wildcard dnssec test fails

[Sebastian Schmidt]

Hello,

I’ve unbound setup on FreeBSD 11.1 and I can’t figure out why "drill www.wilda.nsec.0skar.cz" gives SERVFAIL. The domain is from this (http://0skar.cz/dns/en) test site where it reports three failures (2a, 2b and 4). Any help would be appreciated.

Thanks

Sebastian

$ unbound -h
Version 1.6.7
linked libs: libevent 2.1.8-stable (it uses kqueue), OpenSSL 1.0.2n 7 Dec 2017
linked modules: dns64 respip validator iterator
DNSCrypt feature available
$ uname -a
FreeBSD dns.seby.io 11.1-RELEASE-p4 FreeBSD 11.1-RELEASE-p4 #0: Tue Nov 14 06:12:40 UTC 2017 root at amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20171214/62185786/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: unbound.conf
Type: application/octet-stream
Size: 6509 bytes
Desc: not available
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20171214/62185786/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: unbound.log
Type: application/octet-stream
Size: 10137 bytes
Desc: not available
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20171214/62185786/attachment-0001.obj>