From 5dafcb47008d10685f6336fe318763899fd3bd0e Mon Sep 17 00:00:00 2001 From: "wytze@deboca.net" Date: Sat, 31 Oct 2015 14:55:19 +0000 Subject: [PATCH] ODS-NOTES: Update instructions for key rollover. keylist: Status on 20151026 after KSK key rollover, submitting new DS hashes and issuing ods-ksmutil key ds-seen for the ready KSK's. The new KSK goes from ready to active, the old KSK from active to retire. Note that cacert.community still needs to be done. cacert.*: Disable IPv6 address for ns3, because this host is currently lacking IPv6 connectivity. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2619 14b1bab8-4ef6-0310-b690-991c95c89dfd --- cacert.com | 6 +++--- cacert.com.log | 8 ++++++-- cacert.net | 6 +++--- cacert.net.log | 8 ++++++-- cacert.org | 6 +++--- cacert.org.log | 8 ++++++-- 6 files changed, 27 insertions(+), 15 deletions(-) diff --git a/cacert.com b/cacert.com index 1e9de54..d690d22 100644 --- a/cacert.com +++ b/cacert.com @@ -1,10 +1,10 @@ ; DNS master zone file for cacert.com, under RCS control -; @(#)(CAcert) $Id: cacert.com,v 1.19 2014/09/17 14:37:45 root Exp $ +; @(#)(CAcert) $Id: cacert.com,v 1.20 2015/10/26 14:49:58 root Exp $ $TTL 12h ; default TTL for zone data @ IN SOA ns1.cacert.com. hostmaster.cacert.com. ( - 2014091701 ; Serial + 2015102601 ; Serial 4h ; refresh time 1h ; retry interval 2d ; expire time @@ -21,7 +21,7 @@ $TTL 12h ; default TTL for zone data ns1 IN A 213.154.225.251 ; ns.cacert.org ns1 IN AAAA 2001:7b8:616:0163::102 ns3 IN A 46.249.47.169 ; mars.overmeer.net -ns3 IN AAAA 2a00:1ca8:2a::31 +;; ns3 IN AAAA 2a00:1ca8:2a::31 ns4 IN A 185.49.140.62 ; ns-ext.nlnetlabs.nl ns4 IN AAAA 2a04:b900::8:0:0:62 ns5 IN A 192.5.4.1 ; sns-pb.isc.org diff --git a/cacert.com.log b/cacert.com.log index 7d07e3d..c2651f9 100644 --- a/cacert.com.log +++ b/cacert.com.log @@ -1,16 +1,20 @@ RCS file: /var/opendnssec/unsigned/RCS/cacert.com,v Working file: /var/opendnssec/unsigned/cacert.com -head: 1.19 +head: 1.20 branch: locks: strict access list: symbolic names: keyword substitution: kv -total revisions: 19; selected revisions: 19 +total revisions: 20; selected revisions: 20 description: cacert.com - zone file for cacert.com ---------------------------- +revision 1.20 +date: 2015/10/26 14:49:58; author: root; state: Exp; lines: +3 -3 +Disable IPv6 address for ns3, because this host is currently lacking IPv6 connectivity. +---------------------------- revision 1.19 date: 2014/09/17 14:37:45; author: root; state: Exp; lines: +4 -4 Update IPv4 and IPv6 addresses for ns4.cacert.org (ns-ext.nlnetlabs.nl). diff --git a/cacert.net b/cacert.net index 13ed189..3e05b80 100644 --- a/cacert.net +++ b/cacert.net @@ -1,10 +1,10 @@ ; DNS master zone file for cacert.net, under RCS control -; @(#)(CAcert) $Id: cacert.net,v 1.20 2014/09/17 14:37:45 root Exp $ +; @(#)(CAcert) $Id: cacert.net,v 1.21 2015/10/26 14:49:58 root Exp $ $TTL 12h ; default TTL for zone data @ IN SOA ns1.cacert.net. hostmaster.cacert.net. ( - 2014091701 ; Serial + 2015102601 ; Serial 4h ; refresh time 1h ; retry interval 2d ; expire time @@ -21,7 +21,7 @@ $TTL 12h ; default TTL for zone data ns1 IN A 213.154.225.251 ; ns.cacert.org ns1 IN AAAA 2001:7b8:616:0163::102 ns3 IN A 46.249.47.169 ; mars.overmeer.net -ns3 IN AAAA 2a00:1ca8:2a::31 +;; ns3 IN AAAA 2a00:1ca8:2a::31 ns4 IN A 185.49.140.62 ; ns-ext.nlnetlabs.nl ns4 IN AAAA 2a04:b900::8:0:0:62 ns5 IN A 192.5.4.1 ; sns-pb.isc.org diff --git a/cacert.net.log b/cacert.net.log index 30fcded..47480fc 100644 --- a/cacert.net.log +++ b/cacert.net.log @@ -1,16 +1,20 @@ RCS file: /var/opendnssec/unsigned/RCS/cacert.net,v Working file: /var/opendnssec/unsigned/cacert.net -head: 1.20 +head: 1.21 branch: locks: strict access list: symbolic names: keyword substitution: kv -total revisions: 20; selected revisions: 20 +total revisions: 21; selected revisions: 21 description: cacert.net - DNS master zone file for cacert.net, under RCS control ---------------------------- +revision 1.21 +date: 2015/10/26 14:49:58; author: root; state: Exp; lines: +3 -3 +Disable IPv6 address for ns3, because this host is currently lacking IPv6 connectivity. +---------------------------- revision 1.20 date: 2014/09/17 14:37:45; author: root; state: Exp; lines: +4 -4 Update IPv4 and IPv6 addresses for ns4.cacert.org (ns-ext.nlnetlabs.nl). diff --git a/cacert.org b/cacert.org index b573a79..8c65443 100644 --- a/cacert.org +++ b/cacert.org @@ -1,10 +1,10 @@ ; DNS master zone file for cacert.org, under RCS control -; @(#)(CAcert) $Id: cacert.org,v 1.95 2015/05/26 15:12:10 root Exp $ +; @(#)(CAcert) $Id: cacert.org,v 1.96 2015/10/26 14:49:58 root Exp $ $TTL 12h ; default TTL for zone data @ IN SOA ns1.cacert.org. hostmaster.cacert.org. ( - 2015052602 ; Serial + 2015102601 ; Serial 4h ; refresh time 1h ; retry interval 2d ; expire time @@ -171,7 +171,7 @@ ns1 IN A 213.154.225.251 ; ns.cacert.org ns1 IN AAAA 2001:7b8:616:0163::102 ns3 IN A 46.249.47.169 ; mars.overmeer.net -ns3 IN AAAA 2a00:1ca8:2a::31 +;; ns3 IN AAAA 2a00:1ca8:2a::31 ns4 IN A 185.49.140.62 ; ns-ext.nlnetlabs.nl ns4 IN AAAA 2a04:b900::8:0:0:62 diff --git a/cacert.org.log b/cacert.org.log index 8941774..ebda026 100644 --- a/cacert.org.log +++ b/cacert.org.log @@ -1,16 +1,20 @@ RCS file: /var/opendnssec/unsigned/RCS/cacert.org,v Working file: /var/opendnssec/unsigned/cacert.org -head: 1.95 +head: 1.96 branch: locks: strict access list: symbolic names: keyword substitution: kv -total revisions: 95; selected revisions: 95 +total revisions: 96; selected revisions: 96 description: cacert.org - zone file for cacert.org ---------------------------- +revision 1.96 +date: 2015/10/26 14:49:58; author: root; state: Exp; lines: +3 -3 +Disable IPv6 address for ns3, because this host is currently lacking IPv6 connectivity. +---------------------------- revision 1.95 date: 2015/05/26 15:12:10; author: root; state: Exp; lines: +8 -8 Clean up fingerprints by dropping internal colons.