knilsson/dns-zones
1
0
Fork 0
forked from critical/dns-zones
Code Pull requests Activity
dns-zones/cacert.org

256 lines
19 KiB
Org Mode
Raw Normal View History

Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
; DNS master zone file for cacert.org, under RCS control
Upgrade OpenDNSSEC software to version 2.0.0-1. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2658 14b1bab8-4ef6-0310-b690-991c95c89dfd
2016-07-16 15:35:41 +00:00
; @(#)(CAcert) $Id: cacert.org,v 1.102 2016/07/16 14:42:49 root Exp $
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
$TTL 12h ; default TTL for zone data
@ IN SOA ns1.cacert.org. hostmaster.cacert.org. (
Upgrade OpenDNSSEC software to version 2.0.0-1. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2658 14b1bab8-4ef6-0310-b690-991c95c89dfd
2016-07-16 15:35:41 +00:00
2016071601 ; Serial
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
4h ; refresh time
1h ; retry interval
Reduce SOA expiration timer from 1 week to 2 days, in order to comply with a recommendation made in RFC 4641bis: the SOA expiration timer should be between 1/4th and 1/3rd of the size of the signature validity period (1 week at CAcert). git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2370 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-04-17 07:10:49 +00:00
2d ; expire time
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
12h ) ; negative caching TTL
@ IN NS ns1.cacert.org.
@ IN NS ns3.cacert.org.
@ IN NS ns4.cacert.org.
@ IN NS ns5.cacert.org.
@ IN A 213.154.225.245
Also add IPv6 address for cacert.org itself. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2388 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-06-07 08:57:43 +00:00
@ IN AAAA 2001:7b8:3:9c::245
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
@ IN MX 10 email.cacert.org.
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
; TODO: Remove 'ip4:213.154.225.239' after transition
@ IN TXT "v=spf1 ip4:213.154.225.245 ip4:213.154.225.246 ip4:213.154.225.247 ip6:2001:7b8:3:9c::245 ip6:2001:7b8:3:9c::246 ip6:2001:7b8:3:9c::247 ip4:213.154.225.228 ip4:213.154.225.230 ip4:213.154.225.239 -all"
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
Add PTR records for the full infra and critical networks. Add four new infrastructure systems. Put the "real" infrastructure systems in a /80 subnet to simplify firewall rules. Correct network addresses in comments. Name changes per e-mail request from Mario Lipinski on 05.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2542 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-06 13:51:52 +00:00
arbitration IN A 213.154.225.241
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
arbitration IN SSHFP 1 1 40d9c8ebcf8d41a04b990fbc5308675d029bf4ef
arbitration IN SSHFP 2 1 7474bfb01af775511805bf15c45bb9d7591d0ce6
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
blog IN A 213.154.225.234
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
blog IN SSHFP 1 1 32ca6e4ba3275aab0d65f0f46969b11a4c4b36e8
blog IN SSHFP 2 1 aafba94ebe5c5c45cdf5ef10d0bc31bea4d9ecec
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
board IN A 213.154.225.252
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
board IN SSHFP 1 1 f5c02a860a1cc07aeefbf802540680c7476bde6e
board IN SSHFP 2 1 7b6eeb0ccdfb2e2cfe479e0aece36ff995fdd1f4
finance IN CNAME board.cacert.org.
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
bugs IN A 213.154.225.232
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
bugs IN SSHFP 1 1 4b4bc32c4e655559b43a370b77cad4983e8c24f8
bugs IN SSHFP 2 1 7916e317983d8bc85d719bb793e5e46a6b4976b2
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
cacert-fw IN A 213.154.225.229
cacert-fw IN AAAA 2001:7b8:3:9c::4
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
cacert-fw01 IN A 213.154.225.253
cacert-fw01 IN AAAA 2001:7b8:3:9c::5
Update SSHFP records for cacert-fw01 and cacert-fw02 after upgrading firewall OS to OpenBSD 5.7. Add RRs with fingerprints for CAcert root certificates (generated by cacert-fingerprints-to-dns). Clean up fingerprints by dropping internal colons. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2601 14b1bab8-4ef6-0310-b690-991c95c89dfd
2015-05-29 07:53:00 +00:00
cacert-fw01 IN SSHFP 1 1 43a7c6105193d121a8b27f5cd1c59aae32a35c5a
cacert-fw01 IN SSHFP 1 2 dfd30a1ef7ad3f97be62d278bee5deae0e599d3396cf3fec7be89c842c8d4e1e
cacert-fw01 IN SSHFP 2 1 14361f8c63524d5b31d9fde535627db77cf74f6c
cacert-fw01 IN SSHFP 2 2 4ee02374bb0144aa6d51cded9682ece865cf856f7df1ae63de812f68aea3e8d9
cacert-fw01 IN SSHFP 3 1 c45e669fcd8f951e78e74340f75dbd6ae611ac4c
cacert-fw01 IN SSHFP 3 2 dc9d37b1cd325175437e5836ed1691d594f5af253a34e3b736b4522274c28f92
cacert-fw01 IN SSHFP 4 1 119d5aa477a8a8dc79334fc84a64d1f3ea3a3319
cacert-fw01 IN SSHFP 4 2 60d46e0d94070064e48a0d9de5a30778f00fd9c2c23dedb5a674c5ec873e3cdc
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
cacert-fw02 IN A 213.154.225.254
cacert-fw02 IN AAAA 2001:7b8:3:9c::6
Update SSHFP records for cacert-fw01 and cacert-fw02 after upgrading firewall OS to OpenBSD 5.7. Add RRs with fingerprints for CAcert root certificates (generated by cacert-fingerprints-to-dns). Clean up fingerprints by dropping internal colons. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2601 14b1bab8-4ef6-0310-b690-991c95c89dfd
2015-05-29 07:53:00 +00:00
cacert-fw02 IN SSHFP 1 1 43a7c6105193d121a8b27f5cd1c59aae32a35c5a
cacert-fw02 IN SSHFP 1 2 dfd30a1ef7ad3f97be62d278bee5deae0e599d3396cf3fec7be89c842c8d4e1e
cacert-fw02 IN SSHFP 2 1 14361f8c63524d5b31d9fde535627db77cf74f6c
cacert-fw02 IN SSHFP 2 2 4ee02374bb0144aa6d51cded9682ece865cf856f7df1ae63de812f68aea3e8d9
cacert-fw02 IN SSHFP 3 1 c45e669fcd8f951e78e74340f75dbd6ae611ac4c
cacert-fw02 IN SSHFP 3 2 dc9d37b1cd325175437e5836ed1691d594f5af253a34e3b736b4522274c28f92
cacert-fw02 IN SSHFP 4 1 119d5aa477a8a8dc79334fc84a64d1f3ea3a3319
cacert-fw02 IN SSHFP 4 2 60d46e0d94070064e48a0d9de5a30778f00fd9c2c23dedb5a674c5ec873e3cdc
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
cats IN A 213.154.225.243
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
cats IN SSHFP 1 1 d29d4cc4662d5cb5f42c02823ca8677f05439589
Build and install the ldns example tools, so we can use the ldns-dane tool. Update SSHFP records for cats.cacert.org. Add RRs for policy.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2630 14b1bab8-4ef6-0310-b690-991c95c89dfd
2015-12-16 16:51:27 +00:00
cats IN SSHFP 1 2 605af57ce0f1ecf8eeac5c71901f1434bf65c06fc0796b932d0f10f21ddf65fe
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
cats IN SSHFP 2 1 0342eb1e7325eb90a1c0483de3d6597e36e569c8
Build and install the ldns example tools, so we can use the ldns-dane tool. Update SSHFP records for cats.cacert.org. Add RRs for policy.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2630 14b1bab8-4ef6-0310-b690-991c95c89dfd
2015-12-16 16:51:27 +00:00
cats IN SSHFP 2 2 0835241a5b1905097c332b176faec92e05c690169ba125184f3fe2c9612d9718
cats IN SSHFP 3 1 cc7f9edc6f2b9ce4a3f3953ff97c951572ba0f8c
cats IN SSHFP 3 2 1f54953c96de0e93cd19e66ca25085d6773ceefd3c376be2e77c1a337ccd008d
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add two CNAME records per e-mail request from Mario Lipinski on 23.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2548 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-23 20:44:27 +00:00
coaudit IN CNAME infrastructure.cacert.org.
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
community-vpn IN A 78.47.142.76
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Update INSTALL script for boxbackup client. Drop A records for audit.cacert.org and dev.cacert.org (no longer existing) and add A record for openppm.cacert.org, per e-mail request from Benedik Heintel on June 1, 2014. Add resource records for critmon.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2560 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-06-10 13:07:29 +00:00
critmon IN A 89.106.208.38
critmon IN AAAA 2a02:3e0::38
critmon IN SSHFP 2 1 e400cedbf86df6fac72034318144d04767f6cc9c
critmon IN SSHFP 2 2 62a3e853236e900b9e2fb8bc0fb0f3c184767f8582cd6b8ba46cc8589bb73889
critmon IN SSHFP 3 1 07f6d9ab2981884d3c2a0a28327cd7fa3bdb2161
critmon IN SSHFP 3 2 1074ce6cc0f02159e5ee6b05172d475c795ea1ffeaf99d9867781f117af33b4c
critmon IN SSHFP 1 1 a3de0543f9e94a8a0c480a2b674de08f8d356da4
critmon IN SSHFP 1 2 218f4191d5944901f53c7a06a495c7ad605c913006b53a7788d2dccf76ca4d42
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Update INSTALL script for boxbackup client. Drop A records for audit.cacert.org and dev.cacert.org (no longer existing) and add A record for openppm.cacert.org, per e-mail request from Benedik Heintel on June 1, 2014. Add resource records for critmon.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2560 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-06-10 13:07:29 +00:00
crl IN A 213.154.225.236
Add IPv6 address for crl.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2574 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-08-12 07:12:40 +00:00
crl IN AAAA 2001:7b8:616:163::104
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
email IN A 213.154.225.228
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
email IN SSHFP 1 1 bf391fd72656a275524d1d25a624c6045b44ae90
email IN SSHFP 2 1 73b0d8acb492a7187016dd3c5fc1519b309a550f
community IN CNAME email.cacert.org.
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
emailout IN A 213.154.225.239
Update SSHFP records for emailout per e-mail from Jan Dittberner on 02.02.2015. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2597 14b1bab8-4ef6-0310-b690-991c95c89dfd
2015-02-03 08:15:36 +00:00
emailout IN SSHFP 1 1 1ba1ab632911e8a68a69521130120695086d858c
emailout IN SSHFP 1 2 6e50d5b2034006b69eb7ba19d3f3fd2c48015bea2bb3d5e2a0f8cf25ff030055
emailout IN SSHFP 2 1 0e8888352604dbd1cc4d201bc1e985d80b9cf752
emailout IN SSHFP 2 2 a7402f014b47b805663c904dabbc9590db7d8d0f350cea6d9f63e12bc27bac0c
emailout IN SSHFP 3 1 527004f2091d2cef2c28b5f8241fc0e76307b2ba
emailout IN SSHFP 3 2 9094dcf8860523a83542ec4cc46fbcfed396f5525bc202cfecf42d1a7044136d
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add A record for eu.cacert.org (which is actually cacert.eu), to show that the IPv4 address in our range is taken. Add IPv6 address, SSHFP and PTR records for hopper.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2533 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-01-26 09:27:38 +00:00
eu IN A 213.154.225.242
Update SSHFP records for cacert-fw01 and cacert-fw02 after upgrading firewall OS to OpenBSD 5.6. Update IPv4 address for openppm.cacert.org per e-mail from Benedikt Heintel 08.01.2015. Add A and SSHFP records for web, funding, webstatic per e-mail request from Jan Dittberner. See also https://bugs.cacert.org/view.php?id=1363 for details about the shared IP setup. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2592 14b1bab8-4ef6-0310-b690-991c95c89dfd
2015-01-28 14:52:53 +00:00
web IN A 213.154.225.242
web IN SSHFP 1 1 85f5338d90930200cbbfce1aab56988b4c8f0f22
web IN SSHFP 1 2 d39cbd51588f322f7b4384274cf0166f25b10f54a6cd153ed7251ff30b5b516e
web IN SSHFP 2 1 906f0c17bb0e233b0f52ce33cfe64038d45ac4f2
web IN SSHFP 2 2 dbf6221a8a403b4c9f537b676305fdae07ff45a1c18d88b1141031402af0250f
web IN SSHFP 3 1 7b62d8d1e093c28cda0f3d2444846128b41c10de
web IN SSHFP 3 2 0917da677c9e6caf1818c1151ec2a813623a2b2955a1a850f260d64ef041400b
funding IN A 213.154.225.242
webstatic IN A 213.154.225.242
webstatic IN SSHFP 1 1 30897a7a984d8350495946d54c6374e9331237ef
webstatic IN SSHFP 1 2 32bb10c5cf48532d077066e012230058ddf3cce731c561f228e310eb7a546e3f
webstatic IN SSHFP 2 1 868361a51ec60607bfd964d0f8f3e4ee5e803fc6
webstatic IN SSHFP 2 2 a173bb85ec19f63ecb273bca130ef63501fe1b89fd55b62997195e6816cab547
webstatic IN SSHFP 3 1 7fc847cec20b9d65296d4a0edafba22a14ee9dc4
webstatic IN SSHFP 3 2 68879264e0ed5d0914797bf2292436fb32cca24683dcf5d927a53589c1bfb6d7
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add PTR records for the full infra and critical networks. Add four new infrastructure systems. Put the "real" infrastructure systems in a /80 subnet to simplify firewall rules. Correct network addresses in comments. Name changes per e-mail request from Mario Lipinski on 05.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2542 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-06 13:51:52 +00:00
git IN A 213.154.225.250
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
git IN SSHFP 1 1 23c7622d6db5822c809152c1c0fd9ea7838f76c6
Add additional SSHFP records for git.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2656 14b1bab8-4ef6-0310-b690-991c95c89dfd
2016-07-15 10:34:27 +00:00
git IN SSHFP 1 2 dabbe1766c7933071c4e6942a1dfc72c26d9d867d8dee84beda210c8ef9ea2c5
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
git IN SSHFP 2 1 8509db491902fe10ab84c8f24b02f10c1adf0e7f
Add additional SSHFP records for git.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2656 14b1bab8-4ef6-0310-b690-991c95c89dfd
2016-07-15 10:34:27 +00:00
git IN SSHFP 2 2 00c20c26b6b9a026bbb11b5c45cbec5d3ab44a039dc0f097cad88374d3567d01
git IN SSHFP 3 1 60de5788bd83abc7f315b667f634bda5da8502ed
git IN SSHFP 3 2 132bd98483440124f6b8117148b02a66645477f53c18f974e4decb32a7495644
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add A record for hopper. Add additional SSHFP records for hopper. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2580 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-09-02 13:32:42 +00:00
hopper IN A 213.136.19.144
Add A record for eu.cacert.org (which is actually cacert.eu), to show that the IPv4 address in our range is taken. Add IPv6 address, SSHFP and PTR records for hopper.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2533 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-01-26 09:27:38 +00:00
hopper IN AAAA 2001:7b8:616:0162::100
hopper IN SSHFP 1 1 22f35bfddd356b119c1555c3bf4f86edd8ae8dfd
Add A record for hopper. Add additional SSHFP records for hopper. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2580 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-09-02 13:32:42 +00:00
hopper IN SSHFP 1 2 042deedfa930b876160c2b971a6b7ffc131fea5b77107ec1d501baceb7794729
Add A record for eu.cacert.org (which is actually cacert.eu), to show that the IPv4 address in our range is taken. Add IPv6 address, SSHFP and PTR records for hopper.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2533 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-01-26 09:27:38 +00:00
hopper IN SSHFP 2 1 026d7dda6753c2d8810466336fe758d37aed899d
Add A record for hopper. Add additional SSHFP records for hopper. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2580 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-09-02 13:32:42 +00:00
hopper IN SSHFP 2 2 cfcc8e6cf5d7b9d8c634f464db923b334d40a71dc6671f9ae493661d4b4265cd
hopper IN SSHFP 3 1 af94587277ed2d6b907b2fe99ddb3dd788003afa
hopper IN SSHFP 3 2 5294698d5aedaf58a896e836e8c7cf49c1d6e7ba4e888ff45ee905c33aa52a4a
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add CNAME for infradocs.cacert,org pointing to webstatic.cacert.org, per e-mail request from Jan Dittberner on 05.05.2016. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2653 14b1bab8-4ef6-0310-b690-991c95c89dfd
2016-05-06 09:48:00 +00:00
infradocs IN CNAME webstatic.cacert.org.
Add A records for infrastructure.cacert.org and monitor.cacert.org, both pointing to 213.154.225.230, per e-mail request from Mario Lipinski on May 23, 2012. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2384 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-05-23 09:27:20 +00:00
infrastructure IN A 213.154.225.230
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
infrastructure IN SSHFP 1 1 5a82d3c150af002c05784f73250a067053aeed63
Add experimental AAAA record for ocsp-ipv6.cacert.org. Add some missing SSHFP records for infrastructure.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2559 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-05-30 15:37:28 +00:00
infrastructure IN SSHFP 1 2 63b0d74a3f1ce61865a5eb0497ef05243bc4067ec983c69ab8e62f3cb940cc82
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
infrastructure IN SSHFP 2 1 af8d8e3386eaa72997709632adf2b457e6fef0dc
Add experimental AAAA record for ocsp-ipv6.cacert.org. Add some missing SSHFP records for infrastructure.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2559 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-05-30 15:37:28 +00:00
infrastructure IN SSHFP 2 2 3a0188fc47d1fdd14d70a2fb78f51792d06ba11eae6ab16e73cb7bb8dd6a0dc8
infrastructure IN SSHFP 3 1 3e1b9ebf85b726cf831c76ecb8c17786aedf40e8
infrastructure IN SSHFP 3 2 3ae7f0035c2172977e99bfe312c7a8299650dea16a975ea13eece8fda426062a
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
irc IN A 213.154.225.233
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
irc IN SSHFP 1 1 c123f73001682277de5346923518d17cc94e298e
irc IN SSHFP 2 1 b85941c077732f78be290b8f0b44b0a5e8a0e51d
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
issue IN A 213.154.225.244
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
issue IN SSHFP 1 1 3f55e52b51d142ef9d15eeaa9ca25b3aa30c7c6e
issue IN SSHFP 2 1 fd9a5c79c4a9057b87ae8e639fd223b386af4bdb
Add A and SSHFP records for jenkins.cacert.org per e-mail request from Jan Dittberner. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2598 14b1bab8-4ef6-0310-b690-991c95c89dfd
2015-02-05 08:05:22 +00:00
jenkins IN A 213.154.225.242
jenkins IN SSHFP 1 1 2caebe197c0f1c25404890adfedabb371fb05650
jenkins IN SSHFP 1 2 6110a42530a5197ab1180417ee32b2eb581813ca773498177481b11d969bb529
jenkins IN SSHFP 2 1 4ce4eef515bdee033d68b92419f71679880b2fd5
jenkins IN SSHFP 2 2 7e76d01b8dc48178535f3f6164c07ef35d3436f352db8c62ffacd5b8e3c106a7
jenkins IN SSHFP 3 1 1ce55a42b27bf42a78e281440f146da17255a97d
jenkins IN SSHFP 3 2 20763231fecf9518c2cecab05ac76e4483f563c0853f8b8a53e469316da75381
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
lists IN A 213.154.225.231
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
lists IN SSHFP 1 1 87f75b9124326b566ed22dcf65a9740eede8f0ff
lists IN SSHFP 2 1 8d79e68e731ed72667f3d286c477245df653083b
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
cert.lists IN CNAME lists.cacert.org.
nocert.lists IN CNAME lists.cacert.org.
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
lists IN MX 10 email.cacert.org.
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
lists IN TXT "v=spf1 ip4:213.154.225.231 -all"
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
_adsp._domainkey IN TXT "dkim=unknown"
_adsp._domainkey.lists IN TXT "dkim=all"
DKIM records changed after infrastructure update. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2360 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-03-27 08:13:05 +00:00
lists._domainkey.lists IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCs2Hu5HQpT5FWj2TrqHZwFM/h0Tc35idlBviaArkdp5fRPx402ID+pMYZZW6lVM/IJlmeTqPGO73oQyl/tFlnXWj/X8p809IFqWnKWzGKJLhnxMAZW7bmzyjR8siK3It93+s5mu9r/4pwHCW3bEbdtKartd7cud84JO15cLJYA+QIDAQAB"
mail._domainkey IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOZV5h3rm18QRiNfNnwXadX8jeSC3zjpU7GFNTfZk1ifjLxrlVrSsfAvlVfFvR2/uQXegwEkiNV5bd57d989T+VVLZZbSv+OAXX4ZwihsLkf3huDszKtJTvsybqUNh97OE00THSyJCrcowFDcLv5IN2ULCOlMjTqbZxZuaNW0S6wIDAQAB"
auto._domainkey IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDNFxiNr+NHJwih3OPhGr4iwLE+BBDu72YrMSzUnU1FF50CW7iOtuhg796UZ6xrZ5VuhAix6YmmzcvF2UxYzoD/XpfZ4MzBu0ND4/nkt9/YOTyIBzwQqn9uMNve0Y76Zsel89dIJtOI+y+lfnFExV0jKwe53gzmxMVpMSSCcZPGwIDAQAB" ; ----- DKIM auto for cacert.org
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Zone file updates. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2528 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-12-17 16:42:44 +00:00
monitor IN CNAME infrastructure.cacert.org.
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
ns IN A 213.154.225.251 ; master
ns1 IN A 213.154.225.251 ; ns.cacert.org
Upgrade nsd to new release: 3.2.17. Add PTR record for ns1.cacert.org in 2001:07b8:616.ip6 zone. Drop dummy PTR record from 2001:07b8:616.ip6 zone. Add AAAA record for ns1.cacert.org. to cacert.org zone. Configure nsd for external access over IPv6. Expand firewall script to support IPv6. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2534 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-01-27 16:27:37 +00:00
ns1 IN AAAA 2001:7b8:616:0163::102
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Update A and AAAA records for ns3 after server migration of mars.overmeer.net. Drop obsolete name 'hlin' from the cacert.org zone. Drop wwwdb and securedb entries which were added for testing new web server. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2503 14b1bab8-4ef6-0310-b690-991c95c89dfd
2013-06-01 09:16:53 +00:00
ns3 IN A 46.249.47.169 ; mars.overmeer.net
ODS-NOTES: Update instructions for key rollover. keylist: Status on 20151026 after KSK key rollover, submitting new DS hashes and issuing ods-ksmutil key ds-seen for the ready KSK's. The new KSK goes from ready to active, the old KSK from active to retire. Note that cacert.community still needs to be done. cacert.*: Disable IPv6 address for ns3, because this host is currently lacking IPv6 connectivity. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2619 14b1bab8-4ef6-0310-b690-991c95c89dfd
2015-10-31 14:55:19 +00:00
;; ns3 IN AAAA 2a00:1ca8:2a::31
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Update IPv4 and IPv6 addresses for ns4.cacert.org aka ns-ext.nlnetlabs.nl. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2582 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-09-19 09:02:26 +00:00
ns4 IN A 185.49.140.62 ; ns-ext.nlnetlabs.nl
ns4 IN AAAA 2a04:b900::8:0:0:62
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
ns5 IN A 192.5.4.1 ; sns-pb.isc.org
ns5 IN AAAA 2001:500:2e::1
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
ocsp IN A 213.154.225.237
Add IPv6 support for OCSP service. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2575 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-08-24 09:16:47 +00:00
ocsp IN AAAA 2001:7b8:616:0163::103
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
ocsp1 IN A 213.154.225.237
Add IPv6 support for OCSP service. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2575 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-08-24 09:16:47 +00:00
ocsp1 IN AAAA 2001:7b8:616:0163::103
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Update SSHFP records for cacert-fw01 and cacert-fw02 after upgrading firewall OS to OpenBSD 5.6. Update IPv4 address for openppm.cacert.org per e-mail from Benedikt Heintel 08.01.2015. Add A and SSHFP records for web, funding, webstatic per e-mail request from Jan Dittberner. See also https://bugs.cacert.org/view.php?id=1363 for details about the shared IP setup. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2592 14b1bab8-4ef6-0310-b690-991c95c89dfd
2015-01-28 14:52:53 +00:00
openppm IN A 194.24.160.131
Update INSTALL script for boxbackup client. Drop A records for audit.cacert.org and dev.cacert.org (no longer existing) and add A record for openppm.cacert.org, per e-mail request from Benedik Heintel on June 1, 2014. Add resource records for critmon.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2560 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-06-10 13:07:29 +00:00
Add two CNAME records per e-mail request from Mario Lipinski on 23.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2548 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-23 20:44:27 +00:00
pgpkeys IN CNAME infrastructure.cacert.org.
Build and install the ldns example tools, so we can use the ldns-dane tool. Update SSHFP records for cats.cacert.org. Add RRs for policy.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2630 14b1bab8-4ef6-0310-b690-991c95c89dfd
2015-12-16 16:51:27 +00:00
policy IN CNAME webstatic.cacert.org.
www.policy IN CNAME webstatic.cacert.org.
preview.policy IN CNAME webstatic.cacert.org.
_443._tcp.policy IN TLSA 3 1 1 b782b34ae598c658604f23c0915c1affeffcaf932c35d3edb7999410d7515405
_443._tcp.www.policy IN TLSA 3 1 1 b782b34ae598c658604f23c0915c1affeffcaf932c35d3edb7999410d7515405
_443._tcp.preview.policy IN TLSA 3 1 1 b782b34ae598c658604f23c0915c1affeffcaf932c35d3edb7999410d7515405
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
secure IN A 213.154.225.246
Add IPv6 addresses for {www,secure,tverify}.cacert.org in preparation for World IPv6 Launch on 6 June 2012. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2386 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-06-04 09:59:01 +00:00
secure IN AAAA 2001:7b8:3:9c::246
Add TLSA record for www.cacert.org and secure.cacert.org. This supports effective use of the DNSSEC/TLSA Validator browser plugin available from CZ.NIC Labs. The records have been created with https://www.huque.com/bin/gen_tlsa using these parameters: certificate usage: DANE-TA (2) trust anchor selector: full cert (0) matching type: exact match (0) certificate: https://www.cacert.org/certs/root.der git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2570 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-07-22 09:45:16 +00:00
_443._tcp.secure IN TLSA 2 0 0 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
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
svn IN A 213.154.225.238
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
svn IN SSHFP 1 1 1128972fb54f927477a781718e2f9c114e9ca383
svn IN SSHFP 2 1 3a36e5df06304c481f01fc723fd88a086e82d986
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
cert.svn IN CNAME svn.cacert.org.
nocert.svn IN CNAME svn.cacert.org.
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add PTR records for the full infra and critical networks. Add four new infrastructure systems. Put the "real" infrastructure systems in a /80 subnet to simplify firewall rules. Correct network addresses in comments. Name changes per e-mail request from Mario Lipinski on 05.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2542 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-06 13:51:52 +00:00
test IN A 213.154.225.248
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
test IN SSHFP 1 1 11bcb0ab4d1fd39547426d9527b88afb8ff85209
test IN SSHFP 2 1 3414c17e5ae898b2f5db7b3ddf9e34c2f5e816ac
Add PTR records for the full infra and critical networks. Add four new infrastructure systems. Put the "real" infrastructure systems in a /80 subnet to simplify firewall rules. Correct network addresses in comments. Name changes per e-mail request from Mario Lipinski on 05.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2542 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-06 13:51:52 +00:00
secure.test IN CNAME test.cacert.org.
cats.test IN CNAME test.cacert.org.
mgr.test IN CNAME test.cacert.org.
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
www.test IN CNAME test.cacert.org.
Add PTR records for the full infra and critical networks. Add four new infrastructure systems. Put the "real" infrastructure systems in a /80 subnet to simplify firewall rules. Correct network addresses in comments. Name changes per e-mail request from Mario Lipinski on 05.02.2014. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2542 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-06 13:51:52 +00:00
test2 IN A 213.154.225.249
secure.test2 IN CNAME test2.cacert.org.
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
www.test2 IN CNAME test2.cacert.org.
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
translations IN A 213.154.225.240
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
translations IN SSHFP 1 1 1128972fb54f927477a781718e2f9c114e9ca383
translations IN SSHFP 2 1 3a36e5df06304c481f01fc723fd88a086e82d986
l10n IN CNAME translations.cacert.org.
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
tverify IN A 213.154.225.247
Add IPv6 addresses for {www,secure,tverify}.cacert.org in preparation for World IPv6 Launch on 6 June 2012. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2386 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-06-04 09:59:01 +00:00
tverify IN AAAA 2001:7b8:3:9c::247
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
wiki IN A 213.154.225.235
Add SSHFP records for infrastructure hosts. Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-02-08 12:24:03 +00:00
wiki IN SSHFP 1 1 5c3e0d3265782405e0141c47bf0e16ec14b12e08
wiki IN SSHFP 2 1 04f7ab767579f004cc3ab2cc42a4ccaa24e51154
Add software configuration for CAcert ns server. The primary revision control is kept in RCS on the actual server, but the RCS logs of that server are also kept in this svn repository. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
2011-11-22 16:03:52 +00:00
www IN A 213.154.225.245
Add IPv6 addresses for {www,secure,tverify}.cacert.org in preparation for World IPv6 Launch on 6 June 2012. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2386 14b1bab8-4ef6-0310-b690-991c95c89dfd
2012-06-04 09:59:01 +00:00
www IN AAAA 2001:7b8:3:9c::245
Add TLSA record for www.cacert.org and secure.cacert.org. This supports effective use of the DNSSEC/TLSA Validator browser plugin available from CZ.NIC Labs. The records have been created with https://www.huque.com/bin/gen_tlsa using these parameters: certificate usage: DANE-TA (2) trust anchor selector: full cert (0) matching type: exact match (0) certificate: https://www.cacert.org/certs/root.der git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2570 14b1bab8-4ef6-0310-b690-991c95c89dfd
2014-07-22 09:45:16 +00:00
_443._tcp.www IN TLSA 2 0 0 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
Update SSHFP records for cacert-fw01 and cacert-fw02 after upgrading firewall OS to OpenBSD 5.7. Add RRs with fingerprints for CAcert root certificates (generated by cacert-fingerprints-to-dns). Clean up fingerprints by dropping internal colons. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2601 14b1bab8-4ef6-0310-b690-991c95c89dfd
2015-05-29 07:53:00 +00:00
; fingerprints for CAcert root certificates (generated by cacert-fingerprints-to-dns)
_certs.g1._fp IN TXT "root class3"
_url.root.g1._fp IN TXT "http://www.cacert.org/certs/root.crt"
_md5.root.g1._fp IN TXT "A61B375E390D9C3654EEBD2031461F6B"
_sha1.root.g1._fp IN TXT "135CEC36F49CB8E93B1AB270CD80884676CE8F33"
_sha256.root.g1._fp IN TXT "FF2A65CFF1149C7430101E0F65A07EC19183A3B633EF4A6510890DAD18316B3A"
_url.class3.g1._fp IN TXT "http://www.cacert.org/certs/class3.crt"
_md5.class3.g1._fp IN TXT "F72512824E67B5D08D92B77C0B867A42"
_sha1.class3.g1._fp IN TXT "AD7C3F64FC4439FEF4E90BE8F47C6CFA8AADFDCE"
_sha256.class3.g1._fp IN TXT "4EDDE9E55CA453B388887CAA25D5C5C5BCCF2891D73B87495808293D5FAC83C8"
Copy permalink