gpg 2.1.15, *no* keyservers found for submit/recv, "DNS query returned an error or no records: No such domain (nxdomain)"
lists at ssl-mail.com
lists at ssl-mail.com
Wed Oct 12 15:28:05 CEST 2016
Hi
On Tue, Oct 11, 2016, at 09:20 PM, Daniel Kahn Gillmor wrote:
> On Tue 2016-10-11 10:21:40 -0400, lists at ssl-mail.com wrote:
> > What specific additional diagnostic info from my end can help with a fix?
>
> can you try capturing a trace of all DNS packets (udp port 53) that come
> out of your machine during this query?
>
> For example, something like (untested, please use with caution):
>
> gpgconf --kill dirmngr
> sudo tcpdump -s 1024 -w dns-from-dirmngr.pcap 'udp port 53' &
> gpg --recv 0x0EE5BE979282D80B9F7540F1CCD2ED94D21739E9
> kill %1
gpgconf --kill dirmngr
sudo tcpdump -s 1024 -w dns-from-dirmngr.pcap 'udp port 53' &
gpg --recv 0x0EE5BE979282D80B9F7540F1CCD2ED94D21739E9
kill %1
2 packets captured
2 packets received by filter
0 packets dropped by kernel
Here's the 2 packets' export as text:
----------------------------------------
No. Time Source Destination Protocol Length Info
1 0.000000 10.19.2.7 10.19.2.100 DNS 98 Standard query 0x311f SRV _hkp._tcp.hkps.pool.sks-keyservers.net
Frame 1: 98 bytes on wire (784 bits), 98 bytes captured (784 bits)
Ethernet II, Src: AsustekC_19:c3:26 (00:26:18:19:c3:26), Dst: Trendnet_c4:11:d9 (d8:eb:97:c4:11:d9)
Internet Protocol Version 4, Src: 10.19.2.7, Dst: 10.19.2.100
User Datagram Protocol, Src Port: 51597, Dst Port: 53
Domain Name System (query)
No. Time Source Destination Protocol Length Info
2 0.544341 10.19.2.100 10.19.2.7 DNS 148 Standard query response 0x311f No such name SRV _hkp._tcp.hkps.pool.sks-keyservers.net SOA ns2.kfwebs.net
Frame 2: 148 bytes on wire (1184 bits), 148 bytes captured (1184 bits)
Ethernet II, Src: Trendnet_c4:11:d9 (d8:eb:97:c4:11:d9), Dst: AsustekC_19:c3:26 (00:26:18:19:c3:26)
Internet Protocol Version 4, Src: 10.19.2.100, Dst: 10.19.2.7
User Datagram Protocol, Src Port: 53, Dst Port: 51597
Domain Name System (response)
----------------------------------------
More information about the Gnupg-devel
mailing list