Re-marking as Invalid since I finally figured out today the erroneous RR was not generated by dnssec-signzone but a 3rd party tool that mistakenly writes the salt-length field too (which shouldn't be present except in the on-the-wire RDATA).
** Changed in: bind9 (Ubuntu) Status: Triaged => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1842939 Title: dnssec-signzone: error when NSEC3PARAM record exists To manage notifications about this bug go to: https://bugs.launchpad.net/bind/+bug/1842939/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs