Root Zone KSK Rollover

[GarySargent]

Hi,

I have an RT-N66U running Merlin 380.70 (which I know is now out of support). However!...

Recently a root KSK rollover has occurred which seems a very rare thing. See https://www.icann.org/resources/pages/ksk-rollover

This has caused DNS lookups for some (a small number) of domains to now fail when DNSSEC is enabled. If I disable DNSSEC then the domains will resolve fine. If I enable DNSSEC then they stop resolving again.

Example domains that fail are:
www.nominet.uk
www.gov.uk

I have tried rebooting, but it seems the Root KSK rollover changes have not been picked up by my box (I think, though I admit I'm somewhat out of my depth here).

Any clues on how I can get these domains working again with DNSSEC enabled?

Thanks,

Gary.

 

[RMerlin]

https://www.snbforums.com/threads/380-legacy-dnssec-no-longer-compatible-with-380-70.49339/

 

[GarySargent]

Not sure how I failed to find that thread (other than "dns" being too short for search) but many thanks Merlin! The fix documented there worked a treat! Feel free to delete this thread.