[Opendnssec-user] NSEC3 failure?

Havard Eidnes he at uninett.no
Fri Apr 1 08:34:43 UTC 2016


>> Does anyone have an idea what more needs to be done to zero in on
>> this problem?
>
> Hmm. My first guess would be that it involves a resalt. Your log lines
> seem to indicate that no new NSECS are being generated. Yet a resign
> solves the problem. Could you compare the NSEC3PARAM from the failing
> zone to the one after the manual resign?

It seems this was a correct hunch, ref. my other posting. 

Regards,

- Håvard



More information about the Opendnssec-user mailing list