[atlas] Getting RRSIG records when do bit is set

This is another measurement, which has the do bit set, 31426253.

On Jul 6, 2021, at 11:06 AM, pravicha <pravicha at masonlive.gmu.edu<mailto:pravicha at masonlive.gmu.edu>> wrote:

Sorry the API would look like the one below, with DNSKEY, not RRSIG


{

    "af": 4,
    "query_class": "IN",
    "query_type": "DNSKEY",
    "query_argument": "example.com<http://example.com/>",
    "use_macros": false,
    "description": "DNS measurement to",
    "use_probe_resolver": true,
    "resolve_on_probe": false,
    "set_nsid_bit": false,
    "protocol": "UDP",
    "udp_payload_size": 512,
    "retry": 0,
    "skip_dns_check": false,
    "include_qbuf": false,
    "include_abuf": true,
    "prepend_probe_id": false,
    "set_rd_bit": false,
    "set_do_bit": true,
    "set_cd_bit": false,
    "timeout": 5000,
    "type": "dns"
}


On Jul 6, 2021, at 11:04 AM, pravicha <pravicha at masonlive.gmu.edu<mailto:pravicha at masonlive.gmu.edu>> wrote:

Hello,

Thank you for the quick response. I created the measurement on RIPE atlas portal. Please find the below image for reference, every time I check the Set DO bit field. I’ve also used the Rest API and the measurement looks like this,


  "af": 4,
  "query_class": "IN",
  "query_type": "RRSIG",
  "query_argument": "example.com<http://example.com/>",
  "use_macros": false,
  "description": "DNS measurement to",
  "use_probe_resolver": true,
  "resolve_on_probe": false,
  "set_nsid_bit": false,
  "protocol": "UDP",
  "udp_payload_size": 512,
  "retry": 0,
  "skip_dns_check": false,
  "include_qbuf": false,
  "include_abuf": true,
  "prepend_probe_id": false,
  "set_rd_bit": false,
  "set_do_bit": true,
  "set_cd_bit": false,
  "timeout": 5000,
  "type": "dns"


<PastedGraphic-1.png>

Thanks

On Jul 6, 2021, at 10:59 AM, Philip Homburg <philip.homburg at ripe.net<mailto:philip.homburg at ripe.net>> wrote:

On 2021/07/06 16:18 , pravicha wrote:
The measurement ID is 31426231. I query for DNSKEY records, have the do bit set in this and yet don’t get back the RRSIGs.

Hi,

DNSSEC OK flag is false in this measurement. See https://atlas.ripe.net/measurements/31426231/#general and then 'DNS Specific Settings'. Maybe something went wrong in the creation of the measurement. What tool did you use?

Philip




-------------- next part --------------
An HTML attachment was scrubbed...
URL: </ripe/mail/archives/ripe-atlas/attachments/20210706/e17b8c5c/attachment.html>