View Issue Details

IDProjectCategoryView StatusLast Update
0015636CentOS-7dnsmasqpublic2018-12-24 11:40
ReporterCdeMills 
PrioritynormalSeverityfeatureReproducibilityalways
Status newResolutionopen 
Product Version7.6.1810 
Target VersionFixed in Version 
Summary0015636: dnsmasq: please enable dnssec feature
Descriptiondnssec is slowly gaining a wider audience. I use dnsmasq as caching server; by default the DNSSEC extensions are not enabled. Changing this is AFAIK not susceptible to break things as the option has to be explicitly enabled in dnsmasq.conf. So by default nothing will change except the size of the executable.

Please rebuild the dnsmasq package (patch enclosed), or provide a new package with name like dnsmasq-dnssec
Steps To Reproduceenable the part of /etc/dnsmasq.conf about dnssec:

# Uncomment these to enable DNSSEC validation and caching:
# (Requires dnsmasq to be built with DNSSEC option.)
conf-file=/etc/dnsmasq.d/trust-anchors.conf
dnssec
Additional InformationBuilding with dnssec support is achieved by patching dnsmasq.spec as
--- dnsmasq.spec.orig 2018-10-30 15:51:23.000000000 +0100
+++ dnsmasq.spec 2018-12-24 10:20:32.909590536 +0100
@@ -124,6 +124,9 @@
 #enable IDN support
 sed -i 's|/\* #define HAVE_IDN \*/|#define HAVE_IDN|g' src/config.h
 
+#enable DNSSEC support
+sed -i 's|/\* #define HAVE_DNSSEC \*/|#define HAVE_DNSSEC|g' src/config.h
+
 #enable /etc/dnsmasq.d fix bz 526703, ignore RPM backup files
 cat << EOF >> dnsmasq.conf.example
Tagsdnssec
abrt_hash
URL

Activities

CdeMills

CdeMills

2018-12-24 11:21

reporter  

dnsmasq-dnssec.spec.pat (425 bytes)
TrevorH

TrevorH

2018-12-24 11:40

manager   ~0033441

CentOS is a rebuild of the sources used to build RHEL and the only changes made are to remove Redhat branding and logos. In order to get this change implemented you will need to raise the request on bugzilla.redhat.com and, if it's accepted and implemented for RHEL, then CentOS will inherit the fix once it's released.

Issue History

Date Modified Username Field Change
2018-12-24 11:21 CdeMills New Issue
2018-12-24 11:21 CdeMills File Added: dnsmasq-dnssec.spec.pat
2018-12-24 11:21 CdeMills Tag Attached: dnssec
2018-12-24 11:40 TrevorH Note Added: 0033441