"broken trust chain" for non-existing AAAA records

lst_hoe02 at kwsoft.de lst_hoe02 at kwsoft.de
Wed Dec 1 13:11:32 UTC 2010


Zitat von Mark Andrews <marka at isc.org>:

>
> Is this still with BIND 9.7.0-P1 or something more recent?  If it
> is still BIND 9.7.0-P1 then please upgrade.  There really is no
> point debugging validation failures in BIND 9.7.0-P1 anymore as the
> validator has had really extensive changes since then.

Okay, compiled and installed Bind 9.7.2-P2 from source. We still have  
many "broken trust chain" in the logs, at first glance i would say  
even more. Is it possible by any means that this error is thrown  
because of timeout at some stage of processing?
Many of the "broken trust chain" errors resolve fine some seconds  
later and this would explain why most of the error are for AAAA  
queries as these are much slower on average. Can someone with  
code-insight confirm?

Regards

Andreas


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6046 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20101201/b110d3d0/attachment.bin>


More information about the bind-users mailing list