For what it's worth, I reported a related issue up to the systemd-devel
mailing list, and it looks like in systemd 233 (the next version) things
work much better with DNSSEC. https://lists.freedesktop.org/archives
/systemd-devel/2017-April/038698.html
I rebuilt the 233 out of debian experimental, and at least for my use case,
this all worked now.
I am preparing merge of 233 for 17.10 and we can re-evaluate enabling
dnssec then.
On 20 Apr 2017 22:20, "Sean Dague" <email address hidden> wrote:
For what it's worth, I reported a related issue up to the systemd-devel /lists. freedesktop. org/archives devel/2017- April/038698. html
mailing list, and it looks like in systemd 233 (the next version) things
work much better with DNSSEC. https:/
/systemd-
I rebuilt the 233 out of debian experimental, and at least for my use case,
this all worked now.
I am preparing merge of 233 for 17.10 and we can re-evaluate enabling
dnssec then.
Regards,
Dimitri.