Package: bind9 Version: 1:9.16.22-1~deb11u1 Severity: normal I get this message every few days:
Feb 1 23:14:56 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out Feb 2 23:14:43 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out Feb 3 23:15:14 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out Feb 4 23:14:54 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out Feb 5 23:14:40 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out Feb 6 23:14:56 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out Feb 24 23:14:12 attila named[1757]: managed-keys-zone: Unable to fetch DNSKEY set '.': operation canceled Feb 28 23:14:12 attila named[1757]: managed-keys-zone: Unable to fetch DNSKEY set '.': operation canceled Jan 30 23:14:43 attila named[23911]: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out But DNSSEC generally appears to work: Feb 27 00:14:13 attila named[1757]: managed-keys-zone: Key 20326 for zone . is now trusted (acceptance timer complete) Feb 27 23:14:12 attila named[1757]: managed-keys-zone: Key 20326 for zone . is now trusted (acceptance timer complete) Feb 28 00:14:13 attila named[1757]: managed-keys-zone: Key 20326 for zone . is now trusted (acceptance timer complete) Mar 1 00:14:12 attila named[1757]: managed-keys-zone: Key 20326 for zone . is now trusted (acceptance timer complete) options { ... dnssec-validation auto; }; -- ciao, Marco
signature.asc
Description: PGP signature