Zitat von Mark Andrews <ma...@isc.org>:
Is this still with BIND 9.7.0-P1 or something more recent? If it is still BIND 9.7.0-P1 then please upgrade. There really is no point debugging validation failures in BIND 9.7.0-P1 anymore as the validator has had really extensive changes since then.
Okay, compiled and installed Bind 9.7.2-P2 from source. We still have many "broken trust chain" in the logs, at first glance i would say even more. Is it possible by any means that this error is thrown because of timeout at some stage of processing? Many of the "broken trust chain" errors resolve fine some seconds later and this would explain why most of the error are for AAAA queries as these are much slower on average. Can someone with code-insight confirm?
Regards Andreas
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users