unknown option 'trust-anchors'

@lbutlr kremels at kreme.com
Sun Jul 5 13:51:29 UTC 2020


In named.conf I have 
	dnssec-enable yes;
        dnssec-validation auto;

# rndc managed-keys status
view: _default
next scheduled event: Sun, 05 Jul 2020 20:43:00 GMT

    name: .
    keyid: 20326
        algorithm: RSASHA256
        flags: SEP
        next refresh: Sun, 05 Jul 2020 20:43:00 GMT
        trusted since: Mon, 21 Jan 2019 14:53:55 GMT
 mail # rndc reload
rndc: 'reload' failed: failure
 mail # tail /var/log/messages
Jul  5 07:41:24 mail.covisp.net named[53940] /usr/local/etc/namedb/bind.keys:29: unknown option 'trust-anchors'
Jul  5 07:41:24 mail.covisp.net named[53940] reloading configuration failed: failure

Bind is currently running just fine and has been since 8 June.

The bind.keys file has:

# See https://data.iana.org/root-anchors/root-anchors.xml for current trust
# anchor information for the root zone.

But that URL does not load and gives an XML error.



-- 
-=> <http://xkcd.com/241/>
    <http://xkcd.com/304/>
	<http://xkcd.com/635/> <=-



More information about the bind-users mailing list