systemd-resolve hides DS records in explicit queries
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
systemd (Ubuntu) |
New
|
Medium
|
Unassigned |
Bug Description
When querying for DS resource records on a DNSSEC signed domain using dig, the DS records are not shown when the system is using systemd-resolve.
Run: dig +short DS ripe.net
Expected: something like
40991 8 2 D8D3C88263D5893
Actual result: no output.
ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: systemd 237-3ubuntu10.15
ProcVersionSign
Uname: Linux 4.15.0-46-generic x86_64
ApportVersion: 2.20.9-0ubuntu7.6
Architecture: amd64
CurrentDesktop: KDE
Date: Thu Apr 4 14:14:06 2019
MachineType: MSI MS-7A70
ProcKernelCmdLine: BOOT_IMAGE=
SourcePackage: systemd
SystemdDelta:
[EXTENDED] /lib/systemd/
[EXTENDED] /lib/systemd/
2 overridden configuration files found.
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 07/03/2018
dmi.bios.vendor: American Megatrends Inc.
dmi.bios.version: A.80
dmi.board.
dmi.board.name: B250M PRO-VDH (MS-7A70)
dmi.board.vendor: MSI
dmi.board.version: 2.0
dmi.chassis.
dmi.chassis.type: 3
dmi.chassis.vendor: MSI
dmi.chassis.
dmi.modalias: dmi:bvnAmerican
dmi.product.family: Default string
dmi.product.name: MS-7A70
dmi.product.
dmi.sys.vendor: MSI
Changed in systemd (Ubuntu): | |
assignee: | nobody → Dan Streetman (ddstreet) |
importance: | Undecided → Medium |
status: | New → In Progress |
tags: | added: systemd |
Changed in systemd (Ubuntu): | |
status: | In Progress → Confirmed |
assignee: | Dan Streetman (ddstreet) → nobody |
tags: | removed: bionic systemd |
tags: | added: ddstreet |
tags: | removed: ddstreet |
Changed in systemd (Ubuntu): | |
status: | Invalid → New |
Still a problem in 23.10 (mantic). Using resolved's passthrough address 127.0.0.54 results in success.
After it's cached, the default 127.0.0.53 address is happy to return it.
ubuntu@server:~$ dig arin.net ds @127.0.0.53 +short
ubuntu@server:~$ dig arin.net ds @127.0.0.54 +short 8B017DA1BFFBD6B 31FE4B94B4D89D1 C27C1603133 5CE50526
50716 8 2 EB708BF25CC3F56
ubuntu@server:~$ dig arin.net ds @127.0.0.53 +short 8B017DA1BFFBD6B 31FE4B94B4D89D1 C27C1603133 5CE50526
50716 8 2 EB708BF25CC3F56