Ubuntu
openssh package

  1. Bug #242956
  2. Comment #15

Comment 15 for bug 242956

Revision history for this message
Hauke Lampe (hauke) wrote :

The problem lies within the libc stub resolver. I patched mine, so it always sets the AD flag in queries, which prompts the recursor to set AD in response if DNSSEC validation succeeded.

Verbose explanations (one of my seldom public blog posts ;) and small patch here:
http://bd.hauke-lampe.de/dnssec/how-to-get-dnssec-ad-flag-with-glibc.html