Closed ogej closed 10 years ago
The JavaScript DNS libraray currently dos not support DNSSEC. You have to use the libunbound resolver (https://github.com/lieser/dkim_verifier/wiki/DNS#libunbound)
edit: If for some reason you can't use libundbound, I could try to add support of the AD flag.
Hi and thanks for your awesome plugin!
Here we go: I told the plugin to use my local dns resolver which supports dnssec. The domainkey record is signed, the record bears the +ad flag. Still, the plugin says the key was not signed by dnssec.
Note: my local resolver uses DNSSEC lookaside validation, which is transparent to the DNS clients.
I thought, the reason why the plugin fails to verify wether the key was signed is that my local dns is somehow bypassed. However, the log says
Any thoughts on this?
This is was a query of 10.0.12.5 says:
Regards!