dnssec validation issue

Tony Finch dot at dotat.at
Wed Aug 30 12:07:14 UTC 2017


Ganga R. Dhungyel <grdhungyel at gmail.com> wrote:
>
> **debug log
>
> 23-Aug-2017 16:17:57.567 dnssec: debug 3:
> 	validating @0x7f3ffc96e4d0: www.vip.icann.org A:
> 	attempting insecurity proof
>
> With dnssec-validation turned on, resolving sites like www.icann.org fails.

I think that line in the debug log indicates that something went wrong
earlier - looks like the resolver somehow got an unsigned answer. I can't
say why without a bit more context.

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/  -  I xn--zr8h punycode
Faeroes: Variable, mainly north, 3 or 4. Moderate or rough. Mainly fair. Good.


More information about the bind-users mailing list