[Unbound-users] DNSSEC validation failure of .nl TLD

[Leen Besselink]

On Sun, Oct 28, 2012 at 10:29:18PM +0100, Stephane Bortzmeyer wrote:
> On Sun, Oct 28, 2012 at 10:13:30PM +0100,
>  Leen Besselink <leen at consolejunkie.net> wrote 
>  a message of 20 lines which said:
> 
> > Today for me the .nl top level domain stopped to be valid.
> 
> .nl added a new ZSK, 20331, around 2000 UTC. Could it be related?
> 

Maybe, the error was:

verify rrset <sidn.nl. DS IN>
DS rrset in DS response did not verify
validator operate: query <www.sidn.nl. A IN>
Could not establish a chain of trust to keys for <sidn.nl. DNSKEY IN>

But I'm starting to think I should have logged some for .nl itself to be really useful.