"broken trust chain" for non-existing AAAA records
lst_hoe02 at kwsoft.de
lst_hoe02 at kwsoft.de
Wed Dec 1 13:11:32 UTC 2010
Zitat von Mark Andrews <marka at isc.org>:
>
> Is this still with BIND 9.7.0-P1 or something more recent? If it
> is still BIND 9.7.0-P1 then please upgrade. There really is no
> point debugging validation failures in BIND 9.7.0-P1 anymore as the
> validator has had really extensive changes since then.
Okay, compiled and installed Bind 9.7.2-P2 from source. We still have
many "broken trust chain" in the logs, at first glance i would say
even more. Is it possible by any means that this error is thrown
because of timeout at some stage of processing?
Many of the "broken trust chain" errors resolve fine some seconds
later and this would explain why most of the error are for AAAA
queries as these are much slower on average. Can someone with
code-insight confirm?
Regards
Andreas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6046 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20101201/b110d3d0/attachment.bin>
More information about the bind-users
mailing list