In named.conf I have dnssec-enable yes; dnssec-validation auto;
# rndc managed-keys status view: _default next scheduled event: Sun, 05 Jul 2020 20:43:00 GMT name: . keyid: 20326 algorithm: RSASHA256 flags: SEP next refresh: Sun, 05 Jul 2020 20:43:00 GMT trusted since: Mon, 21 Jan 2019 14:53:55 GMT mail # rndc reload rndc: 'reload' failed: failure mail # tail /var/log/messages Jul 5 07:41:24 mail.covisp.net named[53940] /usr/local/etc/namedb/bind.keys:29: unknown option 'trust-anchors' Jul 5 07:41:24 mail.covisp.net named[53940] reloading configuration failed: failure Bind is currently running just fine and has been since 8 June. The bind.keys file has: # See https://data.iana.org/root-anchors/root-anchors.xml for current trust # anchor information for the root zone. But that URL does not load and gives an XML error. -- -=> <http://xkcd.com/241/> <http://xkcd.com/304/> <http://xkcd.com/635/> <=- _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users