Package: bind9 Version: 1:9.16.22-1~deb11u1 Severity: normal I get this message every few days:
Feb 1 23:14:56 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY
set '.': timed out
Feb 2 23:14:43 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY
set '.': timed out
Feb 3 23:15:14 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY
set '.': timed out
Feb 4 23:14:54 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY
set '.': timed out
Feb 5 23:14:40 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY
set '.': timed out
Feb 6 23:14:56 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY
set '.': timed out
Feb 24 23:14:12 attila named[1757]: managed-keys-zone: Unable to fetch DNSKEY
set '.': operation canceled
Feb 28 23:14:12 attila named[1757]: managed-keys-zone: Unable to fetch DNSKEY
set '.': operation canceled
Jan 30 23:14:43 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY
set '.': timed out
But DNSSEC generally appears to work:
Feb 27 00:14:13 attila named[1757]: managed-keys-zone: Key 20326 for zone . is
now trusted (acceptance timer complete)
Feb 27 23:14:12 attila named[1757]: managed-keys-zone: Key 20326 for zone . is
now trusted (acceptance timer complete)
Feb 28 00:14:13 attila named[1757]: managed-keys-zone: Key 20326 for zone . is
now trusted (acceptance timer complete)
Mar 1 00:14:12 attila named[1757]: managed-keys-zone: Key 20326 for zone . is
now trusted (acceptance timer complete)
options {
...
dnssec-validation auto;
};
--
ciao,
Marco
signature.asc
Description: PGP signature
