<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi<br>
<br>
I'm troubleshooting a strange problem. Customer uses bind 9.10.1 as
a recursive resolver and they cannot resolve some domains.<br>
<br>
Platform is windows server 2012, 64-bit<br>
<br>
I've installed 9.9.7, 9.10.1 and 9.10.2 in my lab, only 9.9.7 can
resolve umea.se, I used the exact same configuration in all three.<br>
<br>
With 9.10.x i get "dnssec: info: validating umea.se/SOA: got
insecure response; parent indicates it should be secure" in the log<br>
<br>
These validates the umea.se domain as ok:<br>
<ul>
<li><a class="moz-txt-link-freetext" href="http://dnscheck.iis.se/?time=1429805786&id=4683492&view=basic&test=standard">http://dnscheck.iis.se/?time=1429805786&id=4683492&view=basic&test=standard</a><br>
</li>
<li><a class="moz-txt-link-freetext" href="http://dnssec-debugger.verisignlabs.com/umea.se#">http://dnssec-debugger.verisignlabs.com/umea.se#</a></li>
<li><a class="moz-txt-link-freetext" href="http://zonemaster.se/test/8675">http://zonemaster.se/test/8675</a><br>
</li>
</ul>
<br>
This one flags some errors, there are two expired and one valid
RRSIG for the SOA<br>
<ul>
<li><a class="moz-txt-link-freetext" href="http://dnsviz.net/d/umea.se/dnssec/">http://dnsviz.net/d/umea.se/dnssec/</a></li>
</ul>
<br>
<br>
Any tips on how to resolve this? (downgrade to 9.9.7 or is there any
other solution?)<br>
<br>
<br>
Thanks<br>
Anders Löwinger, Abundo AB, +46 72 206 0322<br>
<br>
</body>
</html>