ASUS - ZenTalk

rodfeli

HI,I found a DNSSEC validation issue on my ASUS RT-BE88U, affecting firmware versions 3.0.0.6.102_39396 and 3.0.0.6.102_39450.IANA is performing a DNSSEC root Key Signing Key (KSK) rollover, introducing the new KSK-2024 (key tag 38696) alongside the ...

rodfeli

If you're familiar with SSH, please run this command on your ASUS router:strings /sbin/rc | grep 'trust-anchor='If the output shows only the old DNSSEC root trust anchor:trust-anchor=.,20326,8,2,E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC68345710423...

rodfeli

I can confirm the same issue on my ASUS RT-BE88U, running the latest firmware (3.0.0.6.102_39450).After extensive testing, I found that ASUSWRT only includes the old DNSSEC root trust anchor (KSK-2017, key tag 20326) in /sbin/rc, which generates /etc...

rodfeli

Technically, yes, at least as a temporary workaround.On my RT-BE88U, /etc/dnsmasq.conf is generated by ASUSWRT, and the existing DNSSEC root trust anchor (key tag 20326) appears to be hardcoded in /sbin/rc.I successfully tested adding the new KSK-202...

rodfeli

Thanks! I've submitted the detailed DNSSEC/KSK-2024 bug report through the router's Administration → Feedback page. Hopefully, the ASUSWRT firmware team can investigate and address it in a future firmware update.

ASUS - ZenTalk

Estatísticas de utilizador

Atividade de usuário

RT-BE88U Firmware Bug – DNSSEC Root KSK-2024 (38696) Missing – DNS Resolution Failure

Re: ZenWiFi BT10 39436 – dnsmasq fails after WAN link flap, DNS returns SERVFAIL until DNSSEC disabl

Re: ZenWiFi AX (XT6600/XT8) Stopped Passing Internet But Can't See Any Other Issues

Re: RT-BE88U Firmware Bug – DNSSEC Root KSK-2024 (38696) Missing – DNS Resolution Failure

Re: RT-BE88U Firmware Bug – DNSSEC Root KSK-2024 (38696) Missing – DNS Resolution Failure