dig -- only RRSIG present.

Spain, Dr. Jeffry A. spainj at countryday.net
Mon Feb 13 05:30:27 UTC 2012


> Using this DNS server, I'm still not getting the DNSKEY for any DNSSEC capable domain; infact this server has issues - 
> dig +dnssec -t A dnssec.net @bind.odvr.dns-oarc.net.
> I'd be really happy if I could get some domains which are signed.

Try this one: dig @bind.odvr.dns-oarc.net. isc.org +dnssec
You should get an AD flag returned and a variety of RRSIG records. Jeff.



More information about the bind-users mailing list