[Opendnssec-user] Two NSEC3PARAM records in signed zone

[Jan-Piet Mens]

Good morning,

I opened an issue yesterday [1] regarding the finding of not one but two
NSEC3PARAM records in the signed output created by OpenDNSSEC
1.4/develop.

Can somebody confirm that my findings are suspicious to say the best? My
reading of RFC 5155, section 4, suggests there can be one NSEC3PARAM
only.

Regards,

        -JP


[1] https://issues.opendnssec.org/browse/SUPPORT-156