NetBSD Problem Report #59575

From www@netbsd.org  Tue Aug  5 23:59:51 2025
Return-Path: <www@netbsd.org>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits)
	 client-signature RSA-PSS (2048 bits))
	(Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified))
	by mollari.NetBSD.org (Postfix) with ESMTPS id C18331A923A
	for <gnats-bugs@gnats.NetBSD.org>; Tue,  5 Aug 2025 23:59:50 +0000 (UTC)
Message-Id: <20250805235949.AD0771A923C@mollari.NetBSD.org>
Date: Tue,  5 Aug 2025 23:59:49 +0000 (UTC)
From: mrg@eterna23.net
Reply-To: mrg@eterna23.net
To: gnats-bugs@NetBSD.org
Subject: bind upgrade issues postinstall probably should help with
X-Send-Pr-Version: www-1.0

>Number:         59575
>Notify-List:    kim
>Category:       bin
>Synopsis:       bind upgrade issues postinstall probably should help with
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Aug 06 00:00:00 +0000 2025
>Last-Modified:  Tue Aug 12 04:53:23 +0000 2025
>Originator:     matthew green
>Release:        -11 and -current
>Organization:
people's front against (bozotic) www (softwar foundation)
>Environment:
any
>Description:
while trying to start named on a couple of various hosts i've had the
same problems occur that are related to new / changed named.conf
issues.  there are two main issues:

- the /etc/namedb/keys subdir isn't created, causing named to abort
  during early start up

- the old dnssec-lookaside option has been removed

also, the newer one has these two lines added, maybe they should also
be added to named.confs?

       max-udp-size 1220;
       edns-udp-size 1220;

>How-To-Repeat:
install older netbsd, upgrade to -current or -11, try to start named.
>Fix:
- postinstall should create /etc/namedb/keys is missing.

- postinstall should either automatically remove or explicitly fail if
  it finds the dnssec-lookaside option in named.conf

- possibly, postinstall should be patched to add the udp-size options.

>Release-Note:

>Audit-Trail:
From: Kimmo Suominen <kim@netbsd.org>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: bin/59575: bind upgrade issues postinstall probably should help
 with
Date: Wed, 6 Aug 2025 04:32:26 +0300

 On Wed, Aug 06, 2025 at 12:00:01AM +0000, mrg@eterna23.net wrote:
 >        max-udp-size 1220;
 >        edns-udp-size 1220;

 We should use 1232.

     https://www.dnsflagday.net/2020/

 Kind regards,
 + Kimmo

>Unformatted:

Home	PR Database Search