Reputation: 541
I want to validate the DS record of a query response. When I get the response from the server, I use the library provided function like this -
>>> ret = dns.dnssec.validate(response_k.authority[1],response_k.authority[2],{name:response_k.authority[1]})
Traceback (most recent call last): File "", line 1, in File "/usr/local/lib/python2.7/dist-packages/dns/dnssec.py", line 421, in _validate raise ValidationFailure("no RRSIGs validated") dns.dnssec.ValidationFailure: no RRSIGs validated
where : request is like this -
request_k = dns.message.make_query('example.com',dns.rdatatype.A,want_dnssec=True)
response_k = dns.query.udp(request_k, '.')
>>> print response_k.authority
[<DNS com. IN NS RRset>, <DNS com. IN DS RRset>, <DNS com. IN RRSIG(DS) RRset>]
name=dns.name.from_text('.')
Any idea where its going wrong?
Upvotes: 1
Views: 1029