Error when using DNSSEC + DNA

Good day. I decided to use one application which is based on SMACK to test my own XMPP servers. But I have a question, why when using DNSSEC and DANE i get error:

Could not lookup me following endpoint. RemoteConnection EndpointLookup Failur e(description=‘DNS lookup exception for x-phone.one’ exception 'org.minidns.dns sec.DnssecValidation FailedException: Validation of 1 NSEC record failed: Signature is invalid

My zone is located on Cloudflare, it is signed, SRV records are also created, TLSA records with a hash of the certificate used for TLS (in the screenshots), I made the hash myself here Generate DANE TLSA Record . May be somebody help me what i need to do, what other DNS records do i need to make?

This topic was automatically closed 100 days after the last reply. New replies are no longer allowed.