How to validate DNSSEC signed record with dig?
dot at dotat.at
Wed Feb 8 13:07:19 UTC 2012
William Thierry SAMEN <thierry.samen at gmail.com> wrote:
> dnssec-signzone: error: dns_master_load: ../etc/toto.com:12: toto.com: not at top of zone
> dnssec-signzone: fatal: failed loading zone from '../etc/toto.com': not at top of zone
This is because your zone uses an include directive to import the key
files, and keys were generated incorrectly: they have file names where the
zone name should be.
f.anthony.n.finch <dot at dotat.at> http://dotat.at/
Bailey: Southerly or southwesterly 4 or 5, increasing 6 to gale 8 for a time
in north and west. Very rough or high. Showers. Good, occasionally poor.
More information about the bind-users