Re: [knot-dns-users] mod-synth-record + DNSSEC = SERVFAIL

On Mon Nov 28 14:53:03 2016, Daniel Salzman wrote: Thanks for your reply :) I tried it, but the documentation speaks about KASP, that is now deprecated regarding to tools.c https://gitlab.labs.nic.cz/labs/knot/blob/master/src/knot/conf/tools.c#L505 So instead, I tried with the dnssec-policy option 66 - domain: tregon-grifon.swordarmor.fr 67 file: tregon-grifon.swordarmor.fr.zone # Must exist 68 module: [mod-synth-record/tregon-grifon, mod-online-sign] 69 dnssec-signing: false 70 dnssec-policy: default but knotc does not want to reload the daemon. eddy ~ # knotc reload error: config, file '/etc/knot/knot.conf', line 68, item 'module', value 'mod-online-sign' (invalid parameter) error: failed to load configuration file '/etc/knot/knot.conf' (invalid parameter) I’m running the version 2.3.1. -- alarig