adamfisk/DNSSEC4J

Periodically hangs on resolving DS records for org TLD

adamfisk opened this issue · 0 comments

The following periodically hangs at the end:


  TESTING www.root-dnssec.org

Verifying record: www.root-dnssec.org.
Sending query...
RESPONSE: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59263
;; flags: qr rd ra ; qd: 1 an: 2 au: 0 ad: 1
;; QUESTIONS:
;; www.root-dnssec.org., type = A, class = IN

;; ANSWERS:
www.root-dnssec.org. 86383 IN A 208.77.188.126
www.root-dnssec.org. 86383 IN RRSIG A 5 3 86400 20120214141502 20120204141502 12107 root-dnssec.org. YekJkQ6wHkoiSg5nxD3TtOHixyBu041jYWmVNNDwLtROXrvBu8sCGhGzoAaaH+Fl1SFSfggkKJWZPeLXmermiKt0cCTamwHZ2VkkSpWuhPITTOAnWmnEBABVqMO3hyJLN+BZAdQv1oLY4GeAF6r8AK4VsRq+mx4TDCejqf3jsRg=

;; AUTHORITY RECORDS:

;; ADDITIONAL RECORDS:
. 32768 CLASS4096 OPT ; payload 4096, xrcode 0, version 0, flags 32768

;; Message size: 239 bytes

;; RRset to chase:
www.root-dnssec.org. 86383 IN A 208.77.188.126

;; RRSIG of the RRset to chase:
www.root-dnssec.org. 86383 IN RRSIG A 5 3 86400 20120214141502 20120204141502 12107 root-dnssec.org. YekJkQ6wHkoiSg5nxD3TtOHixyBu041jYWmVNNDwLtROXrvBu8sCGhGzoAaaH+Fl1SFSfggkKJWZPeLXmermiKt0cCTamwHZ2VkkSpWuhPITTOAnWmnEBABVqMO3hyJLN+BZAdQv1oLY4GeAF6r8AK4VsRq+mx4TDCejqf3jsRg=

Launch a query to find a RRset of type DNSKEY for zone: root-dnssec.org.
Looking for tag: 12107
Sent query...

;; DNSKEYset that signs the RRset to chase:
root-dnssec.org. 3600 IN DNSKEY 257 3 5 (
BEAAAAPWujWRLYUW4Yp9fIluNZuCrZlo7cAXm258n5YjbC1tfW5IVs4AEjB8uBpj
EdRF8KrGA0Fd6mmlTYpM/KudbCXhEM0nG6gDNZqBRICKaJ7MyJH88nfzAIiGlh39
PfiM5CzFGd31JXhuy+88qUjcXAEX8VZ8dMcApenSz4n5lxVmqM0k/KKGXTMnhw8r
OVVdvEPUZHdr/bRdAYOxAoQramfqR/NX50u9IzxQE1x0rrWQZJcYJv08GZd2D309
+r6lqVq0OxfD6nFw42lNNhzo108hqVl/coBmrcL5iC52uS6cP/EXDG2nHmTipDk6
umTcPn0JiFb0zxkWIcVxc/taXlc1 ) ; key_tag = 61492
root-dnssec.org. 3600 IN DNSKEY 256 3 5 (
BQEAAAABp4mznkoYmaNLLRAdVIUu45z5UwGiem9HiN72wFFy237Prv8aJM6jhh61
PfpUmE9Yd8PgCusUartLfK0alT8r41DPS9/qy2TpflQaoQG5dzmbfzqBpXLUOtQn
vSBgBp9EaL2y+wPHbY+QTeEUer1FGPhQLjLAxuLPgZjt5+Meobk= ) ; key_tag = 12107

Found matching DNSKEY for tag!! 12107

;; RRSIG of the DNSKEYset that signs the RRset to chase:
root-dnssec.org. 3600 IN RRSIG DNSKEY 5 2 3600 (
20120214141502 20120204141502 12107 root-dnssec.org.
BJi/T5W/06Q9WhdcD/iwsvq5XhJtEOorkleXDrVC7gPFnKFa5+yvWAEbaBQuDXdJ
LxnunUrUOX3BtjYpb9O6LkbaYE/6a+m/Hb3tmZ5aJr3WhbY5LLfbRIHTlWbFLO5L
erPTdiYXtCFNSh4LLQ7XI7swUmUt9WI8b/2hlQ1/BYc= )
root-dnssec.org. 3600 IN RRSIG DNSKEY 5 2 3600 (
20120214141502 20120204141502 61492 root-dnssec.org.
mTgFDTcLDs16g5Oz0hMfmVBFl9qzcwGUFJ05NZbudjzN15XbezYhl7SHKOHWbA8P
NIQfwFxdlutal2yFfbGwhPCDvoPIUlUEohMrTKVT6gKD2hxhh57wJpXf4otc8+pa
rI/VojKLf0QlN+JErM2k/vqH+ivGlVYpbZ2/ZV5UaVG2B4WT8o4FbSaaCOKT1blQ
9ShiiHsji1GR8ZvA9XxqBHRRMQbeff0hw54z3Ub8pMN2jhYU+ngCk5HzxUScoVFQ
bPGmoNW38R4utVTG5oYAB/qzksbDWgicfRYYpMKwDKy7rZB8wyLGxC4OmcTPmE7z
KIL5EtQKlKGkBsNIpxM39w== )
0 2012-02-04 19:48:10,488 INFO [main] dnssec4j.DnsSec.verifyZone (DnsSec.java:194) - DNSKEY verified!!

Launch a query to find a RRset of type DS for zone: root-dnssec.org.
Sent query and got response: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42599
;; flags: qr rd ra ; qd: 1 an: 2 au: 0 ad: 1
;; QUESTIONS:
;; root-dnssec.org., type = DS, class = IN

;; ANSWERS:
root-dnssec.org. 86400 IN DS 61492 5 1 A3E4E22B2D75239856D8056858CCA7B717B0B468
root-dnssec.org. 86400 IN RRSIG DS 7 2 86400 20120222155816 20120201145816 55440 org. gDVEK3MWVA0A+nS9S3RNWDpNzOqPeKputGWhD9Kf8NF2O9YxWe68MNkKqM76uKyoaOSE4nraaFBUN78fxg0IQcFKPo2Zh/Xnspp4zXCb1Rl35YmYeFBEff4Z006wyd+P8Hnaw7ANdl3oS99G7QRwLAxaADfyifpgpIIdEVw7YP4=

;; AUTHORITY RECORDS:

;; ADDITIONAL RECORDS:
. 32768 CLASS4096 OPT ; payload 4096, xrcode 0, version 0, flags 32768

;; Message size: 243 bytes

;; DSset of the DNSKEYset
root-dnssec.org. 86400 IN DS 61492 5 1 A3E4E22B2D75239856D8056858CCA7B717B0B468

;; RRSIG of the DSset of the DNSKEYset
root-dnssec.org. 86400 IN RRSIG DS 7 2 86400 20120222155816 20120201145816 55440 org. gDVEK3MWVA0A+nS9S3RNWDpNzOqPeKputGWhD9Kf8NF2O9YxWe68MNkKqM76uKyoaOSE4nraaFBUN78fxg0IQcFKPo2Zh/Xnspp4zXCb1Rl35YmYeFBEff4Z006wyd+P8Hnaw7ANdl3oS99G7QRwLAxaADfyifpgpIIdEVw7YP4=
;; Now, we want to validate the DS : recursive call

Launch a query to find a RRset of type DNSKEY for zone: org.
Looking for tag: 55440