About DNSSec-Validation=Yes and bind.keys

[Onur GURSOY]

Hello Everyone,
I have some trouble about bin9 and dnssec
When i set dnssec-validation to auto.
My dns server is talking with google dns server (8.8.8.8 and 8.8.4.4)
and
when i set to dnssec-validation to yes
it couldn't talk with google dns server.
i have realized, there is no pre defined bind.keys.
I donwload it from this
https://downloads.isc.org/isc/bind9/keys/9.11/bind.keys.v9_11
and i added manually but result is the same
They didn't talk with google dns server.
So
where is the difference auto and yes.
and why default bind.keys file didn't come by default
Where is the problem.
If you want i can provide wireshark output.

Many Many Thanks,
With My Best Regards,

-- 
Onur GÜRSOY
R&D Engineer in Embedded Systems
Master Student at Gebze Institute Of Technology
Department Of Electronic Engineering
GSM : 0(545) 764 7653
e-mail: onurgursoygyte at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20201112/cf508f38/attachment.htm>