agl/dnssec-tls-tools — Issue #2: chain.py:  No good CAA records at isc.org.
Author: zhovner
Created: 2012-02-18 01:00:59+00:00
State: open

I type:

*python chain.py isc.org chain*

and get

**No good CAA records at isc.org.**
**Traceback (most recent call last):**
**File "chain.py", line 471, in **
**main()**
**File "chain.py", line 455, in main**
**zones = buildChain(target)**
**File "chain.py", line 237, in buildChain**
**assert(False)**
**AssertionError**

System resolver support DNSSEC:

**dig +dnssec +sigchase isc.org | tail -n 2**

**;; Ok this DNSKEY is a Trusted Key, DNSSEC validation is ok: SUCCESS**

Also i'm try to change

dig = subprocess.Popen(['dig', '@127.0.0.1', '+dnssec', '-t', self.rrtype, self.domain], stdout=subprocess.PIPE)

with same result.