[gmarzot@alvin validator]$ apps/validate -p good-A.good-ns.test.dnssec-tools.orgResult: ****START****
Result: OK
Result: ****END****
DNSSEC status: VAL_SUCCESS [131]
Validated response:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 0
;; flags: ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; good-A.good-ns.test.dnssec-tools.org, type = A, class = IN
good-A.good-ns.test.dnssec-tools.org. 1D IN A 168.150.236.43
[gmarzot@alvin validator]$ sudo mv /etc/resolv.conf
resolv.conf resolv.conf.predhclient
[gmarzot@alvin validator]$ sudo cp /etc/resolv.conf /etc/resolv.conf.secure
[gmarzot@alvin validator]$ fpdns
bash: fpdns: command not found
[gmarzot@alvin validator]$ sudo vi /etc/resolv.conf [gmarzot@alvin validator]$ apps/validate -o7:stderr -p good-A.good-ns.test.dnssec-tools.org
Reading resolver policy from /etc/resolv.conf
Reading validator policy from /etc/dnsval.conf
Reading next policy fragment
Result: ****START****
val_resolve_and_check(): looking for {good-A.good-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {good-A.good-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {good-A.good-ns.test.dnssec-tools.org 1 1}
good-A.good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-A.good-ns.test.dnssec-tools.org to:
192.168.1.1
End of Sending query for good-A.good-ns.test.dnssec-tools.org
good-A.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found data for {good-A.good-ns.test.dnssec-tools.org 1 1}
good-A.good-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {good-A.good-ns.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {good-A.good-ns.test.dnssec-tools.org 1 46}
good-A.good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-A.good-ns.test.dnssec-tools.org to:
192.168.1.1
End of Sending query for good-A.good-ns.test.dnssec-tools.org
good-A.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found data for {good-A.good-ns.test.dnssec-tools.org 1 46}
good-A.good-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {good-ns.test.dnssec-tools.org IN(1) DNSKEY(48)}
ask_resolver(): sending query for {good-ns.test.dnssec-tools.org 1 48}
good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-ns.test.dnssec-tools.org to:
192.168.1.1
End of Sending query for good-ns.test.dnssec-tools.org
good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found data for {good-ns.test.dnssec-tools.org 1 48}
good-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {good-ns.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {good-ns.test.dnssec-tools.org 1 46}
good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-ns.test.dnssec-tools.org to:
192.168.1.1
End of Sending query for good-ns.test.dnssec-tools.org
verifying next assertion
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x6ff1485e4a7f21281c36902ca3d9809d8ec5cc69
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Result: FAILED: Error in val_resolve_and_check(): 1
Result: ****END****
DNSSEC status: Unknown Error Value [208]
Non-validated response:
;; ns_initparse: Message too long
DNSSEC status: Unknown Error Value [255]
Non-validated response:
;; ns_initparse: Message too long
Segmentation fault