From mboxrd@z Thu Jan  1 00:00:00 1970
From: Michael Tremer <michael.tremer@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: DANE-Record for www.ipfire.org missing
Date: Fri, 10 Nov 2017 22:19:10 +0000
Message-ID: <1510352350.3441.0.camel@ipfire.org>
In-Reply-To: <20171110205950.4443178c.peter.mueller@link38.eu>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============4271166774847627465=="
List-Id: <development.lists.ipfire.org>

--===============4271166774847627465==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hi,

I get this:

[ms(a)hughes ~]$ dig TLSA _443._tcp.ipfire.org

; <<>> DiG 9.11.1-P3-RedHat-9.11.1-2.P3.fc26 <<>> TLSA _443._tcp.ipfire.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4259
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;_443._tcp.ipfire.org.		IN	TLSA

;; ANSWER SECTION:
_443._tcp.ipfire.org.	21600	IN	CNAME	_letsencrypt.certs.ipfire.org.
_letsencrypt.certs.ipfire.org. 21600 IN	TLSA	2 1 1 60B87575447DCBA2A36B7D11AC=
09FB24A9DB406FEE12D2CC90180517 616E8A18

;; Query time: 66 msec
;; SERVER: 192.168.191.1#53(192.168.191.1)
;; WHEN: Fri Nov 10 22:18:02 GMT 2017
;; MSG SIZE  rcvd: 129

What is it you are getting?

If you want to avoid the caches, just query
ns[123].lightningwirelabs.com.

-Michael

On Fri, 2017-11-10 at 20:59 +0100, Peter M=C3=BCller wrote:
> Hello Michael,
>=20
> during some tests, I noticed that the DANE record for
> www.ipfire.org is still missing. In the first place, I
> thought this was because of some DNS reply caching, but
> it isn't.
>=20
> Just for the record, should be an easy change.
>=20
> Apart from that all DANE records seem to be present.
>=20
> I will deal with the Postfix configuration on IPFire's MX
> next week (need to work at the weekend).
>=20
> Best regards,
> Peter M=C3=BCller

--===============4271166774847627465==
Content-Type: application/pgp-signature
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="signature.asc"
MIME-Version: 1.0
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--===============4271166774847627465==--