[dns-operations] org/DNSKEY RR not found
marka at isc.org
Mon Aug 10 00:06:43 UTC 2015
In message <CAGfsgR1JwEUkXHxXRAghi19MGACRckeV1AqEn0ZD2Ncc0DXr9A at mail.gmail.com>, Jim Popovitch writes:
> I've been learning/playing around with DNSSEC and I've run across this
> error using dnsviz.net. I'm assuming that there's nothing I can do
> about it, but also wondering if this is really a major or minor thing
> (dnsviz codes it "red").
> org/DNSKEY (alg 7, id 12023): The DNSKEY RR was not found in the
> DNSKEY RRset returned by one or more servers. (22.214.171.124,
> org/DNSKEY (alg 7, id 13104): The DNSKEY RR was not found in the
> DNSKEY RRset returned by one or more servers. (126.96.36.199,
> 188.8.131.52, 184.108.40.206, 220.127.116.11, 18.104.22.168, 2001:500:b::1,
> 2001:500:c::1, 2001:500:e::1, 2001:500:f::1, 2001:500:48::1)
> -Jim P.
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> dns-jobs mailing list
It's just a key rollover. It's only a error if there are still
records that are in caches which are still signed by those keys
and don't have other valid signatures.
Inconsistent RRset != error unless it is a persistant condition.
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the dns-operations