Maintained by: NLnet Labs

[NLnet Labs Maintainers] Unbound 1.6.1rc3 prerelease

Robert Edmonds
Sat Feb 18 23:00:52 CET 2017


W.C.A. Wijngaards wrote:
> Unbound 1.6.1rc3 is available:
> https://www.unbound.net/downloads/unbound-1.6.1rc3.tar.gz

Hi,

I notice that unbound-anchor from 1.6.1rc3 produces two DSes when run
with "-F" (one for KSK-2010, one for KSK-2017), but it only produces a
single DNSKEY when run without "-F". Is this intentional?

edmonds at chase{0}:/tmp/u/unbound-1.6.1rc3$ rm -f anchor.out; ./unbound-anchor -a anchor.out; cat anchor.out
; autotrust trust anchor file
;;id: . 1
;;last_queried: 1487455039 ;;Sat Feb 18 16:57:19 2017
;;last_success: 1487455039 ;;Sat Feb 18 16:57:19 2017
;;next_probe_time: 1487494910 ;;Sun Feb 19 04:01:50 2017
;;query_failed: 0
;;query_interval: 43200
;;retry_time: 8640
.	172800	IN	DNSKEY	257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} ;;state=2 [  VALID  ] ;;count=0 ;;lastchange=1487455039 ;;Sat Feb 18 16:57:19 2017
edmonds at chase{0}:/tmp/u/unbound-1.6.1rc3$ rm -f anchor.out; ./unbound-anchor -F -a anchor.out; cat anchor.out
; created by unbound-anchor on Sat Feb 18 16:57:26 2017
. IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5
. IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D
edmonds at chase{0}:/tmp/u/unbound-1.6.1rc3$

-- 
Robert Edmonds
edmonds at debian.org