Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dnst signzone produced TTLs differ to that of LDNS #43

Open
ximon18 opened this issue Dec 2, 2024 · 0 comments
Open

dnst signzone produced TTLs differ to that of LDNS #43

ximon18 opened this issue Dec 2, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@ximon18
Copy link
Member

ximon18 commented Dec 2, 2024

LDNS:

;; Zone: example.com.
;
example.com.	86400	IN	SOA	ns.example.com. noc.dns.example.org. 2020080302 7200 3600 1209600 3600
example.com.	86400	IN	RRSIG	SOA 13 2 86400 19700101000140 20241202085815 29203 example.com. y9PUFOgKMzIlP5hN4bn8vT7QrSaHPYgbP2/PvrBGEcOMR6gUe3HBhp+kY4b6pfAHVmwPWKPiNU/atdh7Ar0trQ==
;
example.com.	5000	IN	A	192.0.2.1
example.com.	5000	IN	RRSIG	A 13 2 5000 19700101000140 20241202085815 29203 example.com. rFYHNouvxebsrS7lecnBjHjCyvAYu4T0D4O+cUGQLZi0MOxodaGqL04mBVU/I1BveMx065DRVPeYrbJQpfFPWQ==
example.com.	86400	IN	NS	example.com.
example.com.	86400	IN	RRSIG	NS 13 2 86400 19700101000140 20241202085815 29203 example.com. TcI4Gi23LkBe/fYCDdTrlnDL100qieH674B0bxEEddKXbCFozXNJ2PQ6JEspYrM8eBOJ6gCdFxYWHDxeG2YLow==
example.com.	86400	IN	AAAA	2001:db8::3
example.com.	86400	IN	RRSIG	AAAA 13 2 86400 19700101000140 20241202085815 29203 example.com. 6NfeitU77yGhJ0cA1BT4ylIqKoh7s1krohtchntEcacW+RV3ptmwsj8UujZAIxC53hSqWLztyMonUeYiHPv0tw==
example.com.	86400	IN	DNSKEY	256 3 13 He3P9aBLDe2L9MeQfGU96jnOrULzhRVqHkYuhBLtmY19zgVdvHFcgvtMBZdns36De5hPuzD1Hhi982d1uxFcuQ== ;{id = 29203 (zsk), size = 256b}
example.com.	86400	IN	DNSKEY	257 3 13 6W4xnMJ+f3Tzdat5635hP6KhMblsaeJDPijAqkVAotZGjXvBs5KWTyZiiXYJ/rNcAi3xf+TbQ4NOgOD7lwapaQ== ;{id = 23561 (ksk), size = 256b}
example.com.	86400	IN	RRSIG	DNSKEY 13 2 86400 19700101000140 20241202085815 23561 example.com. 9hzT5JBaVjdWPgvN75/xaKEOHtfkHbZFfwV4bDS+ogBxaUoquXH5/JL74FFJEby8uE/999QMvxsdTeU+qJGcDw==
example.com.	3600	IN	NSEC3PARAM	1 0 1 - 
example.com.	3600	IN	RRSIG	NSEC3PARAM 13 2 3600 19700101000140 20241202085815 29203 example.com. U/cijwOM6wQqkgF1hkiC4HnaBrijKpIhOc7dI30SNFI3yZDkAHmQunaU0fhLXDoquUFSI4L2g1p7nL3iao/szQ==
9vq38lj9qs6s1aruer131mbtsfnvek2p.example.com.	3600	IN	NSEC3	1 0 1 -  hm8a6p4n35dquoan98hvfpnli8r7abn9 A NS SOA AAAA RRSIG DNSKEY NSEC3PARAM  ;{ flags: -, from: example.com. to: mail.example.com.}
9vq38lj9qs6s1aruer131mbtsfnvek2p.example.com.	3600	IN	RRSIG	NSEC3 13 3 3600 19700101000140 20241202085815 29203 example.com. JKXWpbEMF3Vq0SXYBdgcdMUXbo0L7bLdUyUMaAbrhx1sNgPdp/m0vx3/1B7UvZndae2rEphJCCbXq+PW9V3RBA==
;
mail.example.com.	86400	IN	MX	10 example.com.
mail.example.com.	86400	IN	RRSIG	MX 13 3 86400 19700101000140 20241202085815 29203 example.com. LtHEjsmzReUY7ak2sn0KeM+whz4tvuKfY/EwuCkfwIYXPQz2IZlRiL+TavdgcluMn50rNjZVAEw0WU69/g0tdA==
hm8a6p4n35dquoan98hvfpnli8r7abn9.example.com.	3600	IN	NSEC3	1 0 1 -  0lverorlcjoa2lji5rik0otij3lgoj3l MX RRSIG  ;{ flags: -, from: mail.example.com. to: www.example.com.}
hm8a6p4n35dquoan98hvfpnli8r7abn9.example.com.	3600	IN	RRSIG	NSEC3 13 3 3600 19700101000140 20241202085815 29203 example.com. Cj6E/+r2VXbnEcm4KA4JYSRvcQNNEmrovedezU7caYwXZfnjfKOILPggkZ9D+rcFwJyYrf50O2Zppi9giZLg4w==
;
www.example.com.	86400	IN	CNAME	example.com.
www.example.com.	86400	IN	RRSIG	CNAME 13 3 86400 19700101000140 20241202085815 29203 example.com. utZMNhsnQBC2l8Dac5MP8+3yEo7Gp6OdherZLcbzlGmr02OwTq/nogrGyZQ9ddV8sPvxftGnaq5EiB4zJ42BKQ==
0lverorlcjoa2lji5rik0otij3lgoj3l.example.com.	3600	IN	NSEC3	1 0 1 -  9vq38lj9qs6s1aruer131mbtsfnvek2p CNAME RRSIG  ;{ flags: -, from: www.example.com. to: example.com.}
0lverorlcjoa2lji5rik0otij3lgoj3l.example.com.	3600	IN	RRSIG	NSEC3 13 3 3600 19700101000140 20241202085815 29203 example.com. nhZ1V9AbEOCP1pdiJfK+GyUCh5n+qSLLlbhc0MYnxbO4QuIRWS0UlmhjdC+oGpSFdpNQ6fWqBNQCUMXDOh5GtA==
;

DNST (in LDNS mode):

;; Zone: example.com
;
example.com.	86400	IN	SOA	ns.example.com.	noc.dns.example.org.	2020080302	7200	3600	1209600	3600
example.com.	86400	IN	RRSIG	SOA	13	2	86400	100	0	23562	example.com.	2kFYyEKySfry/PbjZEgvdhLLgbbxc5GclY/+mKmr7mB9RUjZfX+m91j79MmvryD0xxOMIKAOyFflA0zSgGLPfg==
;
example.com.	5000	IN	A	192.0.2.1
example.com.	5000	IN	RRSIG	A	13	2	5000	100	0	23562	example.com.	s636+VZ2eBqgTVp1hliXp/nD29uk7sicCFLi505mCHTBQbYk6y7IYCuLyE3HiFY89UP9WlkfkqOhrsONiYP9QQ==
;
example.com.	86400	IN	NS	example.com.
example.com.	86400	IN	RRSIG	NS	13	2	86400	100	0	23562	example.com.	zqjPZOOZqt10JYnjzdyxGHrfveNS4wxk4ssLUetLxXFt+u99do+c+lUwPBOq0pUD3LZsgVoX/dMMKUqjyFitCQ==
;
example.com.	5000	IN	AAAA	2001:db8::3
example.com.	5000	IN	RRSIG	AAAA	13	2	5000	100	0	23562	example.com.	fKkCA9MyKIc5MyrqGj/IYWfUjToHPUy26qHy2/tzHTDsfHrNWye+/jEOI6m5CtFPeB3qBXNtOrmIKV6e/qBX1g==
;
example.com.	5000	IN	DNSKEY	256	3	13	He3P9aBLDe2L9MeQfGU96jnOrULzhRVqHkYuhBLtmY19zgVdvHFcgvtMBZdns36De5hPuzD1Hhi982d1uxFcuQ== ;{id = 29203 (zsk), size = 256b}
example.com.	5000	IN	DNSKEY	257	3	13	He3P9aBLDe2L9MeQfGU96jnOrULzhRVqHkYuhBLtmY19zgVdvHFcgvtMBZdns36De5hPuzD1Hhi982d1uxFcuQ== ;{id = 29204 (ksk), size = 256b}
example.com.	5000	IN	DNSKEY	257	3	13	6W4xnMJ+f3Tzdat5635hP6KhMblsaeJDPijAqkVAotZGjXvBs5KWTyZiiXYJ/rNcAi3xf+TbQ4NOgOD7lwapaQ== ;{id = 23561 (ksk), size = 256b}
example.com.	5000	IN	DNSKEY	258	3	13	6W4xnMJ+f3Tzdat5635hP6KhMblsaeJDPijAqkVAotZGjXvBs5KWTyZiiXYJ/rNcAi3xf+TbQ4NOgOD7lwapaQ== ;{id = 23562 (zsk), size = 256b}
example.com.	5000	IN	RRSIG	DNSKEY	13	2	5000	100	0	23561	example.com.	RymmPnAu+BzQjJIwpZKpACUj0//itIxZkV/ph08MEn37Sfiq1Lv8t6leX0gDDLT8wBW1WVPD7+5VyryTPe1FdQ==
;
example.com.	3600	IN	NSEC3PARAM	1	0	1	-
example.com.	3600	IN	RRSIG	NSEC3PARAM	13	2	3600	100	0	23562	example.com.	ZdzUMxkrHM1GSczvD+F6gRUDrYGwuXMuGCHMI8YAlGzlLkppGKcGTsGnc0PqOwcAyzU1ZirgF5c3gnGe/cR/jw==
;
9vq38lj9qs6s1aruer131mbtsfnvek2p.example.com.	3600	IN	NSEC3	1	0	1	-	HM8A6P4N35DQUOAN98HVFPNLI8R7ABN9	A	NS	SOA	AAAA	RRSIG	DNSKEY	NSEC3PARAM ;{ flags: -, from: example.com., to: mail.example.com.}
9vq38lj9qs6s1aruer131mbtsfnvek2p.example.com.	3600	IN	RRSIG	NSEC3	13	3	3600	100	0	23562	example.com.	LxkH0H1jffBtz07ymGb+ABMu8SraGXs0NDX2ZxfncmwaP7/ohLs0306P7RVC7A8WKgyFfcLf3rn0vvlEJA2XgA==
;
mail.example.com.	5000	IN	MX	10	example.com.
mail.example.com.	5000	IN	RRSIG	MX	13	3	5000	100	0	23562	example.com.	lXnvzpqW/3MflMB8EowqXr+PJQS6it+z+ynd98Asdrp/pm+78CmxCgM8+OLc8KOHzeXBqCtS7w7462t+I8k/AQ==
;
hm8a6p4n35dquoan98hvfpnli8r7abn9.example.com.	3600	IN	NSEC3	1	0	1	-	0LVERORLCJOA2LJI5RIK0OTIJ3LGOJ3L	MX	RRSIG ;{ flags: -, from: mail.example.com., to: www.example.com.}
hm8a6p4n35dquoan98hvfpnli8r7abn9.example.com.	3600	IN	RRSIG	NSEC3	13	3	3600	100	0	23562	example.com.	9L4XmKPb7Z4AcctYXZHDtOPzr/42LPDeropljFFbb+GWkMQwxzfFy6wJsCUg3sNbBkyiFhwRQNsE/JyZCD8Tbg==
;
www.example.com.	5000	IN	CNAME	example.com.
www.example.com.	5000	IN	RRSIG	CNAME	13	3	5000	100	0	23562	example.com.	93RqRjuGdYodOZhmiEz7uGP6UBB4tpY5XSUqBQtnrffciakTae1f3U3IvO+ENuchgxUKUPupzDiPmczVu+VvIQ==
;
0lverorlcjoa2lji5rik0otij3lgoj3l.example.com.	3600	IN	NSEC3	1	0	1	-	9VQ38LJ9QS6S1ARUER131MBTSFNVEK2P	CNAME	RRSIG ;{ flags: -, from: www.example.com., to: example.com.}
0lverorlcjoa2lji5rik0otij3lgoj3l.example.com.	3600	IN	RRSIG	NSEC3	13	3	3600	100	0	23562	example.com.	5lO46Fh7c0/X0ECtWmXYgOb8pYPWqvP37olujorOJLbWQs+C1u5nlPXJ7Vn2pCGpeNAaMYdYrXAXs0UA5XooKA==
;

Notice the different TTL on example.com. 5000 IN AAAA 2001:db8::3.

@ximon18 ximon18 added the bug Something isn't working label Dec 2, 2024
@ximon18 ximon18 changed the title signzone produced TTLs differ to that of LDNS DNST signzone produced TTLs differ to that of LDNS Dec 2, 2024
@ximon18 ximon18 changed the title DNST signzone produced TTLs differ to that of LDNS dnst signzone produced TTLs differ to that of LDNS Dec 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant