debian stretch PPA: missing icann-ca.pem
If I install the current knot-resolver package (1.5.0-1+020171112102149.11+stretch1.gbp1554e1) from the projects debian repositories I can't get it running with the following error:
/usr/lib/knot-resolver/trust_anchors.lua:380: [ ta ] fetch of "https://data.iana.org/root-anchors/root-anchors.xml" failed: error loading CA locations (No such file or directory)
[ ta ] Failed to bootstrap root trust anchors; see:
https://knot-resolver.readthedocs.io/en/latest/daemon.html#enabling-dnssec
Looking further with strace there is call to open /etc/knot-resolver/icann-ca.pem
open("/etc/knot-resolver/icann-ca.pem", O_RDONLY) = -1 ENOENT (No such file or directory)
But querying the package files with dpkg-query -L knot-resolver
shows that the requested file is also missing in the package.
/etc
/etc/default
/etc/default/kresd
/etc/init.d
/etc/init.d/kresd
/etc/knot-resolver
/etc/knot-resolver/kresd.conf
This are the only files in the /etc
directory. So the missing file should be added to the package if the code depends on it. Adding the missing file fixed the problem in my local installation.