[Freeipa-users] dns suddenly not happy with DNSSEC

[lejeczek]

Hi guys.

That is on first master which was happy for short while and 
then suddenly:

...
29-May-2023 12:38:23.597 info: client @0x7f6484005538 
127.0.0.1#43235 (onet.pl): query failed (broken trust chain) 
for onet.pl/IN/A at ../../../lib/ns/query.c:7355
29-May-2023 12:39:08.518 info: client @0x7f64b0080088 
127.0.0.1#48441 (onet.pl): query failed (broken trust chain) 
for onet.pl/IN/A at ../../../lib/ns/query.c:7355

and that is for any & every query.
With given forwards or no forwarders.
Time is in sync, network works, everything else seem good 
too... and the second master/replica does not complain.
What might the issue (beside the obvious)?
many thanks, L.