bad cache hit

[Bryton]

On 11/25/2011 03:19 PM, Tony Finch wrote:
> Bryton <bryton at tznic.or.tz> wrote:
>> I wonder if anyone has ever got the error
> In my logs I have some of this:
>
> 25-Nov-2011 11:23:00.332 dnssec: info: validating @0xabe00470: uofk.edu MX: bad cache hit (uofk.edu/DNSKEY)
>
> Which is fairly nicely explained by this:
>
> http://dnsviz.net/d/uofk.edu/dnssec/
>
> Tony.

I understand your scenario, you have DS in edu but no matching DNSKEY in
uofk.edu so I think there is a broken trust anchor.

Now in my case sometimes I get SERVFAIL and sometimes I get the answers
i want showing that it actually works.

-- 
[ Bryton | Systems Engineer | .tzNIC | www.tznic.or.tz ]