Re: DNSSEC vs netbsd-8/sparc?

[Havard Eidnes <he%NetBSD.org@localhost>]

> BIND in netbsd-8 is version 9.10.5-P1.
>
> BIND compiled from ISC, version 9.10.5-P3 also does this correctly:
>
> castor: {11} dig . dnskey | bin/dnssec/dnssec-dsfromkey -f - .
> . IN DS 20326 8 1 AE1EA5B974D4C858B740BD03E3CED7EBFCBD1724
> . IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D
> castor: {12}
>
> I'm going to do 9.10.5-P1 from ISC next.

Same, it's working as it should:

castor: {5} dig . dnskey | bin/dnssec/dnssec-dsfromkey -f - .
. IN DS 20326 8 1 AE1EA5B974D4C858B740BD03E3CED7EBFCBD1724
. IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D
castor: {6}

In these builds dnssec-dsfromkey links dynamically (among others)
against

        -lcrypt.1 => /lib/libcrypt.so.1
        -lcrypto.12 => /usr/lib/libcrypto.so.12

So now I'm a bit confused where this error comes from.  Its root
cause does not seem to be the in-tree compiler (the "standalone"
BIND releases I've built are built with "-g -O2"), and it's not
the original BIND code either by the looks of it, as this is the
same code which is in netbsd-8.

Regards,

- Håvard