On 11/25/2011 03:19 PM, Tony Finch wrote: > Bryton <bry...@tznic.or.tz> wrote: >> I wonder if anyone has ever got the error > In my logs I have some of this: > > 25-Nov-2011 11:23:00.332 dnssec: info: validating @0xabe00470: uofk.edu MX: > bad cache hit (uofk.edu/DNSKEY) > > Which is fairly nicely explained by this: > > http://dnsviz.net/d/uofk.edu/dnssec/ > > Tony.
I understand your scenario, you have DS in edu but no matching DNSKEY in uofk.edu so I think there is a broken trust anchor. Now in my case sometimes I get SERVFAIL and sometimes I get the answers i want showing that it actually works. -- [ Bryton | Systems Engineer | .tzNIC | www.tznic.or.tz ] _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
