How to validate DNSSEC signed record with dig?

[Tony Finch]

William Thierry SAMEN <thierry.samen at gmail.com> wrote:
>
> dnssec-signzone: error: dns_master_load: ../etc/toto.com:12: toto.com: not at top of zone
> dnssec-signzone: fatal: failed loading zone from '../etc/toto.com': not at top of zone

This is because your zone uses an include directive to import the key
files, and keys were generated incorrectly: they have file names where the
zone name should be.

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
Bailey: Southerly or southwesterly 4 or 5, increasing 6 to gale 8 for a time
in north and west. Very rough or high. Showers. Good, occasionally poor.