[Bug 1470028] Re: NSEC3: verify failed due to bad signature (keyid=33878): RRSIG validity period has not begun

[dino99]

Starting to dig around that rrsig failure:

Looks like bind9 settings need to be blamed.

This is what i've changed inside /etc/bind/named.conf.options:
// dnssec-validation auto;  # disabled for testing
dnssec-enable no;   # added


Also suspect the deprecated ntpdate; so i've purged it.

Then i've rebooted and i've seen a much more cleaner journalctl

** Attachment added: "journal.new.log"
   https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1470028/+attachment/4422291/+files/journal.new.log

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/1470028

Title:
  NSEC3: verify failed due to bad signature (keyid=33878): RRSIG
  validity period has not begun

Status in systemd package in Ubuntu:
  New

Bug description:
  First reboot after systemd has been upgraded to 221-1ubuntu2

  Network fully broken: no time, browsers failing to open urls

  Lot of 'time syncing' issues

  ProblemType: Bug
  DistroRelease: Ubuntu 15.10
  Package: systemd 221-1ubuntu2
  ProcVersionSignature: Ubuntu 4.0.0-3.5-generic 4.0.5
  Uname: Linux 4.0.0-3-generic i686
  NonfreeKernelModules: nvidia
  ApportVersion: 2.17.3-0ubuntu4
  Architecture: i386
  CurrentDesktop: GNOME
  Date: Tue Jun 30 11:12:46 2015
  Lsusb:
   Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
   Bus 003 Device 002: ID 046d:c50e Logitech, Inc. Cordless Mouse Receiver
   Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
   Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
  MachineType: ASUSTEK COMPUTER INC P5W DH Deluxe
  ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-4.0.0-3-generic root=UUID=7b1f4a51-558f-468f-85e0-f815d2f791e1 ro
  SourcePackage: systemd
  UdevLog: Error: [Errno 2] No such file or directory: '/var/log/udev'
  UpgradeStatus: No upgrade log present (probably fresh install)
  dmi.bios.date: 07/22/2010
  dmi.bios.vendor: American Megatrends Inc.
  dmi.bios.version: 3002
  dmi.board.asset.tag: To Be Filled By O.E.M.
  dmi.board.name: P5W DH Deluxe
  dmi.board.vendor: ASUSTeK Computer INC.
  dmi.board.version: Rev 1.xx
  dmi.chassis.asset.tag: Asset-1234567890
  dmi.chassis.type: 3
  dmi.chassis.vendor: Chassis Manufacture
  dmi.chassis.version: Chassis Version
  dmi.modalias: dmi:bvnAmericanMegatrendsInc.:bvr3002:bd07/22/2010:svnASUSTEKCOMPUTERINC:pnP5WDHDeluxe:pvrSystemVersion:rvnASUSTeKComputerINC.:rnP5WDHDeluxe:rvrRev1.xx:cvnChassisManufacture:ct3:cvrChassisVersion:
  dmi.product.name: P5W DH Deluxe
  dmi.product.version: System Version
  dmi.sys.vendor: ASUSTEK COMPUTER INC

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1470028/+subscriptions