DNSSEC error resolving gpo.gov ?

[Mark Andrews]

> On 15 Mar 2023, at 02:08, Alexandra Yang <drayales at gmail.com> wrote:
> 
> Hi Group,
> 
> I wonder if anyone can shed some light on this, our nameserver(BIND 9.16.37 )keeps giving error on resolving gpo.gov and ns3.gpo.gov, here are the errors:
> 
> Mar 14 10:23:32 ipam-dns-in-1 named[3713]:   validating gpo.gov/SOA: got insecure response; parent indicates it should be secure

For some reason you are not getting signed responses.  Are you using a forwarder?

> Mar 14 10:23:32 ipam-dns-in-1 named[3713]: no valid RRSIG resolving 'ns3.gpo.gov/DS/IN': 162.140.254.200#53
> Mar 14 10:23:32 ipam-dns-in-1 named[3713]: broken trust chain resolving 'ns3.gpo.gov/A/IN': 162.140.15.100#53
> 
> While I checked the DNSSEC of this domain I can't seem to find any problem could cause above error, anyone else see issue with resolving gpo.gov ?
> 
> Thanks!!
> 
> Sandra 
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka at isc.org