Bug#1069994: systemd-resolved: resolvectl dnssec failed for unsigned domains

[Luca Boccassi]

On Sun, 28 Apr 2024 11:53:17 +0200 Adrien CLERC
<bugs-debian at antipoul.fr> wrote:
> Package: systemd-resolved
> Version: 255.5-1
> Severity: important
> 
> Dear Maintainer,
> 
> Since 255.5-1, resolvectl produces the following:
> 
> ❯ resolvectl query --validate=yes www.youtube.com
> www.youtube.com: resolve call failed: DNSSEC validation failed: no-
signature
> 
> The domain is unsigned. It worked in 255.4-1+b1, but I'm unable to
rollback,
> since it depends on libsystemd which makes a lot of package unhappy
with
> dependencies.
> 
> Did I miss something?
> In the meantime, I'll use "DNSSEC=no", but that's not a definitive
answer.
> 
> Have a nice day,
> Adrien
> 

There are no resolved patches downstream, report this upstream

-- 
Kind regards,
Luca Boccassi