IN NS ns1.com2media.ca.
86400 IN NS ns2.com2media.ca.
It appears ODS is ignoring the 4th level when the 3rd level exists
(presumably this behaviour would be different if the NS RRset differs, but
I've yet to confirm that).
I didn't expect zones to disappear from the signed zone, in any case, and
makes our post-signing validation checks fail.
Can this be considered a bug?
Thanks,
-Jake
_______________________________________________
Opendnssec-user mailing list
Opendnssec-user@lists.opendnssec.org
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
