From 9cb7ac6da61b3d9915b9972118d3206aacf2f1fa Mon Sep 17 00:00:00 2001 From: Jan Dittberner Date: Sun, 16 Jul 2023 19:25:26 +0200 Subject: [PATCH 1/2] Update infra02 SSH host keys - remove DSA key - add ED25519 key --- cacert.org | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/cacert.org b/cacert.org index 7f76a7a..e335faa 100644 --- a/cacert.org +++ b/cacert.org @@ -181,10 +181,11 @@ infra02.cacert.org 43200 IN A 213.154.225.230 infra02.cacert.org 43200 IN AAAA 2001:7b8:616:162:1::10 infra02.cacert.org 43200 IN SSHFP 1 1 5a82d3c150af002c05784f73250a067053aeed63 infra02.cacert.org 43200 IN SSHFP 1 2 63b0d74a3f1ce61865a5eb0497ef05243bc4067ec983c69ab8e62f3cb940cc82 -infra02.cacert.org 43200 IN SSHFP 2 1 af8d8e3386eaa72997709632adf2b457e6fef0dc -infra02.cacert.org 43200 IN SSHFP 2 2 3a0188fc47d1fdd14d70a2fb78f51792d06ba11eae6ab16e73cb7bb8dd6a0dc8 infra02.cacert.org 43200 IN SSHFP 3 1 3e1b9ebf85b726cf831c76ecb8c17786aedf40e8 infra02.cacert.org 43200 IN SSHFP 3 2 3ae7f0035c2172977e99bfe312c7a8299650dea16a975ea13eece8fda426062a +infra02.cacert.org 43200 IN SSHFP 4 1 9d393db3ed830bdbec34fae34883bb5f3c7626f8 +infra02.cacert.org 43200 IN SSHFP 4 2 7975a83fb2ff036e69fd85b7be68fee0d172da510455c45a2e736171e9416abf + ; infrastructure host infra03 infra03.cacert.org 43200 IN A 213.154.225.249 From e3411f74eb9257829c577a1881777b47050ccb3e Mon Sep 17 00:00:00 2001 From: Jan Dittberner Date: Sun, 16 Jul 2023 19:26:03 +0200 Subject: [PATCH 2/2] Update lists host keys The lists system has been rebuilt on a new Debian 11 host with new host keys. --- cacert.org | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/cacert.org b/cacert.org index e335faa..6a65594 100644 --- a/cacert.org +++ b/cacert.org @@ -241,8 +241,12 @@ jenkins.cacert.org 43200 IN SSHFP 4 2 db988ff234a4948bbcb1a61ff21c080efed4548251 lists.cacert.org 43200 IN A 213.154.225.231 lists.cacert.org 43200 IN AAAA 2001:7b8:616:162:2::17 lists.cacert.org 43200 IN MX 10 email.cacert.org. -lists.cacert.org 43200 IN SSHFP 1 1 87f75b9124326b566ed22dcf65a9740eede8f0ff -lists.cacert.org 43200 IN SSHFP 2 1 8d79e68e731ed72667f3d286c477245df653083b +lists.cacert.org 43200 IN SSHFP 1 1 6ee1070484dcbc1115c4432426f38abd2ea2d086 +lists.cacert.org 43200 IN SSHFP 1 2 6ae15dae1e5a7a63fd2ac408cfa59cb803bd2472c037a98218a74db08f0c3327 +lists.cacert.org 43200 IN SSHFP 3 1 9f52f8ee40399ddff59cee52c119b430fbd9a937 +lists.cacert.org 43200 IN SSHFP 3 2 c14c588a7d8614a5e5b3ac0cb7603ca17d229ef1c218ad61bd8f8f3be1e60c2f +lists.cacert.org 43200 IN SSHFP 4 1 5478bf8fca2e06e8a52c6fde059d2fb7103cffd1 +lists.cacert.org 43200 IN SSHFP 4 2 3f9e3553911fdb6d71cc018baf71da192d3fbc4bfe89aafb07aea1fe73d773d3 lists.cacert.org 43200 IN TXT "v=spf1 ip4:213.154.225.231 ip6:2001:7b8:616:162:2::17 -all" cert.lists.cacert.org 43200 IN CNAME lists.cacert.org. nocert.lists.cacert.org 43200 IN CNAME lists.cacert.org.