Re: validation error

2012-12-12 Thread Mark Andrews
In message <55592.216.191.251.36.1355342351.squir...@secure.webcon.ca>, "Robert Hardy" writes: > I've got bind 9.8.1-P1 setup as a DNSSEC validating name server. > af.mil uses DNSSEC and various web based external validation tools seem > happy with their setup. I've turned up my logging for DNSSE

validation error

2012-12-12 Thread Robert Hardy
I've got bind 9.8.1-P1 setup as a DNSSEC validating name server. af.mil uses DNSSEC and various web based external validation tools seem happy with their setup. I've turned up my logging for DNSSEC validation and in bind for af.mil/DNSKEY only always fails validation. It seems perfectly happy with