Cert ans dnssec

Discussion in 'Linux Networking' started by Rob van der Putten, Jun 17, 2012.

  1. Hi there


    Had these for quite a while;
    Jun 13 10:59:06 sput named[6532]: validating @0xb28e5308:
    nickel.us-cert.gov SOA: got insecure response;
    parent indicates it should be secure
    Jun 13 10:59:07 sput named[6532]: validating @0xb28e5308:
    nickel.us-cert.gov SOA: got insecure response;
    parent indicates it should be secure
    Jun 13 10:59:07 sput named[6532]: validating @0xb8c59040:
    nickel.us-cert.gov SOA: got insecure response;
    parent indicates it should be secure
    Jun 13 10:59:07 sput named[6532]: validating @0xb89391f8:
    johnson.nickel.us-cert.gov AAAA:
    bad cache hit (johnson.nickel.us-cert.gov/DS)
    .... etc ...

    A bit of online testing seems to support this;
    http://dnssec-debugger.verisignlabs.com/nickel.us-cert.gov
    http://dnssec-debugger.verisignlabs.com/johnson.nickel.us-cert.gov

    Any suggestions?


    Regards,
    Rob
     
    Rob van der Putten, Jun 17, 2012
    #1
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.