On Thu, May 20, 2010 at 12:10:53PM -0700,
 itservices88 <[email protected]> wrote 
 a message of 92 lines which said:

> # dnssec-signzone -N INCREMENT mydomain.org
> Verifying the zone using the following algorithms: RSASHA1.
> Missing RSASHA1 signature for . NSEC
> The zone is not fully signed for the following algorithms: RSASHA1.
> dnssec-signzone: fatal: DNSSEC completeness test failed.

I do not find these error messages in BIND source code. Are you sure
you use the pristine dnssec-signzone and not, say, a local custom
script?

(dnssec-signzone is supposed to sign the zone, not to check that it is
signed.)
_______________________________________________
bind-users mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to