[Bug 1719062] Re: systemd-resolved malformed packet on cert dns lookup

[Dimitri John Ledkov]

The systemd version you have installed appears to be quite out of date.
Could you please upgrade to 234-2ubuntu10?

Note that I don't expect that to resolve the issue that you are
reporting, but it would significantly reduce the amount of upstream code
checks I will need to do before forwarding this bug report to them.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/1719062

Title:
  systemd-resolved malformed packet on cert dns lookup

Status in systemd package in Ubuntu:
  New

Bug description:
  systemd-resolved returns a malformed packet when looking up an openpgp
  key (via a cert record rfc4398) from my internal authoritative dns
  server.

  The command I used was gpg2 -v --auto-key-locate=clear,cert,local
  --locate-keys [Email Address]

  This works correctly if I change /etc/resolv.conf symlink to point at
  /run/systemd/resolve/resolv.conf so that it doesn't use the local
  systemd-resolved resolver/cache instead of /run/resolvconf/resolv.conf

  I'm including a wireshark capture of the malformed packet (filtered
  for 127.0.0.53).

  I noticed that this was over udp.  If I recall correctly, cert records
  are usually big enough that they require using tcp.

  Description:	Ubuntu Artful Aardvark (development branch)
  Release:	17.10

  systemd:
    Installed: 233-8ubuntu3
    Candidate: 233-8ubuntu3

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1719062/+subscriptions