Hi,
I'm currently working on a test setup and I get the following error when
I try to sign our .at-zone (with OpenDNSSEC 1.2.0rc1):
Nov 19 17:37:23 nssig1 openCryptokiModule[18565]: occluded data at
ns9.univie.ac .at. (below ac.at. NS)
Nov 19 17:37:24 nssig1 openCryptokiModule[18565]: occluded data at
d.nic.at. (be low nic.at. NS)
Nov 19 17:37:24 nssig1 openCryptokiModule[18565]: occluded data at
j.nic.at. (be low nic.at. NS)
Nov 19 17:37:24 nssig1 openCryptokiModule[18565]: occluded data at
n.nic.at. (below nic.at. NS)
Nov 19 17:37:24 nssig1 openCryptokiModule[18565]: occluded data at
ns-uk.nic.at. (below nic.at. NS)
Nov 19 17:37:24 nssig1 openCryptokiModule[18565]: update zone at failed:
zone data contains errors
Nov 19 17:37:28 nssig1 openCryptokiModule[18565]: task [update zone at]
failed
The zonefile looks like this:
at. 172800 IN NS d.nic.at.
at. 172800 IN NS j.nic.at.
at. 172800 IN NS n.nic.at.
at. 172800 IN NS ns1.univie.ac.at.
at. 172800 IN NS ns2.univie.ac.at.
at. 172800 IN NS ns9.univie.ac.at.
at. 172800 IN NS ns-uk.nic.at.
and contains the corresponding A and AAAA glue records.
From my point of view, this is a valid setup or do I miss something?
Best,
Michael
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
