[Unbound-users] Expired RRSIGs, yet still "AD" flag set

[Andreas Schulze]

Am 30.03.2011 13:54 schrieb Hauke Lampe:
> 
> Hi.
> 
> I have a case here where RRSIGs expired, yet Unbound still sets the "AD"
> flag in responses.
not here: (unbound-1.4.9)

# dig @127.0.0.1 mixmaster.mixmin.net. mx +dnssec

; <<>> DiG 9.5.0-P2 <<>> @127.0.0.1 mixmaster.mixmin.net. mx +dnssec
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24891
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 512
;; QUESTION SECTION:
;mixmaster.mixmin.net.          IN      MX

;; ANSWER SECTION:
mixmaster.mixmin.net.   172722  IN      MX      10 snorky.mixmin.net.
mixmaster.mixmin.net.   172722  IN      RRSIG   MX 5 3 172800 20110328161855 20110226161855 58161 mixmin.net. xIOOe273z9oJb6EM4l0/KzqrYYXUHUbQRP89U1GMjyJ/hYdNhRZGzCj2 RcRx21v3hjL+1F9KCc280MqXUo6FGKUBC4ZQ09geQ5dkHEesXi8Cwoo1 QcETDvSmTR3/PN0Bz/Ho77m/+7DgrV6dRexABBpTWNYio+OBO8kCR1+y iq0=

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Mar 30 14:46:59 2011
;; MSG SIZE  rcvd: 242

# unbound-host -C /etc/unbound/unbound.conf -v mixmaster.mixmin.net.
mixmaster.mixmin.net. mail is handled by 10 snorky.mixmin.net. (insecure)

# unbound-host -C /etc/unbound/unbound.conf -v nic.cz
nic.cz mail is handled by 10 mail.nic.cz. (secure)
nic.cz mail is handled by 15 mail4.nic.cz. (secure)
nic.cz mail is handled by 20 mx.cznic.org. (secure)
nic.cz mail is handled by 30 bh.nic.cz. (secure)

# date
Wed Mar 30 14:50:34 CEST 2011

Andreas
-- 
Andreas Schulze
Internetdienste | P252

DATEV eG
90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196
E-Mail info @datev.de | Internet www.datev.de
Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70
Vorstand
Prof. Dieter Kempf (Vorsitzender)
Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender)
Dipl.-Kfm. Michael Leistenschneider
Jörg Rabe v. Pappenheim
Dipl.-Vw. Eckhard Schwarzer
Vorsitzender des Aufsichtsrates: Reinhard Verholen