API tools faq
paste
Advertisement
lkchen

BIND 9.9.4-P2 insecure delegation proof failure

lkchen
Apr 2nd, 2014
109
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.98 KB | None | 0 0
raw download clone embed print report
  1. 02-Apr-2014 14:38:32.000 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: starting
  2. 02-Apr-2014 14:38:32.000 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: attempting insecurity proof
  3. 02-Apr-2014 14:38:32.000 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: checking existence of DS at 'edu'
  4. 02-Apr-2014 14:38:32.000 dnssec: debug 9: validating @245c7920: click.mail.nacada.ksu.edu A: proveunsecure: creating fetch for edu DS
  5. 02-Apr-2014 14:38:32.031 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: in dsfetched2: success
  6. 02-Apr-2014 14:38:32.031 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: resuming proveunsecure
  7. 02-Apr-2014 14:38:32.031 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: checking existence of DS at 'ksu.edu'
  8. 02-Apr-2014 14:38:32.031 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: plain DNSSEC returns unsecure (ksu.edu): looking for DLV
  9. 02-Apr-2014 14:38:32.031 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: looking for DLV click.mail.nacada.ksu.edu.dlv.isc.org
  10. 02-Apr-2014 14:38:32.031 dnssec: debug 9: validating @245c7920: click.mail.nacada.ksu.edu A: finddlvsep: creating fetch for click.mail.nacada.ksu.edu.dlv.isc.org DLV
  11. 02-Apr-2014 14:38:32.031 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: DLV lookup: wait
  12. 02-Apr-2014 14:38:32.112 dnssec: debug 3: validating @1e134800: click.mail.nacada.ksu.edu.dlv.isc.org DLV: starting
  13. 02-Apr-2014 14:38:32.112 dnssec: debug 3: validating @1e134800: click.mail.nacada.ksu.edu.dlv.isc.org DLV: attempting negative response validation
  14. 02-Apr-2014 14:38:32.112 dnssec: debug 9: validating @1e134800: click.mail.nacada.ksu.edu.dlv.isc.org DLV: validate_authority: creating validator for dlv.isc.org SOA
  15. 02-Apr-2014 14:38:32.112 dnssec: debug 3: validating @1e134800: click.mail.nacada.ksu.edu.dlv.isc.org DLV: in authvalidated
  16. 02-Apr-2014 14:38:32.112 dnssec: debug 3: validating @1e134800: click.mail.nacada.ksu.edu.dlv.isc.org DLV: resuming nsecvalidate
  17. 02-Apr-2014 14:38:32.112 dnssec: debug 9: validating @1e134800: click.mail.nacada.ksu.edu.dlv.isc.org DLV: validate_authority: creating validator for ksu.edu.dlv.isc.org NSEC
  18. 02-Apr-2014 14:38:32.112 dnssec: debug 3: validating @1e134800: click.mail.nacada.ksu.edu.dlv.isc.org DLV: in authvalidated
  19. 02-Apr-2014 14:38:32.112 dnssec: debug 3: validating @1e134800: click.mail.nacada.ksu.edu.dlv.isc.org DLV: looking for relevant NSEC
  20. 02-Apr-2014 14:38:32.112 dnssec: debug 3: validating @1e134800: click.mail.nacada.ksu.edu.dlv.isc.org DLV: nsec range ok
  21. 02-Apr-2014 14:38:32.112 dnssec: debug 3: validating @1e134800: click.mail.nacada.ksu.edu.dlv.isc.org DLV: resuming nsecvalidate
  22. 02-Apr-2014 14:38:32.113 dnssec: debug 3: validating @1e134800: click.mail.nacada.ksu.edu.dlv.isc.org DLV: in checkwildcard: *.ksu.edu.dlv.isc.org
  23. 02-Apr-2014 14:38:32.113 dnssec: debug 3: validating @1e134800: click.mail.nacada.ksu.edu.dlv.isc.org DLV: looking for relevant NSEC
  24. 02-Apr-2014 14:38:32.113 dnssec: debug 3: validating @1e134800: click.mail.nacada.ksu.edu.dlv.isc.org DLV: nsec range ok
  25. 02-Apr-2014 14:38:32.113 dnssec: debug 3: validating @1e134800: click.mail.nacada.ksu.edu.dlv.isc.org DLV: nonexistence proof(s) found
  26. 02-Apr-2014 14:38:32.113 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: in dlvfetched: ncache nxdomain
  27. 02-Apr-2014 14:38:32.113 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: looking for DLV mail.nacada.ksu.edu.dlv.isc.org
  28. 02-Apr-2014 14:38:32.113 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: DNS_R_COVERINGNSEC
  29. 02-Apr-2014 14:38:32.113 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: covering nsec found: 'mail.nacada.ksu.edu.dlv.isc.org' 'ksu.edu.dlv.isc.org' 'ai.mit.edu.dlv.isc.org'
  30. 02-Apr-2014 14:38:32.113 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: looking for DLV nacada.ksu.edu.dlv.isc.org
  31. 02-Apr-2014 14:38:32.113 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: DNS_R_COVERINGNSEC
  32. 02-Apr-2014 14:38:32.113 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: covering nsec found: 'nacada.ksu.edu.dlv.isc.org' 'ksu.edu.dlv.isc.org' 'ai.mit.edu.dlv.isc.org'
  33. 02-Apr-2014 14:38:32.113 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: looking for DLV ksu.edu.dlv.isc.org
  34. 02-Apr-2014 14:38:32.113 dnssec: debug 9: validating @245c7920: click.mail.nacada.ksu.edu A: finddlvsep: creating fetch for ksu.edu.dlv.isc.org DLV
  35. 02-Apr-2014 14:38:32.113 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: DLV lookup: wait
  36. 02-Apr-2014 14:38:32.149 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: in dlvfetched: success
  37. 02-Apr-2014 14:38:32.149 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: DLV ksu.edu found
  38. 02-Apr-2014 14:38:32.149 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: dlv_validator_start
  39. 02-Apr-2014 14:38:32.149 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: restarting using DLV
  40. 02-Apr-2014 14:38:32.149 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: attempting insecurity proof
  41. 02-Apr-2014 14:38:32.149 dnssec: debug 3: validating @245c7920: click.mail.nacada.ksu.edu A: checking existence of DS at 'nacada.ksu.edu'
  42. 02-Apr-2014 14:38:32.149 dnssec: warning: validating @245c7920: click.mail.nacada.ksu.edu A: can't validate existing negative responses (no DS)
  43. 02-Apr-2014 14:38:32.171 dnssec: debug 3: validating @23b77700: click.mail.nacada.ksu.edu A: starting
  44. 02-Apr-2014 14:38:32.171 dnssec: debug 3: validating @23b77700: click.mail.nacada.ksu.edu A: attempting insecurity proof
  45. 02-Apr-2014 14:38:32.171 dnssec: debug 3: validating @23b77700: click.mail.nacada.ksu.edu A: checking existence of DS at 'edu'
  46. 02-Apr-2014 14:38:32.171 dnssec: debug 3: validating @23b77700: click.mail.nacada.ksu.edu A: checking existence of DS at 'ksu.edu'
  47. 02-Apr-2014 14:38:32.172 dnssec: debug 3: validating @23b77700: click.mail.nacada.ksu.edu A: plain DNSSEC returns unsecure (ksu.edu): looking for DLV
  48. 02-Apr-2014 14:38:32.172 dnssec: debug 3: validating @23b77700: click.mail.nacada.ksu.edu A: looking for DLV click.mail.nacada.ksu.edu.dlv.isc.org
  49. 02-Apr-2014 14:38:32.172 dnssec: debug 3: validating @23b77700: click.mail.nacada.ksu.edu A: looking for DLV mail.nacada.ksu.edu.dlv.isc.org
  50. 02-Apr-2014 14:38:32.172 dnssec: debug 3: validating @23b77700: click.mail.nacada.ksu.edu A: DNS_R_COVERINGNSEC
  51. 02-Apr-2014 14:38:32.172 dnssec: debug 3: validating @23b77700: click.mail.nacada.ksu.edu A: covering nsec found: 'mail.nacada.ksu.edu.dlv.isc.org' 'ksu.edu.dlv.isc.org' 'ai.mit.edu.dlv.isc.org'
  52. 02-Apr-2014 14:38:32.172 dnssec: debug 3: validating @23b77700: click.mail.nacada.ksu.edu A: looking for DLV nacada.ksu.edu.dlv.isc.org
  53. 02-Apr-2014 14:38:32.172 dnssec: debug 3: validating @23b77700: click.mail.nacada.ksu.edu A: DNS_R_COVERINGNSEC
  54. 02-Apr-2014 14:38:32.172 dnssec: debug 3: validating @23b77700: click.mail.nacada.ksu.edu A: covering nsec found: 'nacada.ksu.edu.dlv.isc.org' 'ksu.edu.dlv.isc.org' 'ai.mit.edu.dlv.isc.org'
  55. 02-Apr-2014 14:38:32.172 dnssec: debug 3: validating @23b77700: click.mail.nacada.ksu.edu A: looking for DLV ksu.edu.dlv.isc.org
  56. 02-Apr-2014 14:38:32.172 dnssec: debug 3: validating @23b77700: click.mail.nacada.ksu.edu A: DLV ksu.edu found
  57. 02-Apr-2014 14:38:32.172 dnssec: debug 3: validating @23b77700: click.mail.nacada.ksu.edu A: dlv_validator_start
  58. 02-Apr-2014 14:38:32.172 dnssec: debug 3: validating @23b77700: click.mail.nacada.ksu.edu A: restarting using DLV
  59. 02-Apr-2014 14:38:32.172 dnssec: debug 3: validating @23b77700: click.mail.nacada.ksu.edu A: attempting insecurity proof
  60. 02-Apr-2014 14:38:32.172 dnssec: debug 3: validating @23b77700: click.mail.nacada.ksu.edu A: checking existence of DS at 'nacada.ksu.edu'
  61. 02-Apr-2014 14:38:32.172 dnssec: warning: validating @23b77700: click.mail.nacada.ksu.edu A: can't validate existing negative responses (no DS)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!