On Tue, 16 Jul 2013, Mathieu Arnold wrote:

Yesterday, my monitoring reported a lot of faulty zones, validns complained
of :

# validns -p all -z 1-wire.fr master/1-wire.fr.signed
master/1-wire.fr.signed:15: 1-wire.fr. RRSIG(SOA): cannot verify the
signature

Attached the zone. Was generated by opendnssec 1.4.1 on a FreeBSD 9.1.

for the record, ldns agrees the signature is bad:

paul@bofh:$ ldns-verify-zone 1-wire.fr.signed
Checking: 1-wire.fr.
Error: Bogus DNSSEC signature for 1-wire.fr.    SOA
Checking: _keyword.1-wire.fr.
Checking: localhost.1-wire.fr.
Checking: www.1-wire.fr.
There were errors in the zone
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

Reply via email to