How to validate DNSSEC signed record with dig?

Tony Finch dot at
Wed Feb 8 13:07:19 UTC 2012

William Thierry SAMEN <thierry.samen at> wrote:
> dnssec-signzone: error: dns_master_load: ../etc/ not at top of zone
> dnssec-signzone: fatal: failed loading zone from '../etc/': not at top of zone

This is because your zone uses an include directive to import the key
files, and keys were generated incorrectly: they have file names where the
zone name should be.

f.anthony.n.finch  <dot at>
Bailey: Southerly or southwesterly 4 or 5, increasing 6 to gale 8 for a time
in north and west. Very rough or high. Showers. Good, occasionally poor.

More information about the bind-users mailing list