Report information
The Basics
Id:
45519
Status:
resolved
Priority:
Low/Low
Queue:

BugTracker
Version Fixed:
9.9.12, 9.10.7, 9.11.3, 9.12.0
Version Found:
(no value)
Versions Affected:
(no value)
Versions Planned:
9.12
Priority:
P2 Normal
Severity:
S2 Normal
CVSS Score:
(no value)
CVE ID:
(no value)
Component:
BIND Server
Area:
feature

Dates
Created:Thu, 06 Jul 2017 13:49:17 -0400
Updated:Mon, 14 Aug 2017 08:20:52 -0400
Closed:Mon, 14 Aug 2017 08:20:52 -0400



This bug tracker is no longer active.

Please go to our Gitlab to submit issues (both feature requests and bug reports) for active projects maintained by Internet Systems Consortium (ISC).

Due to security and confidentiality requirements, full access is limited to the primary maintainers.

From: "Paul Hoffman" <paul.hoffman@icann.org>
Subject: BIND 9.10.3-P3 - Error message in dnssec-verify could be better
Date: Thu, 6 Jul 2017 17:49:14 +0000
To: bind-suggest@isc.org
Bug Report from www.isc.org: Name: Paul Hoffman Email: paul.hoffman@icann.org Software Version: BIND 9.10.3-P3 OS: Linux Subject:Error message in dnssec-verify could be better Bug Detail =========== If you use dnssec-verify with a zone file whose name does not match the zone name, and you don't know to use the "-o" option, the error is "not at top of zone". A better error message would suggest that the user wanted to use the -o option to specify the actual zone name. --- This email was received through isc.org Bug Submission Form
rt45519 is ready for review. Tweaks to the message printed when -o is not used are welcome.
I modified the message a bit. I thought it might be clearer if we say "failed to load zone %s from file %s"; then a person would immediately see that they were the same and figure out what the mistake was. If you're okay with the change, go ahead and commit.
From: "Paul Hoffman" <paul.hoffman@icann.org>
To: "bind9-public@isc.org" <bind9-public@isc.org>
Subject: Re: [Ext] [ISC-Bugs #45519] BIND 9.10.3-P3 - Error message in dnssec-verify could be better
Date: Thu, 10 Aug 2017 00:18:47 +0000
On Aug 9, 2017, at 5:08 PM, Evan Hunt via RT <bind9-public@isc.org> wrote: > > I modified the message a bit. I thought it might be clearer if we say > "failed to load zone %s from file %s"; then a person would immediately see > that they were the same and figure out what the mistake was. > > If you're okay with the change, go ahead and commit. Excellent, that is better.
4679. [cleanup] Suggest using -o when dnssec-verify finds a SOA record not at top of zone and -o is not used. [RT #45519] 9.9.12, 9.10.7, 9.11.3, 9.12.0