tobez/validns — Issue #12: Cannot verify signature with a LOC RRSIG algorithm 7
Author: huguei
Created: 2011-12-22 15:20:37+00:00
State: open

Hi. I'm having a validns error in a zone with a LOC RR signed with algorithm 7. The error is

vulcano.cl.signed:73: vulcano.cl. RRSIG(LOC): cannot verify the signature

The zone is signed with bind tools and validate correctly in the live zone.
I hunted down the error to EVP_VerifyFinal, so may be my openssl version (OpenSSL 1.0.0e-fips 6 Sep 2011)?
Changing the algorithm to 5 (like the example.sec.signed test file) works ok.

I've opened AXFR for the zone in ns.vulcano.cl, if you need it.

Thanks,

Hugo