knilsson/dns-zones
1
0
Fork 0
forked from critical/dns-zones
Code Pull requests Activity
dns-zones/cacert.org

191 lines
15 KiB
Org Mode
Raw Normal View History

Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
; DNS master zone file for cacert.org, under RCS control
Add IPv6 support for OCSP service. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2575 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-08-24 09:16:47 +00:00
; @(#)(CAcert) $Id: cacert.org,v 1.85 2014/08/24 08:58:27 root Exp $
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
$TTL 12h ; default TTL for zone data
@ IN SOA ns1.cacert.org. hostmaster.cacert.org. (
Add IPv6 support for OCSP service. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2575 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-08-24 09:16:47 +00:00
2014082401 ; Serial
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
4h ; refresh time
1h ; retry interval
Reduce SOA expiration timer from 1 week to 2 days, in order to comply with a recommendation made in RFC 4641bis: the SOA expiration timer should be between 1/4th and 1/3rd of the size of the signature validity period (1 week at CAcert). git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2370 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-04-17 07:10:49 +00:00
2d ; expire time
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
12h ) ; negative caching TTL
@ IN NS ns1.cacert.org.
@ IN NS ns3.cacert.org.
@ IN NS ns4.cacert.org.
@ IN NS ns5.cacert.org.
@ IN A 213.154.225.245
Also add IPv6 address for cacert.org itself. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2388 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-06-07 08:57:43 +00:00
@ IN AAAA 2001:7b8:3:9c::245
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
@ IN MX 10 email.cacert.org.
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
; TODO: Remove 'ip4:213.154.225.239' after transition
@ IN TXT "v=spf1 ip4:213.154.225.245 ip4:213.154.225.246 ip4:213.154.225.247 ip6:2001:7b8:3:9c::245 ip6:2001:7b8:3:9c::246 ip6:2001:7b8:3:9c::247 ip4:213.154.225.228 ip4:213.154.225.230 ip4:213.154.225.239 -all"
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
Add PTR records for the full infra and critical networks. Add four new infrastructure systems. Put the "real" infrastructure systems in a /80 subnet to simplify firewall rules. Correct network addresses in comments. Name changes per e-mail request from Mario Lipinski on 05.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2542 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-06 13:51:52 +00:00
arbitration IN A 213.154.225.241
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
arbitration IN SSHFP 1 1 40d9c8ebcf8d41a04b990fbc5308675d029bf4ef
arbitration IN SSHFP 2 1 7474bfb01af775511805bf15c45bb9d7591d0ce6
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
blog IN A 213.154.225.234
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
blog IN SSHFP 1 1 32ca6e4ba3275aab0d65f0f46969b11a4c4b36e8
blog IN SSHFP 2 1 aafba94ebe5c5c45cdf5ef10d0bc31bea4d9ecec
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
board IN A 213.154.225.252
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
board IN SSHFP 1 1 f5c02a860a1cc07aeefbf802540680c7476bde6e
board IN SSHFP 2 1 7b6eeb0ccdfb2e2cfe479e0aece36ff995fdd1f4
finance IN CNAME board.cacert.org.
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
bugs IN A 213.154.225.232
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
bugs IN SSHFP 1 1 4b4bc32c4e655559b43a370b77cad4983e8c24f8
bugs IN SSHFP 2 1 7916e317983d8bc85d719bb793e5e46a6b4976b2
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
cacert-fw IN A 213.154.225.229
cacert-fw IN AAAA 2001:7b8:3:9c::4
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
cacert-fw01 IN A 213.154.225.253
cacert-fw01 IN AAAA 2001:7b8:3:9c::5
cacert-fw01 IN SSHFP 2 1 6a5497e3e430425439fe849b47a6b5a5add22241
cacert-fw01 IN SSHFP 2 2 ce88f62b161af3d1f3f9c5a79a72608fed455340ff3609a51b73dc42232823c1
cacert-fw01 IN SSHFP 3 1 3e8acf86c3360992eea677a1154b6c3f20811c56
cacert-fw01 IN SSHFP 3 2 c51db0de0b5cd2096f8326e0252903cc06838c060a3689e2088c215e951ef82c
cacert-fw01 IN SSHFP 1 1 2dd0073329ec5f4ff8ecb7667f10a1bfe65ef6f4
cacert-fw01 IN SSHFP 1 2 a508ec95e20a465a231f0d6b86afc46ab1486ca7a88272d4ccfdc4b260366885
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
cacert-fw02 IN A 213.154.225.254
cacert-fw02 IN AAAA 2001:7b8:3:9c::6
cacert-fw02 IN SSHFP 2 1 6e47b51da962818bdf884eb527252019397599ac
cacert-fw02 IN SSHFP 2 2 50faa61404e7a6afb1a46b7224e7b0d609d7dad7d40e5f04d4df78b2a50e79d5
cacert-fw02 IN SSHFP 3 1 4b136c402acb26cb01a04de243f0c8412d211bbd
cacert-fw02 IN SSHFP 3 2 9c4fc8f7cb81bd45a48313114e55ab261a6379abd6fcc7fd878d05b7206210d7
cacert-fw02 IN SSHFP 1 1 3bbc40993094812db7188fc01f3dc8b89536bd69
cacert-fw02 IN SSHFP 1 2 8e0cc3bcabfed1470f82f85c9726c2f002fb8dbc8f636601a7262c7b489b7d6e
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
cats IN A 213.154.225.243
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
cats IN SSHFP 1 1 d29d4cc4662d5cb5f42c02823ca8677f05439589
cats IN SSHFP 2 1 0342eb1e7325eb90a1c0483de3d6597e36e569c8
Add two CNAME records per e-mail request from Mario Lipinski on 23.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2548 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-23 20:44:27 +00:00
coaudit IN CNAME infrastructure.cacert.org.
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
community-vpn IN A 78.47.142.76
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Update INSTALL script for boxbackup client. Drop A records for audit.cacert.org and dev.cacert.org (no longer existing) and add A record for openppm.cacert.org, per e-mail request from Benedik Heintel on June 1, 2014. Add resource records for critmon.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2560 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-06-10 13:07:29 +00:00
critmon IN A 89.106.208.38
critmon IN AAAA 2a02:3e0::38
critmon IN SSHFP 2 1 e400cedbf86df6fac72034318144d04767f6cc9c
critmon IN SSHFP 2 2 62a3e853236e900b9e2fb8bc0fb0f3c184767f8582cd6b8ba46cc8589bb73889
critmon IN SSHFP 3 1 07f6d9ab2981884d3c2a0a28327cd7fa3bdb2161
critmon IN SSHFP 3 2 1074ce6cc0f02159e5ee6b05172d475c795ea1ffeaf99d9867781f117af33b4c
critmon IN SSHFP 1 1 a3de0543f9e94a8a0c480a2b674de08f8d356da4
critmon IN SSHFP 1 2 218f4191d5944901f53c7a06a495c7ad605c913006b53a7788d2dccf76ca4d42
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Update INSTALL script for boxbackup client. Drop A records for audit.cacert.org and dev.cacert.org (no longer existing) and add A record for openppm.cacert.org, per e-mail request from Benedik Heintel on June 1, 2014. Add resource records for critmon.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2560 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-06-10 13:07:29 +00:00
crl IN A 213.154.225.236
Add IPv6 address for crl.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2574 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-08-12 07:12:40 +00:00
crl IN AAAA 2001:7b8:616:163::104
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
email IN A 213.154.225.228
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
email IN SSHFP 1 1 bf391fd72656a275524d1d25a624c6045b44ae90
email IN SSHFP 2 1 73b0d8acb492a7187016dd3c5fc1519b309a550f
community IN CNAME email.cacert.org.
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
emailout IN A 213.154.225.239
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
emailout IN SSHFP 1 1 07414db5fbfd102c6cd497228748df70406a642b
emailout IN SSHFP 2 1 ab2cf20c0064ea415e8d8a1e339e36e3ce27741d
Add A record for eu.cacert.org (which is actually cacert.eu), to show that the IPv4 address in our range is taken. Add IPv6 address, SSHFP and PTR records for hopper.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2533 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-01-26 09:27:38 +00:00
eu IN A 213.154.225.242
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add PTR records for the full infra and critical networks. Add four new infrastructure systems. Put the "real" infrastructure systems in a /80 subnet to simplify firewall rules. Correct network addresses in comments. Name changes per e-mail request from Mario Lipinski on 05.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2542 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-06 13:51:52 +00:00
git IN A 213.154.225.250
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
git IN SSHFP 1 1 23c7622d6db5822c809152c1c0fd9ea7838f76c6
git IN SSHFP 2 1 8509db491902fe10ab84c8f24b02f10c1adf0e7f
Add A record for eu.cacert.org (which is actually cacert.eu), to show that the IPv4 address in our range is taken. Add IPv6 address, SSHFP and PTR records for hopper.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2533 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-01-26 09:27:38 +00:00
hopper IN AAAA 2001:7b8:616:0162::100
hopper IN SSHFP 1 1 22f35bfddd356b119c1555c3bf4f86edd8ae8dfd
hopper IN SSHFP 2 1 026d7dda6753c2d8810466336fe758d37aed899d
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add A records for infrastructure.cacert.org and monitor.cacert.org, both pointing to 213.154.225.230, per e-mail request from Mario Lipinski on May 23, 2012. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2384 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-05-23 09:27:20 +00:00
infrastructure IN A 213.154.225.230
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
infrastructure IN SSHFP 1 1 5a82d3c150af002c05784f73250a067053aeed63
Add experimental AAAA record for ocsp-ipv6.cacert.org. Add some missing SSHFP records for infrastructure.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2559 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-05-30 15:37:28 +00:00
infrastructure IN SSHFP 1 2 63b0d74a3f1ce61865a5eb0497ef05243bc4067ec983c69ab8e62f3cb940cc82
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
infrastructure IN SSHFP 2 1 af8d8e3386eaa72997709632adf2b457e6fef0dc
Add experimental AAAA record for ocsp-ipv6.cacert.org. Add some missing SSHFP records for infrastructure.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2559 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-05-30 15:37:28 +00:00
infrastructure IN SSHFP 2 2 3a0188fc47d1fdd14d70a2fb78f51792d06ba11eae6ab16e73cb7bb8dd6a0dc8
infrastructure IN SSHFP 3 1 3e1b9ebf85b726cf831c76ecb8c17786aedf40e8
infrastructure IN SSHFP 3 2 3ae7f0035c2172977e99bfe312c7a8299650dea16a975ea13eece8fda426062a
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
irc IN A 213.154.225.233
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
irc IN SSHFP 1 1 c123f73001682277de5346923518d17cc94e298e
irc IN SSHFP 2 1 b85941c077732f78be290b8f0b44b0a5e8a0e51d
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
issue IN A 213.154.225.244
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
issue IN SSHFP 1 1 3f55e52b51d142ef9d15eeaa9ca25b3aa30c7c6e
issue IN SSHFP 2 1 fd9a5c79c4a9057b87ae8e639fd223b386af4bdb
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
lists IN A 213.154.225.231
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
lists IN SSHFP 1 1 87f75b9124326b566ed22dcf65a9740eede8f0ff
lists IN SSHFP 2 1 8d79e68e731ed72667f3d286c477245df653083b
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
cert.lists IN CNAME lists.cacert.org.
nocert.lists IN CNAME lists.cacert.org.
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
lists IN MX 10 email.cacert.org.
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
lists IN TXT "v=spf1 ip4:213.154.225.231 -all"
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
_adsp._domainkey IN TXT "dkim=unknown"
_adsp._domainkey.lists IN TXT "dkim=all"
DKIM records changed after infrastructure update. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2360 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-03-27 08:13:05 +00:00
lists._domainkey.lists IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCs2Hu5HQpT5FWj2TrqHZwFM/h0Tc35idlBviaArkdp5fRPx402ID+pMYZZW6lVM/IJlmeTqPGO73oQyl/tFlnXWj/X8p809IFqWnKWzGKJLhnxMAZW7bmzyjR8siK3It93+s5mu9r/4pwHCW3bEbdtKartd7cud84JO15cLJYA+QIDAQAB"
mail._domainkey IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOZV5h3rm18QRiNfNnwXadX8jeSC3zjpU7GFNTfZk1ifjLxrlVrSsfAvlVfFvR2/uQXegwEkiNV5bd57d989T+VVLZZbSv+OAXX4ZwihsLkf3huDszKtJTvsybqUNh97OE00THSyJCrcowFDcLv5IN2ULCOlMjTqbZxZuaNW0S6wIDAQAB"
auto._domainkey IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDNFxiNr+NHJwih3OPhGr4iwLE+BBDu72YrMSzUnU1FF50CW7iOtuhg796UZ6xrZ5VuhAix6YmmzcvF2UxYzoD/XpfZ4MzBu0ND4/nkt9/YOTyIBzwQqn9uMNve0Y76Zsel89dIJtOI+y+lfnFExV0jKwe53gzmxMVpMSSCcZPGwIDAQAB" ; ----- DKIM auto for cacert.org
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
monitor IN CNAME infrastructure.cacert.org.
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
ns IN A 213.154.225.251 ; master
ns1 IN A 213.154.225.251 ; ns.cacert.org
Upgrade nsd to new release: 3.2.17. Add PTR record for ns1.cacert.org in 2001:07b8:616.ip6 zone. Drop dummy PTR record from 2001:07b8:616.ip6 zone. Add AAAA record for ns1.cacert.org. to cacert.org zone. Configure nsd for external access over IPv6. Expand firewall script to support IPv6. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2534 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-01-27 16:27:37 +00:00
ns1 IN AAAA 2001:7b8:616:0163::102
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Update A and AAAA records for ns3 after server migration of mars.overmeer.net. Drop obsolete name 'hlin' from the cacert.org zone. Drop wwwdb and securedb entries which were added for testing new web server. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2503 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-06-01 09:16:53 +00:00
ns3 IN A 46.249.47.169 ; mars.overmeer.net
ns3 IN AAAA 2a00:1ca8:2a::31
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
ns4 IN A 213.154.224.4 ; ns-ext.nlnetlabs.nl
ns4 IN AAAA 2001:7b8:206:1::4:53
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
ns5 IN A 192.5.4.1 ; sns-pb.isc.org
ns5 IN AAAA 2001:500:2e::1
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
ocsp IN A 213.154.225.237
Add IPv6 support for OCSP service. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2575 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-08-24 09:16:47 +00:00
ocsp IN AAAA 2001:7b8:616:0163::103
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
ocsp1 IN A 213.154.225.237
Add IPv6 support for OCSP service. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2575 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-08-24 09:16:47 +00:00
ocsp1 IN AAAA 2001:7b8:616:0163::103
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Update INSTALL script for boxbackup client. Drop A records for audit.cacert.org and dev.cacert.org (no longer existing) and add A record for openppm.cacert.org, per e-mail request from Benedik Heintel on June 1, 2014. Add resource records for critmon.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2560 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-06-10 13:07:29 +00:00
openppm IN A 82.96.100.150
Add two CNAME records per e-mail request from Mario Lipinski on 23.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2548 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-23 20:44:27 +00:00
pgpkeys IN CNAME infrastructure.cacert.org.
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
secure IN A 213.154.225.246
Add IPv6 addresses for {www,secure,tverify}.cacert.org in preparation for World IPv6 Launch on 6 June 2012. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2386 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-06-04 09:59:01 +00:00
secure IN AAAA 2001:7b8:3:9c::246
Add TLSA record for www.cacert.org and secure.cacert.org. This supports effective use of the DNSSEC/TLSA Validator browser plugin available from CZ.NIC Labs. The records have been created with https://www.huque.com/bin/gen_tlsa using these parameters: certificate usage: DANE-TA (2) trust anchor selector: full cert (0) matching type: exact match (0) certificate: https://www.cacert.org/certs/root.der git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2570 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-07-22 09:45:16 +00:00
_443._tcp.secure IN TLSA 2 0 0 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
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
svn IN A 213.154.225.238
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
svn IN SSHFP 1 1 1128972fb54f927477a781718e2f9c114e9ca383
svn IN SSHFP 2 1 3a36e5df06304c481f01fc723fd88a086e82d986
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
cert.svn IN CNAME svn.cacert.org.
nocert.svn IN CNAME svn.cacert.org.
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add PTR records for the full infra and critical networks. Add four new infrastructure systems. Put the "real" infrastructure systems in a /80 subnet to simplify firewall rules. Correct network addresses in comments. Name changes per e-mail request from Mario Lipinski on 05.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2542 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-06 13:51:52 +00:00
test IN A 213.154.225.248
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
test IN SSHFP 1 1 11bcb0ab4d1fd39547426d9527b88afb8ff85209
test IN SSHFP 2 1 3414c17e5ae898b2f5db7b3ddf9e34c2f5e816ac
Add PTR records for the full infra and critical networks. Add four new infrastructure systems. Put the "real" infrastructure systems in a /80 subnet to simplify firewall rules. Correct network addresses in comments. Name changes per e-mail request from Mario Lipinski on 05.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2542 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-06 13:51:52 +00:00
secure.test IN CNAME test.cacert.org.
cats.test IN CNAME test.cacert.org.
mgr.test IN CNAME test.cacert.org.
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
www.test IN CNAME test.cacert.org.
Add PTR records for the full infra and critical networks. Add four new infrastructure systems. Put the "real" infrastructure systems in a /80 subnet to simplify firewall rules. Correct network addresses in comments. Name changes per e-mail request from Mario Lipinski on 05.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2542 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-06 13:51:52 +00:00
test2 IN A 213.154.225.249
secure.test2 IN CNAME test2.cacert.org.
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
www.test2 IN CNAME test2.cacert.org.
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
translations IN A 213.154.225.240
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
translations IN SSHFP 1 1 1128972fb54f927477a781718e2f9c114e9ca383
translations IN SSHFP 2 1 3a36e5df06304c481f01fc723fd88a086e82d986
l10n IN CNAME translations.cacert.org.
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
tverify IN A 213.154.225.247
Add IPv6 addresses for {www,secure,tverify}.cacert.org in preparation for World IPv6 Launch on 6 June 2012. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2386 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-06-04 09:59:01 +00:00
tverify IN AAAA 2001:7b8:3:9c::247
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
wiki IN A 213.154.225.235
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
wiki IN SSHFP 1 1 5c3e0d3265782405e0141c47bf0e16ec14b12e08
wiki IN SSHFP 2 1 04f7ab767579f004cc3ab2cc42a4ccaa24e51154
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
www IN A 213.154.225.245
Add IPv6 addresses for {www,secure,tverify}.cacert.org in preparation for World IPv6 Launch on 6 June 2012. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2386 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-06-04 09:59:01 +00:00
www IN AAAA 2001:7b8:3:9c::245
Add TLSA record for www.cacert.org and secure.cacert.org. This supports effective use of the DNSSEC/TLSA Validator browser plugin available from CZ.NIC Labs. The records have been created with https://www.huque.com/bin/gen_tlsa using these parameters: certificate usage: DANE-TA (2) trust anchor selector: full cert (0) matching type: exact match (0) certificate: https://www.cacert.org/certs/root.der git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2570 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-07-22 09:45:16 +00:00
_443._tcp.www IN TLSA 2 0 0 3082073d30820525a003020102020100300d06092a864886f70d010104050030793110300e060355040a1307526f6f74204341311e301c060355040b1315687474703a2f2f7777772e6361636572742e6f7267312230200603550403131943412043657274205369676e696e6720417574686f726974793121301f06092a864886f70d0109011612737570706f7274406361636572742e6f7267301e170d3033303333303132323934395a170d3333303332393132323934395a30793110300e060355040a1307526f6f74204341311e301c060355040b1315687474703a2f2f7777772e6361636572742e6f7267312230200603550403131943412043657274205369676e696e6720417574686f726974793121301f06092a864886f70d0109011612737570706f7274406361636572742e6f726730820222300d06092a864886f70d01010105000382020f003082020a0282020100ce22c0e2467dec3628075096f2a033408c4bf13b663f31e56b0236dbd67cf6f1888f4e7736054195f909f012cf46867360b76e7ee8c05864aecdb0ad45170c63fa670ae8d6d2bf3ee798c4f04cfae003bb355d6c21de9e20d9bacd66323772faf708f5c7cd58c98ee70e5eea3efe1ca1140a156c86845b64662a7aa94b5379f588a27bee2f0a612b8db27e4d56a513eceada929eac44411e5860650566f8c044bdcb94f7427e0bf76568985105f0f30591041d1b1782ecc857bbc36b7a88f1b072cc255b2091ec1602128f32e9171848d0c7052e023042b8259c056b3faa3aa7eb5348f7e8d2b60798dc1bc6347f7fc91c827a05582b085bf338a2ab175d66c998d79e108ba2d2dd749af7710c7260dfcd6f98339d9634763e247a92b00e951e6fe6a0453847aad741ed4ab712f6d71b838a0f2ed809b659d7aa04ffd2937d682edd8b4bab58ba2f8dea95a7a0c35489a5fbdb8b51229db2c3be11be2c91868b9678ad20d38a2f1a3fc6d051658721b11901657f451c87f57cd0414c4f299821fd331f750c0451fa1977dbd4141cee81c31df598b769069122dd0050cc8131ac12077b38da685be62bd47ec95fade8eb724cf301e54b20bf9aa657ca9100018ba1752137b5630d673e464f702067cec5d659db02e0f0d2cbcdba62b79041e8dd20e429bc642942c822dc789aff43ec981b09514b5a5ac271f1c4cb73a9e5a10b0203010001a38201ce308201ca301d0603551d0e0416041416b5321bd4c7f3e0e68ef3bdd2b03aeeb23918d13081a30603551d2304819b308198801416b5321bd4c7f3e0e68ef3bdd2b03aeeb23918d1a17da47b30793110300e060355040a1307526f6f74204341311e301c060355040b1315687474703a2f2f7777772e6361636572742e6f7267312230200603550403131943412043657274205369676e696e6720417574686f726974793121301f06092a864886f70d0109011612737570706f7274406361636572742e6f7267820100300f0603551d130101ff040530030101ff30320603551d1f042b30293027a025a023862168747470733a2f2f7777772e6361636572742e6f72672f7265766f6b652e63726c303006096086480186f84201040423162168747470733a2f2f7777772e6361636572742e6f72672f7265766f6b652e63726c303406096086480186f842010804271625687474703a2f2f7777772e6361636572742e6f72672f696e6465782e7068703f69643d3130305606096086480186f842010d04491647546f2067657420796f7572206f776e20636572746966696361746520666f7220465245452068656164206f76657220746f20687474703a2f2f7777772e6361636572742e6f7267300d06092a864886f70d0101040500038202010028c7ee9c8202ba5c8012ca350a1d816f896a99ccf2680f7fa7e18d58953ebdf206c3905aacb560f6994301a388709c9d629da487af67580d30363be6ad48d3cb740286713ee22b0368f1346240463b53ea28f4acfb6695538a4d5dfd3bd960d7ca79693bb16592a6c681825c9ccdeb4d018aa5df1155aa15ca1f37c082987061db6a7c96a38e2e543e4f21a990efdc82bfdce845ad4d9073083c9465b00499767fe2bcc26a15aa97043724d81e944e6d0e51bed6c48fca966df743dfe83065273b7bbb434363c443f7b2ec68cce1198e22fb98e17b5a3e01373b8b08b0a2f3954e1acb9bcd9ab1dbb270f02d4adbd8b0e36f45483312fffe3c322a54f7c4f78af08823c247fe647a71c0d11ea663b0077ea42fd3018fdc9f2bb6c608a90f934825fc12fd9f42dcf3c43ef657b0d7dd69d10677340a4bd2caa0ff1cc68cc916bec4cc323768735f08fb51f7495336050a95024cf2791a10f6d83a759cf31df1a20d7067861bb316f52fe5a4eb7986f93d0bc2730ba599ac6ffc67b8e52f0ba618248d7bd14835291840ac9360e1968650b47a59d88f210b9fcf8291c63bbf6bdc0791b9975623aab66c94c648063ce4ce4eaae4f62f09dc536f2efc74eb3a6399c2a6ac89bca7b244a00d8a10e36cf224cbfa9b9f70472ede148bd4b2200996a264f1241cdca1359c15b2d4bc552e7d06f59c0e55f45ad693da76ad25734cc543
Copy permalink