dnssec-validator issueshttps://gitlab.nic.cz/labs/dnssec-validator/-/issues2017-08-23T10:32:07+02:00https://gitlab.nic.cz/labs/dnssec-validator/-/issues/60DNSSEC validation based on Knot resolver core2017-08-23T10:32:07+02:00Martin StrakaDNSSEC validation based on Knot resolver coreIt seems that DNSSEC Validator can used dnssec validation core from Knot resolver project.It seems that DNSSEC Validator can used dnssec validation core from Knot resolver project.on the back burnerhttps://gitlab.nic.cz/labs/dnssec-validator/-/issues/54Provide better information for building2017-08-23T10:32:07+02:00kolAflashProvide better information for buildingCouldn't compile, either on openSUSE 13.2 or Ubuntu 14.10. (both x86_64)
Tested with git tag v2.2.0.1.
Could you please provide more information how to compile?
E.g. a list of Linux distributions known to work well?
openSUSE 13.2...Couldn't compile, either on openSUSE 13.2 or Ubuntu 14.10. (both x86_64)
Tested with git tag v2.2.0.1.
Could you please provide more information how to compile?
E.g. a list of Linux distributions known to work well?
openSUSE 13.2 (x86_64)
---
```
make[7]: *** No rule to make target ../projects/DNSSECValidatorPlugin/../../../libs-built/unbound/lib/libunbound.a', needed bybin/DNSSECValidatorPlugin/npDNSSECValidatorPlugin.so'. Stop.
```
Ubuntu 14.10 (x86_64)
---
```
[ 49%] Building C object projects/DNSSECValidatorPlugin/CMakeFiles/DNSSECValidatorPlugin.dir/__/common/common.c.o [4/1874]
[ 50%] Building C object projects/DNSSECValidatorPlugin/CMakeFiles/DNSSECValidatorPlugin.dir/dnssec-plug.c.o
[ 51%] Building C object projects/DNSSECValidatorPlugin/CMakeFiles/DNSSECValidatorPlugin.dir/__/common/log_dflt.c.o
Linking CXX shared library ../../bin/DNSSECValidatorPlugin/npDNSSECValidatorPlugin.so
/usr/bin/c++ -fPIC -m64 -DFB_X11=1 -DXP_UNIX -fPIC -DBOOST_ALL_NO_LIB=1 -DUNICODE -D_UNICODE -Os -DNDEBUG -Wl,--discard-all -Wl,-Bsymbolic -Wl,-z,defs -Wl,--version-script=/home/someuser/eigene
_dateien/dnssec-validator/FireBreath/gen_templates/version_script.txt -shared -Wl,-soname,npDNSSECValidatorPlugin.so -o ../../bin/DNSSECValidatorPlugin/npDNSSECValidatorPlugin.so CMakeFiles/
DNSSECValidatorPlugin.dir/DNSSECValidatorPlugin.cpp.o CMakeFiles/DNSSECValidatorPlugin.dir/DNSSECValidatorPluginAPI.cpp.o CMakeFiles/DNSSECValidatorPlugin.dir/Factory.cpp.o CMakeFiles/DNSSECVa
lidatorPlugin.dir/__/common/common.c.o CMakeFiles/DNSSECValidatorPlugin.dir/dnssec-plug.c.o CMakeFiles/DNSSECValidatorPlugin.dir/__/common/log_dflt.c.o ../../PluginCore/libPluginCore.a PluginA
uto/libDVP_PluginAuto.a ../../NpapiCore/libNpapiCore.a ../../ScriptingCore/libScriptingCore.a ../../PluginCore/libPluginCore.a ../../boost/libs/thread/libboost_thread.a ../../boost/libs/system
/libboost_system.a ../../../projects/DNSSECValidatorPlugin/../../../libs-built/unbound/lib/libunbound.a ../../../projects/DNSSECValidatorPlugin/../../../libs-built/ldns/lib/libldns.a ../../../
projects/DNSSECValidatorPlugin/../../../libs-built/openssl/lib/libssl.a ../../../projects/DNSSECValidatorPlugin/../../../libs-built/openssl/lib/libcrypto.a -ldl -lpthread
CMakeFiles/DNSSECValidatorPlugin.dir/__/common/common.c.o: In function `unbound_resolver_init':
common.c:(.text+0x1e): undefined reference to `ub_ctx_create'
common.c:(.text+0xe6): undefined reference to `ub_ctx_set_fwd'
common.c:(.text+0xfd): undefined reference to `ub_strerror'
common.c:(.text+0x166): undefined reference to `ub_ctx_resolvconf'
common.c:(.text+0x18b): undefined reference to `ub_strerror'
common.c:(.text+0x1c0): undefined reference to `ub_ctx_add_ta_file'
common.c:(.text+0x1d1): undefined reference to `ub_ctx_add_ta'
common.c:(.text+0x1e8): undefined reference to `ub_strerror'
common.c:(.text+0x20a): undefined reference to `ub_ctx_set_option'
common.c:(.text+0x224): undefined reference to `ub_strerror'
common.c:(.text+0x252): undefined reference to `ub_ctx_delete'
CMakeFiles/DNSSECValidatorPlugin.dir/dnssec-plug.c.o: In function `dnssec_validation_deinit':
dnssec-plug.c:(.text+0x727): undefined reference to `ub_ctx_delete'
CMakeFiles/DNSSECValidatorPlugin.dir/dnssec-plug.c.o: In function `dnssec_validate':
dnssec-plug.c:(.text+0x8d7): undefined reference to `ub_resolve'
dnssec-plug.c:(.text+0x900): undefined reference to `ub_resolve_free'
dnssec-plug.c:(.text+0x926): undefined reference to `ub_resolve'
dnssec-plug.c:(.text+0x94f): undefined reference to `ub_resolve_free'
dnssec-plug.c:(.text+0x96e): undefined reference to `ub_resolve'
dnssec-plug.c:(.text+0x980): undefined reference to `ub_strerror'
dnssec-plug.c:(.text+0x9a6): undefined reference to `ub_resolve_free'
dnssec-plug.c:(.text+0x9c0): undefined reference to `ub_resolve'
dnssec-plug.c:(.text+0x9d2): undefined reference to `ub_strerror'
dnssec-plug.c:(.text+0xa1a): undefined reference to `ub_resolve_free'
collect2: error: ld returned 1 exit status
projects/DNSSECValidatorPlugin/CMakeFiles/DNSSECValidatorPlugin.dir/build.make:225: recipe for target 'bin/DNSSECValidatorPlugin/npDNSSECValidatorPlugin.so' failed
make[7]: *** [bin/DNSSECValidatorPlugin/npDNSSECValidatorPlugin.so] Error 1
CMakeFiles/Makefile2:437: recipe for target 'projects/DNSSECValidatorPlugin/CMakeFiles/DNSSECValidatorPlugin.dir/all' failed
make[6]: *** [projects/DNSSECValidatorPlugin/CMakeFiles/DNSSECValidatorPlugin.dir/all] Error 2
Makefile:75: recipe for target 'all' failed
make[5]: *** [all] Error 2
Makefile.unix:178: recipe for target 'npapi_x86_64' failed
make[4]: *** [npapi_x86_64] Error 2
Makefile.main:79: recipe for target 'plugin' failed
make[3]: *** [plugin] Error 2
CMakeFiles/RecursiveBuild.dir/build.make:52: recipe for target 'RecursiveBuild' failed
make[2]: *** [RecursiveBuild] Error 2
CMakeFiles/Makefile2:60: recipe for target 'CMakeFiles/RecursiveBuild.dir/all' failed
make[1]: *** [CMakeFiles/RecursiveBuild.dir/all] Error 2
Makefile:72: recipe for target 'all' failed
make: *** [all] Error 2
```on the back burnerKarel SlanýKarel Slanýhttps://gitlab.nic.cz/labs/dnssec-validator/-/issues/53Issues with SNI?2017-08-23T10:32:07+02:00Ghost UserIssues with SNI?I have two websites on the same IP using SNI, both secured with DNSSEC and different TLSA records.
Also the TTL for the A record is only 10s.
Using Firefox, most of the time everything works and both icons show green. However sometim...I have two websites on the same IP using SNI, both secured with DNSSEC and different TLSA records.
Also the TTL for the A record is only 10s.
Using Firefox, most of the time everything works and both icons show green. However sometimes if I had the first page open for a while then open the other I get a red icon for the TLSA record. However all links on the page work fine (I selected to block if TLSA record is wrong)
Just doing a refresh in the browser does not help.
Closing the brower and opening it again shows both as green again, so it probably is caching something and maybe not using the name but the IP somehow?
The pages in question (slow upstream, be gentle... :-)
* https://k8n.de
* https://chinesisch123.de
on the back burnerhttps://gitlab.nic.cz/labs/dnssec-validator/-/issues/51AS: plugin's NPAPI methods can not be loaded in Safari 8.0 - OS X Yosemite2017-11-17T22:57:26+01:00Martin StrakaAS: plugin's NPAPI methods can not be loaded in Safari 8.0 - OS X YosemiteMay be: Safari 8.0 has bug with loading of NAPAI modules. More info is here.
https://forums.lastpass.com/viewtopic.php?f=7&t=148265&p=496215&hilit=NPAPI
Based on the last info, Safari 8.x and latest does not support NPAPI. The supp...May be: Safari 8.0 has bug with loading of NAPAI modules. More info is here.
https://forums.lastpass.com/viewtopic.php?f=7&t=148265&p=496215&hilit=NPAPI
Based on the last info, Safari 8.x and latest does not support NPAPI. The support for this browser will be stopped.
GOOD NEW: The support for this browser will be continuous.
on the back burnerMartin StrakaMartin Strakahttps://gitlab.nic.cz/labs/dnssec-validator/-/issues/49Windows IE version C++ redistributable dependency check - SOLVED2017-11-17T22:57:26+01:00Ghost UserWindows IE version C++ redistributable dependency check - SOLVEDOn a WinXP 32 bit system without Microsoft Visual C++ 2010 Redistributable Package installed the installation works fine but the plugin doesn't show up in IE8.
Calling the RegPlugin.bat manually results in the following error:
LoadLibr...On a WinXP 32 bit system without Microsoft Visual C++ 2010 Redistributable Package installed the installation works fine but the plugin doesn't show up in IE8.
Calling the RegPlugin.bat manually results in the following error:
LoadLibrary("ie-dnssec-tlsa-validator.dll") failed - The specified module could not be found.
A note on the download page or a check during the installation would be nice.
If someone has this problem:
Install the c++ redistributable (vcredist_x86.exe) and uninstall/reinstall the validator.
Tested with ie-dnssec-tlsa-validator-2.2.0-windows.exeon the back burnerMartin StrakaMartin Strakahttps://gitlab.nic.cz/labs/dnssec-validator/-/issues/46MF: nsICache has been removed2017-11-17T22:57:27+01:00Martin StrakaMF: nsICache has been removedhttp://www.janbambas.cz/http-cache-v1-api-disabled/
https://developer.mozilla.org/cs/docs/HTTP_Cache
commit c286e317951e144bd31e33e1e6c173d9a0f9a00fhttp://www.janbambas.cz/http-cache-v1-api-disabled/
https://developer.mozilla.org/cs/docs/HTTP_Cache
commit c286e317951e144bd31e33e1e6c173d9a0f9a00fon the back burnerMartin StrakaMartin Strakahttps://gitlab.nic.cz/labs/dnssec-validator/-/issues/43TLSA validation fails on https://adisspr.mfcr.cz/2017-11-17T22:57:27+01:00Karel SlanýTLSA validation fails on https://adisspr.mfcr.cz/The TLSA validation fails with the statement that the domain isn't secured with DNSSEC.
Libunbound returns secured=false nxdomain=true response.The TLSA validation fails with the statement that the domain isn't secured with DNSSEC.
Libunbound returns secured=false nxdomain=true response.on the back burnerKarel SlanýKarel Slanýhttps://gitlab.nic.cz/labs/dnssec-validator/-/issues/38Allow for icon outside address bar in Firefox/Iceweasel - HELP and SOLUTION2017-11-17T22:57:27+01:00MartinAllow for icon outside address bar in Firefox/Iceweasel - HELP and SOLUTIONIt would be nice if one could choose to have the validator Icon outside the address bar in Firefox (as it is in IE), because some people use things like Vimperator and therefore don't have an address bar. This is so far the only plugin t...It would be nice if one could choose to have the validator Icon outside the address bar in Firefox (as it is in IE), because some people use things like Vimperator and therefore don't have an address bar. This is so far the only plugin that I am unable to use for this reason.
Individual solution:
--------------------
Download xpi package, find and edit firefoxOverlay.xul file and change lines:
\<textbox id="urlbar">
...
...
\</textbox>
into
\<statusbar id="status-bar">
...
...
\</statusbar>on the back burnerMartin StrakaMartin Strakahttps://gitlab.nic.cz/labs/dnssec-validator/-/issues/36DNSSEC Validator fails if NAT64/DNS64 is used in the net2017-11-17T22:57:27+01:00Martin StrakaDNSSEC Validator fails if NAT64/DNS64 is used in the netDNSSEC Validator fails if NAT64/DNS64 is used in the net.
In Czech: Zkoušíme tady v kanceláři NAT64/DNS64 a když jsi v takové síti, tak to úplně rozbije DNSSEC Validátor. Možná chybí podpora v libunboundu.DNSSEC Validator fails if NAT64/DNS64 is used in the net.
In Czech: Zkoušíme tady v kanceláři NAT64/DNS64 a když jsi v takové síti, tak to úplně rozbije DNSSEC Validátor. Možná chybí podpora v libunboundu.on the back burnerhttps://gitlab.nic.cz/labs/dnssec-validator/-/issues/4MF: Sign the add-on2017-11-17T22:57:27+01:00Martin StrakaMF: Sign the add-onhttps://developer.mozilla.org/en/XUL_School/Setting_Up_a_Development_Environment#Signing_extensionshttps://developer.mozilla.org/en/XUL_School/Setting_Up_a_Development_Environment#Signing_extensionson the back burnerMartin StrakaMartin Straka