[Kea-users] DDNS TSIG verification failed: BADSIG

[Randy McEoin]

Attached are the packet captures if you do want to see them.

In the one named isc-dhcp-power-ddns you'll see only one transaction since the original dhcpd is happy with the TSIG.

In the one named kea-powerdns-ddns you'll see three transactions since Kea thinks it's failing and tries a total of three times.

Would be ideal if Wireshark would check the TSIG.  I'm half tempted to tackle the dissector.  You'd have to feed it the key and I've not noticed any dissector do something like that.

Randy
-------------- next part --------------
A non-text attachment was scrubbed...
Name: isc-dhcp-powerdns-ddns.pcap
Type: application/vnd.tcpdump.pcap
Size: 424 bytes
Desc: isc-dhcp-powerdns-ddns.pcap
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20160205/a42f221f/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: kea-powerdns-ddns.pcap
Type: application/vnd.tcpdump.pcap
Size: 1401 bytes
Desc: kea-powerdns-ddns.pcap
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20160205/a42f221f/attachment-0001.bin>