dsa-check-zone-rrsig-expiration: Do not ask for RRSIG directly, instead ask for SOA...

[mirror/dsa-nagios.git] / dsa-nagios-checks / debian / changelog

diff --git a/dsa-nagios-checks/debian/changelog b/dsa-nagios-checks/debian/changelog
index 60e3e4a..3845a85 100644 (file)
--- a/dsa-nagios-checks/debian/changelog
+++ b/dsa-nagios-checks/debian/changelog
@@ -1,8 +1,11 @@
 dsa-nagios-checks (101) UNRELEASED; urgency=low
 
   * dsa-check-zone-rrsig-expiration-many: add --debug option to pass through.
+  * dsa-check-zone-rrsig-expiration: Do not ask for RRSIG directly, instead
+    ask for SOA with dnssec data.  Apparently some nameservers do give you the
+    RRSIG on the DS record instead of a referral (rcode0's for instance).
 
- -- Peter Palfrader <weasel@debian.org>  Tue, 20 May 2014 13:54:29 +0200
+ -- Peter Palfrader <weasel@debian.org>  Tue, 20 May 2014 13:58:00 +0200
 
 dsa-nagios-checks (100) unstable; urgency=low