<html><head></head><body><div style="font-family:verdana, helvetica, sans-serif;font-size:16px;"><div>I am seeing the below error when a zone is signed without an A record for zone. However there is a an CNAME record for the same top-level domain (zone), could this be causing the below error and why?<span style="background-color: rgb(205, 35, 44);"><b><span><br></span></b></span></div><div><span style="background-color: rgb(205, 35, 44);"><b><span><br>dnssec-signzone: error: dns_master_load: :33: zonename: CNAME and other data<br>dnssec-signzone: fatal: failed loading zone from : CNAME and other data</span><br></b></span></div><div><br></div>
<div id="ydpe9e4f4ceyahoo_quoted_4477729534" class="ydpe9e4f4ceyahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Wednesday, April 11, 2018, 5:56:01 PM EDT, Carl Byington <carl@byington.org> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div dir="ltr">-----BEGIN PGP SIGNED MESSAGE-----<br clear="none">Hash: SHA512<br clear="none"><div class="ydpe9e4f4ceyqt8617320281" id="ydpe9e4f4ceyqtfd65111"><br clear="none">On Wed, 2018-04-11 at 21:06 +0000, praveen via bind-users wrote:<br clear="none">> Is an "A" record mandatory entry for top-level domain (zone) when<br clear="none">> using DNSSEC, DKIM, SPF and DMARC configuration?</div><br clear="none"><br clear="none">No. I have zones with all of that, with no A record at the apex, and<br clear="none">have not seen any interoperability problems.<br clear="none"><br clear="none"><br clear="none">-----BEGIN PGP SIGNATURE-----<br clear="none">Version: GnuPG v2.0.14 (GNU/Linux)<br clear="none"><br clear="none">iEYEAREKAAYFAlrOfYMACgkQL6j7milTFsEX3wCdEPzfLvv+AD7ya88VNZg9cfDk<br clear="none">OJEAn3mmxOfAeW/AfJeyND5V2LoYj3dO<br clear="none">=DF0y<br clear="none">-----END PGP SIGNATURE-----<br clear="none"><br clear="none"><br clear="none"><br clear="none">_______________________________________________<br clear="none">Please visit <a shape="rect" href="https://lists.isc.org/mailman/listinfo/bind-users " rel="nofollow" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users </a>to unsubscribe from this list<br clear="none"><br clear="none">bind-users mailing list<br clear="none"><a shape="rect" href="mailto:bind-users@lists.isc.org" rel="nofollow" target="_blank">bind-users@lists.isc.org</a><br clear="none"><a shape="rect" href="https://lists.isc.org/mailman/listinfo/bind-users" rel="nofollow" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><div class="ydpe9e4f4ceyqt8617320281" id="ydpe9e4f4ceyqtfd95477"><br clear="none"></div></div></div>
</div>
</div></div></body></html>