Hi I'm troubleshooting a strange problem. Customer uses bind 9.10.1 as a recursive resolver and they cannot resolve some domains.
Platform is windows server 2012, 64-bit I've installed 9.9.7, 9.10.1 and 9.10.2 in my lab, only 9.9.7 can resolve umea.se, I used the exact same configuration in all three. With 9.10.x i get "dnssec: info: validating umea.se/SOA: got insecure response; parent indicates it should be secure" in the log These validates the umea.se domain as ok: * http://dnscheck.iis.se/?time=1429805786&id=4683492&view=basic&test=standard * http://dnssec-debugger.verisignlabs.com/umea.se# * http://zonemaster.se/test/8675 This one flags some errors, there are two expired and one valid RRSIG for the SOA * http://dnsviz.net/d/umea.se/dnssec/ Any tips on how to resolve this? (downgrade to 9.9.7 or is there any other solution?) Thanks Anders Löwinger, Abundo AB, +46 72 206 0322
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
