Hi Bastien,
could you please detail on how did the DDNSes roughly look like? For
example, if they contained adding/removing NSEC3 records or their RRSIGs?
Thanks,
Libor
Dne 14.10.19 v 12:23 Daniel Salzman napsal(a):
Ok, so there was some inconsistency in the zone.
Interesting!
If you found anything which could explain why that happened, please let me know.
Thanks,
Daniel
On 10/14/19 12:12 PM, Bastien Durel wrote:
> Le lundi 14 octobre 2019 à 11:35 +0200, Daniel Salzman a écrit :
>> Hi Bastien,
>>
>> It doesn't look like a config issue. Could you try to re-sign the
>> zone `knotc zone-sign durel.org` if it helps?
>> Could you show me contents of the DDNS message?
>>
> Hello,
>
> Re-signing worked, thanks !
>
> (The messages were ACME-challenge insertions)
>