[gtld-tech] gzipped error messages served as zone files

[Victor Figueroa]

Hi Joe, 

We are aware of this issue, and we are working to fix it immediately.
 
In the meantime, you should now see the latest available zone files for both TLDs.
Also, we are working with the registry to fix the AXFR transfer.

Best,
Victor

On 2/2/22, 6:36 PM, "gtld-tech on behalf of Joe Wein via gtld-tech" <gtld-tech-bounces at icann.org on behalf of gtld-tech at icann.org> wrote:

    Some recent CZDS zone file downloads were missing all zone data.

    Specifically, the gzipped files were not empty, but their content was error 
    messages, not zone file data.

    For example:

    $ gunzip < bayern.zone.gz
    ;; Couldn't verify signature: expected a TSIG or SIG(0)
    ; Transfer failed.
    ;; Couldn't verify signature: expected a TSIG or SIG(0)

    $ gunzip < jot.zone.gz
    ;; Couldn't create key icann-axfr: bad base64 encoding
    ; Transfer failed.
    ;; Couldn't create key icann-axfr: bad base64 encoding

    "Transfer failed" should be a dead giveaway that something went wrong.

    Can we please improve error handling on the portal side so that output of a 
    "dig axfr" to make a snapshot for distribution is only ever packaged up as a 
    .gz file for download by CZDS users if it at least has a valid SOA record in 
    its first few lines?

    Regards

    Joe Wein
    SURBL


    _______________________________________________
    By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2576 bytes
Desc: not available
URL: <https://mm.icann.org/pipermail/gtld-tech/attachments/20220203/a3b8efd7/smime.p7s>