-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On Tue, 2021-03-30 at 15:45 +1100, Mark Andrews wrote:
> can you add a "#" in front of "dnssec-policy" in bin/named/config.c > and see how that goes for you. That will comment out the default > 'dnssec-policy "none";'. I have not been able to reproduce this in a disposable centos 8 VM, using the same /etc/named.conf and /var/named contents from the production server. If I cannot make that work, I will try reproducing the error on the production server tomorrow. Once I get a reproducible scenario, I will try your above patch. -----BEGIN PGP SIGNATURE----- iHMEAREKADMWIQSuFMepaSkjWnTxQ5QvqPuaKVMWwQUCYGOI7xUcY2FybEBmaXZl LXRlbi1zZy5jb20ACgkQL6j7milTFsHU1QCgi6yeu2Yls19f/406zWLIoqo3/QMA nA4PFkv1wnI089pW+VFch454UoLg =hTUy -----END PGP SIGNATURE----- _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users