ODS-NOTES: Update instructions for key rollover.

keylist: Status on 20151026 after KSK key rollover, submitting new DS hashes and issuing
     ods-ksmutil key ds-seen for the ready KSK's. The new KSK goes from ready to active,
     the old KSK from active to retire. Note that cacert.community still needs to be done.
cacert.*: Disable IPv6 address for ns3, because this host is currently lacking IPv6 connectivity.


git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2619 14b1bab8-4ef6-0310-b690-991c95c89dfd
This commit is contained in:
wytze@deboca.net 2015-10-31 14:55:19 +00:00
parent 0de4c64b93
commit 5dafcb4700
6 changed files with 27 additions and 15 deletions

View file

@ -1,10 +1,10 @@
; DNS master zone file for cacert.com, under RCS control ; DNS master zone file for cacert.com, under RCS control
; @(#)(CAcert) $Id: cacert.com,v 1.19 2014/09/17 14:37:45 root Exp $ ; @(#)(CAcert) $Id: cacert.com,v 1.20 2015/10/26 14:49:58 root Exp $
$TTL 12h ; default TTL for zone data $TTL 12h ; default TTL for zone data
@ IN SOA ns1.cacert.com. hostmaster.cacert.com. ( @ IN SOA ns1.cacert.com. hostmaster.cacert.com. (
2014091701 ; Serial 2015102601 ; Serial
4h ; refresh time 4h ; refresh time
1h ; retry interval 1h ; retry interval
2d ; expire time 2d ; expire time
@ -21,7 +21,7 @@ $TTL 12h ; default TTL for zone data
ns1 IN A 213.154.225.251 ; ns.cacert.org ns1 IN A 213.154.225.251 ; ns.cacert.org
ns1 IN AAAA 2001:7b8:616:0163::102 ns1 IN AAAA 2001:7b8:616:0163::102
ns3 IN A 46.249.47.169 ; mars.overmeer.net ns3 IN A 46.249.47.169 ; mars.overmeer.net
ns3 IN AAAA 2a00:1ca8:2a::31 ;; ns3 IN AAAA 2a00:1ca8:2a::31
ns4 IN A 185.49.140.62 ; ns-ext.nlnetlabs.nl ns4 IN A 185.49.140.62 ; ns-ext.nlnetlabs.nl
ns4 IN AAAA 2a04:b900::8:0:0:62 ns4 IN AAAA 2a04:b900::8:0:0:62
ns5 IN A 192.5.4.1 ; sns-pb.isc.org ns5 IN A 192.5.4.1 ; sns-pb.isc.org

View file

@ -1,16 +1,20 @@
RCS file: /var/opendnssec/unsigned/RCS/cacert.com,v RCS file: /var/opendnssec/unsigned/RCS/cacert.com,v
Working file: /var/opendnssec/unsigned/cacert.com Working file: /var/opendnssec/unsigned/cacert.com
head: 1.19 head: 1.20
branch: branch:
locks: strict locks: strict
access list: access list:
symbolic names: symbolic names:
keyword substitution: kv keyword substitution: kv
total revisions: 19; selected revisions: 19 total revisions: 20; selected revisions: 20
description: description:
cacert.com - zone file for cacert.com cacert.com - zone file for cacert.com
---------------------------- ----------------------------
revision 1.20
date: 2015/10/26 14:49:58; author: root; state: Exp; lines: +3 -3
Disable IPv6 address for ns3, because this host is currently lacking IPv6 connectivity.
----------------------------
revision 1.19 revision 1.19
date: 2014/09/17 14:37:45; author: root; state: Exp; lines: +4 -4 date: 2014/09/17 14:37:45; author: root; state: Exp; lines: +4 -4
Update IPv4 and IPv6 addresses for ns4.cacert.org (ns-ext.nlnetlabs.nl). Update IPv4 and IPv6 addresses for ns4.cacert.org (ns-ext.nlnetlabs.nl).

View file

@ -1,10 +1,10 @@
; DNS master zone file for cacert.net, under RCS control ; DNS master zone file for cacert.net, under RCS control
; @(#)(CAcert) $Id: cacert.net,v 1.20 2014/09/17 14:37:45 root Exp $ ; @(#)(CAcert) $Id: cacert.net,v 1.21 2015/10/26 14:49:58 root Exp $
$TTL 12h ; default TTL for zone data $TTL 12h ; default TTL for zone data
@ IN SOA ns1.cacert.net. hostmaster.cacert.net. ( @ IN SOA ns1.cacert.net. hostmaster.cacert.net. (
2014091701 ; Serial 2015102601 ; Serial
4h ; refresh time 4h ; refresh time
1h ; retry interval 1h ; retry interval
2d ; expire time 2d ; expire time
@ -21,7 +21,7 @@ $TTL 12h ; default TTL for zone data
ns1 IN A 213.154.225.251 ; ns.cacert.org ns1 IN A 213.154.225.251 ; ns.cacert.org
ns1 IN AAAA 2001:7b8:616:0163::102 ns1 IN AAAA 2001:7b8:616:0163::102
ns3 IN A 46.249.47.169 ; mars.overmeer.net ns3 IN A 46.249.47.169 ; mars.overmeer.net
ns3 IN AAAA 2a00:1ca8:2a::31 ;; ns3 IN AAAA 2a00:1ca8:2a::31
ns4 IN A 185.49.140.62 ; ns-ext.nlnetlabs.nl ns4 IN A 185.49.140.62 ; ns-ext.nlnetlabs.nl
ns4 IN AAAA 2a04:b900::8:0:0:62 ns4 IN AAAA 2a04:b900::8:0:0:62
ns5 IN A 192.5.4.1 ; sns-pb.isc.org ns5 IN A 192.5.4.1 ; sns-pb.isc.org

View file

@ -1,16 +1,20 @@
RCS file: /var/opendnssec/unsigned/RCS/cacert.net,v RCS file: /var/opendnssec/unsigned/RCS/cacert.net,v
Working file: /var/opendnssec/unsigned/cacert.net Working file: /var/opendnssec/unsigned/cacert.net
head: 1.20 head: 1.21
branch: branch:
locks: strict locks: strict
access list: access list:
symbolic names: symbolic names:
keyword substitution: kv keyword substitution: kv
total revisions: 20; selected revisions: 20 total revisions: 21; selected revisions: 21
description: description:
cacert.net - DNS master zone file for cacert.net, under RCS control cacert.net - DNS master zone file for cacert.net, under RCS control
---------------------------- ----------------------------
revision 1.21
date: 2015/10/26 14:49:58; author: root; state: Exp; lines: +3 -3
Disable IPv6 address for ns3, because this host is currently lacking IPv6 connectivity.
----------------------------
revision 1.20 revision 1.20
date: 2014/09/17 14:37:45; author: root; state: Exp; lines: +4 -4 date: 2014/09/17 14:37:45; author: root; state: Exp; lines: +4 -4
Update IPv4 and IPv6 addresses for ns4.cacert.org (ns-ext.nlnetlabs.nl). Update IPv4 and IPv6 addresses for ns4.cacert.org (ns-ext.nlnetlabs.nl).

View file

@ -1,10 +1,10 @@
; DNS master zone file for cacert.org, under RCS control ; DNS master zone file for cacert.org, under RCS control
; @(#)(CAcert) $Id: cacert.org,v 1.95 2015/05/26 15:12:10 root Exp $ ; @(#)(CAcert) $Id: cacert.org,v 1.96 2015/10/26 14:49:58 root Exp $
$TTL 12h ; default TTL for zone data $TTL 12h ; default TTL for zone data
@ IN SOA ns1.cacert.org. hostmaster.cacert.org. ( @ IN SOA ns1.cacert.org. hostmaster.cacert.org. (
2015052602 ; Serial 2015102601 ; Serial
4h ; refresh time 4h ; refresh time
1h ; retry interval 1h ; retry interval
2d ; expire time 2d ; expire time
@ -171,7 +171,7 @@ ns1 IN A 213.154.225.251 ; ns.cacert.org
ns1 IN AAAA 2001:7b8:616:0163::102 ns1 IN AAAA 2001:7b8:616:0163::102
ns3 IN A 46.249.47.169 ; mars.overmeer.net ns3 IN A 46.249.47.169 ; mars.overmeer.net
ns3 IN AAAA 2a00:1ca8:2a::31 ;; ns3 IN AAAA 2a00:1ca8:2a::31
ns4 IN A 185.49.140.62 ; ns-ext.nlnetlabs.nl ns4 IN A 185.49.140.62 ; ns-ext.nlnetlabs.nl
ns4 IN AAAA 2a04:b900::8:0:0:62 ns4 IN AAAA 2a04:b900::8:0:0:62

View file

@ -1,16 +1,20 @@
RCS file: /var/opendnssec/unsigned/RCS/cacert.org,v RCS file: /var/opendnssec/unsigned/RCS/cacert.org,v
Working file: /var/opendnssec/unsigned/cacert.org Working file: /var/opendnssec/unsigned/cacert.org
head: 1.95 head: 1.96
branch: branch:
locks: strict locks: strict
access list: access list:
symbolic names: symbolic names:
keyword substitution: kv keyword substitution: kv
total revisions: 95; selected revisions: 95 total revisions: 96; selected revisions: 96
description: description:
cacert.org - zone file for cacert.org cacert.org - zone file for cacert.org
---------------------------- ----------------------------
revision 1.96
date: 2015/10/26 14:49:58; author: root; state: Exp; lines: +3 -3
Disable IPv6 address for ns3, because this host is currently lacking IPv6 connectivity.
----------------------------
revision 1.95 revision 1.95
date: 2015/05/26 15:12:10; author: root; state: Exp; lines: +8 -8 date: 2015/05/26 15:12:10; author: root; state: Exp; lines: +8 -8
Clean up fingerprints by dropping internal colons. Clean up fingerprints by dropping internal colons.