project722 <[email protected]> wrote: > > In my named.conf I changed: > > dnssec-validation yes; > > to > > dnssec-validation auto;
Good :-) Next thing to do is delete all trace of managed-keys or mkeys files or trusted-keys configuration, then restart `named`. It will automatically create managed-keys files with the correct contents - it has the current root KSKs built in, so you don't need the bind.keys file. Tony. -- f.anthony.n.finch <[email protected]> http://dotat.at/ South Fitzroy: Northerly or northeasterly 5 or 6. Slight or moderate. Occasional drizzle. Good, occasionally poor at first. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/bind-users
