[Bug 1650877] Re: systemd-resolved: resolve call failed: DNSSEC validation failed: failed-auxiliary

[Malte Cornils]

Setting 
/etc/systemd/resolv.conf entry DNSSEC=no and enacting a sudo service systemd-resolved restart works around the problem for me. However, DNSSEC with the default (i.e. fallback) should still work.

Starting Firefox does not "fix" the problem for me, though.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/1650877

Title:
  systemd-resolved: resolve call failed: DNSSEC validation failed:
  failed-auxiliary

Status in systemd package in Ubuntu:
  Confirmed

Bug description:
  After I boot Ubuntu 17.04 "Zesty Zapus" (dev)

  $ systemd-resolve www.facebook.com
  www.facebook.com: resolve call failed: DNSSEC validation failed: failed-auxiliary

  But after I have started Mozilla Firefox, and I try again it correctly
  resolves.

  $ systemd-resolve www.facebook.com
  www.facebook.com: 31.13.72.36
                    (star-mini.c10r.facebook.com)

  -- Information acquired via protocol DNS in 3.6ms.
  -- Data is authenticated: no

  This does not only apply to the above mentioned www.facebook.com domain.
  This seems to be related to a GitHub issue:
  https://github.com/systemd/systemd/issues/4003

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1650877/+subscriptions