Bug#855479: resolved: Fails lookup with no-signature for a private/local domain

[Sjoerd Simons]

Package: systemd
Version: 232-18
Severity: important
Tags: patch

Hey,

One of my VPNs runs dnsmasq and seems to trigger systemd-resolved to fail the
lookup with dnssec errors:
  neon.elements: resolve call failed: DNSSEC validation failed: no-signature

This got fixed upstream in 97c2ea26456f21334ac164f330426dd518067f08 (hence the
patch flag).

Fwiw the important is arguable, this does make resolved unusable for me in the
default settings on certain VPNs, but the usage of resolved is probably
uncommon.

-- Package-specific info:

-- System Information:
Debian Release: 9.0
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, armhf

Kernel: Linux 4.9.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages systemd depends on:
ii  adduser         3.115
ii  libacl1         2.2.52-3
ii  libapparmor1    2.11.0-2
ii  libaudit1       1:2.6.7-1
ii  libblkid1       2.29.1-1
ii  libc6           2.24-9
ii  libcap2         1:2.25-1
ii  libcryptsetup4  2:1.7.3-3
ii  libgcrypt20     1.7.6-1
ii  libgpg-error0   1.26-2
ii  libidn11        1.33-1
ii  libip4tc0       1.6.0+snapshot20161117-5
ii  libkmod2        23-2
ii  liblz4-1        0.0~r131-2
ii  liblzma5        5.2.2-1.2
ii  libmount1       2.29.1-1
ii  libpam0g        1.1.8-3.5
ii  libseccomp2     2.3.1-2.1
ii  libselinux1     2.6-3
ii  libsystemd0     232-18
ii  mount           2.29.1-1
ii  util-linux      2.29.1-1

Versions of packages systemd recommends:
ii  dbus            1.10.16-1
ii  libpam-systemd  232-18

Versions of packages systemd suggests:
ii  policykit-1        0.105-17
ii  systemd-container  232-18
pn  systemd-ui         <none>

Versions of packages systemd is related to:
ii  dracut           044+241-1
pn  initramfs-tools  <none>
ii  udev             232-18

-- Configuration Files:
/etc/systemd/logind.conf changed [not included]

-- no debconf information