Your message dated Wed, 23 Apr 2025 00:32:17 +0200
with message-id <[email protected]>
and subject line Re: Bug#1006635: Unable to fetch DNSKEY set '.'
has caused the Debian Bug report #1006635,
regarding Unable to fetch DNSKEY set '.'
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1006635: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1006635
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: bind9
Version: 1:9.16.22-1~deb11u1
Severity: normal
I get this message every few days:
Feb 1 23:14:56 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY
set '.': timed out
Feb 2 23:14:43 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY
set '.': timed out
Feb 3 23:15:14 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY
set '.': timed out
Feb 4 23:14:54 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY
set '.': timed out
Feb 5 23:14:40 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY
set '.': timed out
Feb 6 23:14:56 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY
set '.': timed out
Feb 24 23:14:12 attila named[1757]: managed-keys-zone: Unable to fetch DNSKEY
set '.': operation canceled
Feb 28 23:14:12 attila named[1757]: managed-keys-zone: Unable to fetch DNSKEY
set '.': operation canceled
Jan 30 23:14:43 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY
set '.': timed out
But DNSSEC generally appears to work:
Feb 27 00:14:13 attila named[1757]: managed-keys-zone: Key 20326 for zone . is
now trusted (acceptance timer complete)
Feb 27 23:14:12 attila named[1757]: managed-keys-zone: Key 20326 for zone . is
now trusted (acceptance timer complete)
Feb 28 00:14:13 attila named[1757]: managed-keys-zone: Key 20326 for zone . is
now trusted (acceptance timer complete)
Mar 1 00:14:12 attila named[1757]: managed-keys-zone: Key 20326 for zone . is
now trusted (acceptance timer complete)
options {
...
dnssec-validation auto;
};
--
ciao,
Marco
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Version: 1:9.18.33-1
On Apr 17, Ondřej Surý <[email protected]> wrote:
does this still happen with 9.18/9.20?
Apparently not.
--
ciao,
Marco
signature.asc
Description: PGP signature
--- End Message ---
