[Pdns-users] PowerDNS recursor v4.0.9 gives dnssec validation bogus for this one domain, other sources says its fine

[Pekka Panula]

Hi

I have problem with this one domain where our PoweDNS recursors says its bogus and gives SERVFAIL.

When i am testing it and validating it using eg. https://dnssec-debugger.verisignlabs.com/ or http://dnsviz.net/ they say it's ok, also Google and CloudFlare gives answers ok.

I did enabled powerdns domain trace for this domain, results are here: https://gist.github.com/ppanula/00f2fe4de7d12dbb7899dc02ea505a18

I'm not sure why PowerDNS recursors validation says bogus, pls help.

Also I have tested our PowerDNS recursors for other known DNSSEC domains and it gives OK answers.

Regards,
Pekka Panula

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20181126/d92b1362/attachment.html>