RE: can't query for RRSIG that references NSEC3

2009-06-24 Thread Jack Tavares
: can't query for RRSIG that references NSEC3 On Jun 24 2009, Jack Tavares wrote: >a correction: > >my dig command is > >dig @127.0.0.1 -t RRSIG 4PPH7Q8R02M0AD8MLJPS0UEH2AB9KFJL.test.net > >and I still get NXDOMAIN NSEC3 records (and their associated RRSIG records) are, in

RE: can't query for RRSIG that references NSEC3

2009-06-24 Thread Chris Thompson
On Jun 24 2009, Jack Tavares wrote: a correction: my dig command is dig @127.0.0.1 -t RRSIG 4PPH7Q8R02M0AD8MLJPS0UEH2AB9KFJL.test.net and I still get NXDOMAIN NSEC3 records (and their associated RRSIG records) are, in a sense, not properly part of the zone. RFC 5155 section 7,2,8 "Respondi

RE: can't query for RRSIG that references NSEC3

2009-06-24 Thread Jack Tavares
query for RRSIG that references NSEC3 When I query my test zone I get RRSIG records that cover NSEC3 and all the NSEC3 records etc like so: dig axfr @127.0.0.1 test.net. ; <<>> DiG 9.6.1 <<>> axfr @127.0.0.1 test.net. ; (1 server found) ;; global options: +cmd test.

can't query for RRSIG that references NSEC3

2009-06-24 Thread Jack Tavares
When I query my test zone I get RRSIG records that cover NSEC3 and all the NSEC3 records etc like so: dig axfr @127.0.0.1 test.net. ; <<>> DiG 9.6.1 <<>> axfr @127.0.0.1 test.net. ; (1 server found) ;; global options: +cmd test.net. 500 IN SOA d62.test.net. hostmaster.