Dear Luca Boccassi, Dear Maintainers, On Sun, 28 Apr 2024 11:42:11 +0100 Luca Boccassi <bl...@debian.org> wrote: > On Sun, 28 Apr 2024 11:53:17 +0200 Adrien CLERC > <bugs-deb...@antipoul.fr> wrote: > > Package: systemd-resolved > > Version: 255.5-1 > > Severity: important > > > > Dear Maintainer, > > > > Since 255.5-1, resolvectl produces the following: > > > > ❯ resolvectl query --validate=yes www.youtube.com > > www.youtube.com: resolve call failed: DNSSEC validation failed: no- > signature > > > > The domain is unsigned. It worked in 255.4-1+b1, but I'm unable to > rollback, > > since it depends on libsystemd which makes a lot of package unhappy > with > > dependencies. > > > > Did I miss something? > > In the meantime, I'll use "DNSSEC=no", but that's not a definitive > answer. > > > > Have a nice day, > > Adrien > > > > There are no resolved patches downstream, report this upstream
It has been resolved upstream [1] but need backporting for now. I think commits to backports from upstream are: d840783db5208219c78d73b9b46ef5daae9fea0a 5237ffdf2b63a5afea77c3470d9981a2c29643cc 414a9b8e5e1e772261b0ffaedc853f5c0aba5719 which have already been backported in ArchLinux [2]. [1] https://github.com/systemd/systemd/issues/32531 [2] https://gitlab.archlinux.org/archlinux/packaging/packages/systemd/-/blob/main/PKGBUILD?ref_type=heads#L95 -- Cédric Hannotier
