My goal was to enable DNSSEC on my RUTX12's DNS server. I've followed variety of OpenWRT-related tutorials. All of the tutorials have one thing in common:
- use stubby and dnsmasq-full, or
- use dnsmasq-full.
The difference between "regular" dnsmasq and dnsmasq-full is the DNSSEC support.
I've found that replacing dnsmasq with dnsmasq-full is impossible in RUTX12 because the full version requires newer kernel. So right now I've working DNSSEC validation done by stubby but that information is not propagated downstream due to dnsmasq. I'll try to compile my own dnsmasq-full or dnsmasq with DNSSCE support myself using the SDK.
My question is: Are you guys planning DNSSEC support in the future?
Thank you very much for your time.