BIND dnssec issue

[Mahdi Adnan]

Hello,


We have several Bind recursive servers and all of them stop responding to queries at 10:00 PM daily for 4 minutes starting from November 1st with the following error in the logs;


"SOA: got insecure response; parent indicates it should be secure"

"DNSKEY: verify failed due to bad signature (keyid=56467): RRSIG has expired"

"dlv.isc.org SOA: got insecure response; parent indicates it should be secure"



servers running different versions of BIND (9.9 and 910) but all are up to date.

anyone have any idea about this issue ?


Thanks
--

Respectfully
Mahdi A. Mahdi

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20161106/7fe1e830/attachment.html>