SERVFAIL with ocsp.entrust.net.

[Bischof, Ralph F. (MSFC-IS40)[NICS]]

Thanks for the help everyone. The AAAA query is now coming back with a NOERROR response. 
Of note, any other query besides A or AAAA is still showing SERVFAIL.


Thank you,
Ralph F. Bischof, Jr.
NASA Agency IPAM/DNS/DHCP
SAIC/NICS
256-544-3982




> -----Original Message-----
> From: bind-users-bounces+ralph.bischof=nasa.gov at lists.isc.org
> [mailto:bind-users-bounces+ralph.bischof=nasa.gov at lists.isc.org] On Behalf
> Of Bischof, Ralph F. (MSFC-IS40)[NICS]
> Sent: Tuesday, April 24, 2012 12:53 PM
> To: bind-users at lists.isc.org
> Subject: SERVFAIL with ocsp.entrust.net.
> 
> Hi Mark,
> 
> 	Good to hear. I have been working with someone at Entrust for a
> while now and had an email last night from him to check again. And, yes, my
> main concern is dual-stack IPv6 machines, hence the AAAA queries being
> important.
> 
> 
> Thank you,
> Ralph F. Bischof, Jr.
> NASA Agency IPAM/DNS/DHCP
> SAIC/NICS
> 256-544-3982
> 
> 
> 
> 
> > -----Original Message-----
> > From: Mark Andrews [mailto:marka at isc.org]
> > Sent: Tuesday, April 24, 2012 10:44 AM
> > To: Bischof, Ralph F. (MSFC-IS40)[NICS]
> > Cc: comp-protocols-dns-bind at isc.org
> > Subject: Re: SERVFAIL with ocsp.entrust.net.
> >
> >
> > Entrust is definitely aware of the issue and are working on it.
> > Yes it is a misconfiguration.  This breaks FaceTime on dual stack
> > machines on dual stack machines.
> >
> > They reported that they had fixed it earlier today but hadn't when I tested.
> > They acknowledge the report that it was still broken and were going to
> > look at their setup again.
> >
> > Mark
> 
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
> from this list
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users