Bug#866081: danetool: error opening file /usr/share/dns/root.key: No such file or directory

[Paul Menzel]

Package: gnutls-bin
Version: 3.5.13-2
Severity: normal

Dear Maintainer,


Running `danetool` gives the error below.

```
$ danetool --check mx1.bund.de --proto tcp --starttls-proto=smtp
Resolving 'mx1.bund.de:smtp'...
Obtaining certificate from '77.87.224.131:25'...
Querying DNS for mx1.bund.de (tcp:25)...
[1498542474] libunbound[15674:0] error: error opening file /usr/share/dns/root.key: No such file or directory
[1498542474] libunbound[15674:0] error: error reading trust-anchor-file: /usr/share/dns/root.key
[1498542474] libunbound[15674:0] error: validator: error in trustanchors config
[1498542474] libunbound[15674:0] error: validator: could not apply configuration settings.
[1498542474] libunbound[15674:0] error: module init for module validator failed
dane_query_tlsa: There was an error while resolving.
```

libunbound2 1.6.0-3 is installed.

```
libgnutls-dane0  Hängt ab von libunbound2 (>= 1.4.1)
```


Thanks,

Paul


-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 4.11.0-1-686-pae (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)

Versions of packages gnutls-bin depends on:
ii  libc6            2.24-12
ii  libgmp10         2:6.1.2+dfsg-1
ii  libgnutls-dane0  3.5.13-2
ii  libgnutls30      3.5.13-2
ii  libhogweed4      3.3-1+b1
ii  libidn2-0        0.16-1
ii  libnettle6       3.3-1+b1
ii  libopts25        1:5.18.12-3
ii  libp11-kit0      0.23.3-5
ii  libtasn1-6       4.12-2
ii  zlib1g           1:1.2.8.dfsg-5

gnutls-bin recommends no packages.

gnutls-bin suggests no packages.

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 232 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20170627/6ae54c20/attachment.sig>