avee137
avee137

Reputation: 541

dnspython: Validating DS record from server

I want to validate the DS record of a query response. When I get the response from the server, I use the library provided function like this -

>>> ret = dns.dnssec.validate(response_k.authority[1],response_k.authority[2],{name:response_k.authority[1]})

Traceback (most recent call last): File "", line 1, in File "/usr/local/lib/python2.7/dist-packages/dns/dnssec.py", line 421, in _validate raise ValidationFailure("no RRSIGs validated") dns.dnssec.ValidationFailure: no RRSIGs validated   

where : request is like this -

request_k = dns.message.make_query('example.com',dns.rdatatype.A,want_dnssec=True)

response_k = dns.query.udp(request_k, '.')

>>> print response_k.authority
[<DNS com. IN NS RRset>, <DNS com. IN DS RRset>, <DNS com. IN RRSIG(DS) RRset>]

name=dns.name.from_text('.')

Any idea where its going wrong?

Upvotes: 1

Views: 1029

Answers (0)

Related Questions