dig and IDN

Mark Elkins mje at posix.co.za
Wed Oct 12 22:17:27 UTC 2016

O.S. - Lunux Gentoo.
BIND/BIND Tools: BIND 9.10.4-P3

I've been using "dig axfr" to fetch signed and unsigned zones for doing
comparisons. The output is easy to parse as dig gives one line records -
fully qualified - etc.

One of the records includes some IDN (Puny) stuff..

xn--caf-dma.dnssec.co.za.             A

This comes back in a dig axfr as:

café.dnssec.co.za.      86400   IN      A

If I then use "validns" on this "zone-file" - the "café" records are
marked as errors.  (record name is not valid)

Is there any way within dig to switch off the puny to UTF8 translations?
Some flag? Environmental variable?

Seems like LANG=en_US.utf8 makes the conversion happen.
I actually use LANG=en_ZA.utf8 - so I can type French from my US layout
ASCII keyboard

ps. Checking with dnssec-verify does not give this error.

Mark James ELKINS  -  Posix Systems - (South) Africa
mje at posix.co.za       Tel: +27.128070590  Cell: +27.826010496
For fast, reliable, low cost Internet in ZA: https://ftth.posix.co.za

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3854 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20161013/bedc1780/attachment.bin>

More information about the bind-users mailing list