DNSSEC causes problem

[mibere]

Sounds like "the clock/time on the Pi is incorrect".

There are several posts, for example

Allow NTP sync before enforcing DNSSEC time check

Raspberry Pis do not have real time clocks, so if they're off for enough time or otherwise lose time, every DNSSEC validation comes back as bogus. This makes it impossible for the system to sync with an NTP server, since the required DNS responses get rejected as bogus; after this everything stops working. Please add some sort of detection logic to detect whether time is correct, or simply don't enforce the time check until the system has had a chance to sync with an NTP server. dnsmasq can b…