[systemd-devel] No DNSKEY record resolution

Sébastien Luttringer seblu at seblu.net
Fri Oct 11 13:46:38 UTC 2019


Hello,

Enabling systemd-resolved as a stub resolver on a system is very useful. It
provides a unique point of resolution where we can enforce   caching, DNSSEC,
DoT.

While I was trying to check the existence of DNSKEY records on one domain, I
noticed systemd-resolved fail with these records.
I'm not talking DNSSEC validation, only querying them to manually check they
exist.

$ resolvectl query -t dnskey 84.tech
84.tech: resolve call failed: Server does not support requested resource record
type

I read in there is a will to « keep it simple », but is this not supported on
purpose? Should I open a RFE?

Regards,


Sébastien "Seblu" Luttringer



More information about the systemd-devel mailing list