From owner-freebsd-questions@FreeBSD.ORG  Mon Jun 20 00:52:45 2011
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 1F30F106566C
	for <freebsd-questions@freebsd.org>;
	Mon, 20 Jun 2011 00:52:45 +0000 (UTC)
	(envelope-from elon@emmi.physik-pool.tu-berlin.de)
Received: from emmi.physik-pool.tu-berlin.de (emmi.physik-pool.tu-berlin.de
	[130.149.58.146])
	by mx1.freebsd.org (Postfix) with ESMTP id 8ECC88FC17
	for <freebsd-questions@freebsd.org>;
	Mon, 20 Jun 2011 00:52:44 +0000 (UTC)
Received: from emmi.physik-pool.tu-berlin.de
	(localhost.physik-pool.tu-berlin.de [127.0.0.1])
	by emmi.physik-pool.tu-berlin.de (8.14.4/8.14.4) with ESMTP id
	p5K0bSpT099023 for <freebsd-questions@freebsd.org>;
	Mon, 20 Jun 2011 02:37:28 +0200 (CEST)
	(envelope-from elon@emmi.physik-pool.tu-berlin.de)
Received: (from elon@localhost)
	by emmi.physik-pool.tu-berlin.de (8.14.4/8.14.4/Submit) id
	p5K0bRQN099022 for freebsd-questions@freebsd.org;
	Mon, 20 Jun 2011 02:37:27 +0200 (CEST) (envelope-from elon)
Date: Mon, 20 Jun 2011 02:37:27 +0200
From: Leon =?iso-8859-15?Q?Me=DFner?= <l.messner@physik.tu-berlin.de>
To: freebsd-questions@freebsd.org
Message-ID: <20110620003727.GB25579@emmi.physik-pool.tu-berlin.de>
Mail-Followup-To: freebsd-questions@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.20 (2009-06-14)
Subject: dnssec with freebsd's resolver(3)
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 20 Jun 2011 00:52:45 -0000

Hi,

does the freebsd resolver(3) support sending the DO bit in queries and
thus do DNSSEC validation ? I tried using ssh with SSHFP RR's in a
signed zone but i still get the "insecure Key" message from ssh on
FreeBSD (works on some other OS).

cherio,
Leon