Skip to content

Semantic checks warning "incorrect type bitmap in NSEC"

The warning appears if a zone contains "* CNAME" record. Can be reproduced with the following zone signed by the Knot:

test.cz.        3600    SOA     ns.f.net. admin.f.com. 2016110901 3600 1800 2592000 3600
test.cz.        3600    NS      ns.f.net.
test.cz.        3600    NS      ns.f.it.
test.cz.        3600    NS      ns.f.cz.
test.cz.        1800    A       1.2.3.4
*.test.cz.      1800    CNAME   test.com.