Can't resolve DNS since 2.1.17

Daniel Kahn Gillmor dkg at fifthhorseman.net
Tue Feb 14 01:02:17 CET 2017


On Mon 2017-02-13 13:38:46 -0500, Gabriel Souza Franco wrote:
> On Mon, Feb 13, 2017 at 4:17 PM, Daniel Kahn Gillmor <dkg at fifthhorseman.net> wrote:
>>
>> can you supply a packet capture (.pcap format is fine) of the DNS
>> request and response you're seeing?
>
> This is the DNS activity after running --refresh-keys.

Thanks for the pcap!

This shows that there are SRV requests, whose responses contain FORMERR
as you reported.  But then there are subsequent A and AAAA lookups which
return the expected IPv4 and IPv6 addresses.

This is what i would expect to happen if dirmngr was to treat the SRV
lookup as a failure.

Is this your patched dirmngr or the stock dirmngr?

   --dkg



More information about the Gnupg-devel mailing list