Re: DNSSEC vs netbsd-8/sparc?

[Havard Eidnes <he%NetBSD.org@localhost>]

>> I now have BIND 9.14.8 built from pkgsrc, built with the in-tree
>> "cc" on a the same 8.1/sparc64 host mentioned above, and it does
>> it correctly:
>>
>> castor# dig . dnskey | /usr/pkg/sbin/dnssec-dsfromkey -f - .
>> . IN DS 20326 8 1 AE1EA5B974D4C858B740BD03E3CED7EBFCBD1724
>> . IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D
>> castor# 
>
> BIND 9.11.13, also from pkgsrc, does this correctly:
>
> castor# dig . dnskey | /usr/pkg/sbin/dnssec-dsfromkey -f - .
> . IN DS 20326 8 1 AE1EA5B974D4C858B740BD03E3CED7EBFCBD1724
> . IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D
> castor# 

BIND in netbsd-8 is version 9.10.5-P1.

BIND compiled from ISC, version 9.10.5-P3 also does this correctly:

castor: {11} dig . dnskey | bin/dnssec/dnssec-dsfromkey -f - .
. IN DS 20326 8 1 AE1EA5B974D4C858B740BD03E3CED7EBFCBD1724
. IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D
castor: {12} 

I'm going to do 9.10.5-P1 from ISC next.

Regards,

- Håvard