Hi! I am trying to validate DNSSEC signature on ns record using dig.
Domain nox.su is properly signed using DNSSEC. Prove link: http://dnssec-debugger.verisignlabs.com/nox.su I am trying to validate it as dicribed here: http://bryars.eu/2010/08/validating-and-exploring-dnssec-with-dig/ $ dig +nocomments +nostats +nocmd +noquestion -t dnskey . > trusted-key.key $ dig +topdown +sigchase nox.su but it gives me ";; DSset is missing to continue validation: FAILED" error while processing the whole hierarchy of zones. $ cat /etc/resolv.conf # Generated by NetworkManager domain router search router nameserver 8.8.8.8 nameserver 78.46.213.227 dig is built with DIG_SIGCHASE option. What am I doing wrong and how to do it right? :-) _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
