AdguardTeam / AdguardTeam/AdGuardHome

"DNSSEC Validated" icon near DNSSEC incorrect domain

Open
#3,017 5 comments 0 reactions 1 assignee Claimed by @ainar-g View on GitHub
bug needs investigation P3: Medium
Dominant language
TypeScript
Stars
36.9k
Forks
2.5k
PR merge metrics
No merged PRs in 30d

Description

### System Details:
* **Version of AdGuard Home server:**
* Adguard Home v0.106.0-b.4
* **How did you install AdGuard Home:**
* Snap package
* **How did you setup DNS configuration:**
* Ubuntu VPS
* **CPU architecture:**
* x86_64
* **Operating system and version:**
* Ubuntu 20.04.2 LTS
* **Unbound is present:**
* Unbound 1.13.0 (with DNSSEC features and hardenings on)

### Describe the bug
_I use Unbound + Adguard Home
I turned on "Enable DNSSEC" feature in Adguard home
I use [www.servfail.sidnlabs.nl](https://www.servfail.sidnlabs.nl) and [www.dnssec-failed.org](https://www.dnssec-failed.org) domains to check if DNSSEC checks are really working_

**When DNSSEC checks are turned on in Unbound and Adguard Home:**

_Expected behavior:_
No "DNSSEC Validated" icon near [www.servfail.sidnlabs.nl](https://www.servfail.sidnlabs.nl) and [www.dnssec-failed.org](https://www.dnssec-failed.org) domains in Adguard Home, because Unbound has restricted us from entering these domains with SERVFAIL

_Actual behavior:_
![DNSSEC3](https://user-images.githubusercontent.com/38164582/116271173-440f6480-a76f-11eb-85e1-6d5f6ce5d404.PNG)
![DNSSEC](https://user-images.githubusercontent.com/38164582/116271203-48d41880-a76f-11eb-985b-5f11983511ef.PNG)

**When DNSSEC checks are turned off in Unbound and turned on in Adguard Home:**

_Expected behavior:_
Domains [www.servfail.sidnlabs.nl](https://www.servfail.sidnlabs.nl) and [www.dnssec-failed.org](https://www.dnssec-failed.org) are inaccessible (SERVFAIL) and no "DNSSEC Validated" icon near them

_Actual behavior:_
![DNSSEC 1](https://user-images.githubusercontent.com/38164582/116272229-458d5c80-a770-11eb-831c-06251cc4a2ce.PNG)

**P.S.**
_If it's correct behavior of Adguard Home, than "DNSSEC Validated" icon is quite misleading._

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.