dsa-check-zone-signature-all: tell dig not to convert punycode

It gets unhappy about xn--gba.debian.net and for the purposes of this
check we don't care.

diff --git a/dsa-nagios-checks/checks/dsa-check-zone-signature-all b/dsa-nagios-checks/checks/dsa-check-zone-signature-all
index 45e4399..701107f 100755 (executable)
--- a/dsa-nagios-checks/checks/dsa-check-zone-signature-all
+++ b/dsa-nagios-checks/checks/dsa-check-zone-signature-all
@@ -36,7 +36,7 @@ if [ -z "$BASE" ] || ! [ -d "$BASE" ] ; then
        exit 3
 fi
 
-EXTRA="-b 127.0.0.1"
+EXTRA="-b 127.0.0.1 +noidnout"
 MASTER=$(hostname -f)
 
 zones=$(mktemp)

diff --git a/dsa-nagios-checks/debian/changelog b/dsa-nagios-checks/debian/changelog
index 7be0e73..dcde72c 100644 (file)
--- a/dsa-nagios-checks/debian/changelog
+++ b/dsa-nagios-checks/debian/changelog
@@ -10,6 +10,7 @@ dsa-nagios-checks (119) UNRELEASED; urgency=medium
 
   [ Julien Cristau ]
   * port dsa-check-statusfile and dsa-check-memory to python3
+  * dsa-check-zone-signature-all: tell dig not to convert punycode.
 
  -- Peter Palfrader <weasel@debian.org>  Mon, 20 May 2019 12:52:00 +0200