After a recent update, the named service stopped working. When manually trying to restart the service it would just fail.
Running the named-checkconf command
sudo /usr/bin/named-checkconf -z /etc/named.conf
Returned the following error.
/etc/named.conf:37: option 'dnssec-enable' no longer exists
Looks like what happened is they removed the dnssec-option, but enabled it by default
The dnssec-enable option has been obsoleted and no longer has any effect. DNSSEC responses are always enabled if signatures and other DNSSEC data are present. [GL #866]
So the option is invalid now and not needed.
To fix the issue, simply open up the /etc/named.conf file and delete the line that has ‘dnssec-enable’