[Cerowrt-devel] test-ipv6.com vs dnssec

[Jim Gettys]

More specifically, after boot, most of the time test-ipv6.com reports lots
of problems.

Then I turned off both dnssec and dnssec-check-unsigned, and restarted
dnsmasq; clean bill of health from test-ipv6.com.

Then I turned on dnssec only, leaving dnssec-check-unsigned, and got a
clean bill of health.

Then I turned on both at the same time, and things are working.

So we seem to have a boot time race of some sort.
                              - Jim



On Fri, Apr 25, 2014 at 1:39 PM, Dave Taht <dave.taht at gmail.com> wrote:

> jg tells me the test-ipv6.com site fails with dnssec and enabled on
> native ipv6.
>
> disabling dnssec works.
>
> anyone can confirm? get a log/packet capture?
>
>
> --
> Dave Täht
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel at lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.bufferbloat.net/pipermail/cerowrt-devel/attachments/20140425/2aa6a7b0/attachment-0002.html>