[Opendnssec-user] NSEC3 failure?
Havard Eidnes
he at uninett.no
Fri Apr 1 08:34:43 UTC 2016
>> Does anyone have an idea what more needs to be done to zero in on
>> this problem?
>
> Hmm. My first guess would be that it involves a resalt. Your log lines
> seem to indicate that no new NSECS are being generated. Yet a resign
> solves the problem. Could you compare the NSEC3PARAM from the failing
> zone to the one after the manual resign?
It seems this was a correct hunch, ref. my other posting.
Regards,
- Håvard
More information about the Opendnssec-user
mailing list