From owner-freebsd-current@FreeBSD.ORG  Sun Feb  1 20:13:39 2015
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: current@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 62D3E453
 for <current@freebsd.org>; Sun,  1 Feb 2015 20:13:39 +0000 (UTC)
Received: from phk.freebsd.dk (phk.freebsd.dk [130.225.244.222])
 by mx1.freebsd.org (Postfix) with ESMTP id 2211FE66
 for <current@freebsd.org>; Sun,  1 Feb 2015 20:13:37 +0000 (UTC)
Received: from critter.freebsd.dk (unknown [192.168.48.2])
 by phk.freebsd.dk (Postfix) with ESMTP id DA9593B8B7;
 Sun,  1 Feb 2015 20:13:30 +0000 (UTC)
Received: from critter.freebsd.dk (localhost [127.0.0.1])
 by critter.freebsd.dk (8.14.9/8.14.9) with ESMTP id t11KDTf5001873;
 Sun, 1 Feb 2015 20:13:30 GMT (envelope-from phk@phk.freebsd.dk)
To: Marcin Cieslak <saper@saper.info>
Subject: Re: Bug-report of sorts...
In-reply-to: <alpine.BSF.2.11.1501302333350.91610@z.fncre.vasb>
From: "Poul-Henning Kamp" <phk@phk.freebsd.dk>
References: <2533.1422656690@critter.freebsd.dk>
 <alpine.BSF.2.11.1501302333350.91610@z.fncre.vasb>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <1871.1422821609.1@critter.freebsd.dk>
Content-Transfer-Encoding: quoted-printable
Date: Sun, 01 Feb 2015 20:13:29 +0000
Message-ID: <1872.1422821609@critter.freebsd.dk>
Cc: current@freebsd.org
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
 <freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-current>, 
 <mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current/>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
 <mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 01 Feb 2015 20:13:39 -0000

--------
In message <alpine.BSF.2.11.1501302333350.91610@z.fncre.vasb>, Marcin Cies=
lak w
rites:
>On Fri, 30 Jan 2015, Poul-Henning Kamp wrote:
>
>> But the point is I never get to the webpage, local_unbound just doesn't
>> seem to be able to resolve anything through the DHCP appointed server,
>> despite the fact that dig(1) does so just fine.

So I finally had a chance to dig into this.

Commenting out the root.key fil in unbound.conf did it, with it
unbound seems to insist on validating the rootkey and to do nothing
else until that happens.

The DNS server in the meantime ignores DNSKEY queries...

-- =

Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk@FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    =

Never attribute to malice what can adequately be explained by incompetence=
.