From cbaf82b14235fab44cd5a23d655b0e1a36c47fb5 Mon Sep 17 00:00:00 2001 From: "wytze@deboca.net" Date: Wed, 28 Jan 2015 14:52:53 +0000 Subject: [PATCH] Update SSHFP records for cacert-fw01 and cacert-fw02 after upgrading firewall OS to OpenBSD 5.6. Update IPv4 address for openppm.cacert.org per e-mail from Benedikt Heintel 08.01.2015. Add A and SSHFP records for web, funding, webstatic per e-mail request from Jan Dittberner. See also https://bugs.cacert.org/view.php?id=1363 for details about the shared IP setup. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2592 14b1bab8-4ef6-0310-b690-991c95c89dfd --- cacert.org | 50 +++++++++++++++++++++++++++++++++++--------------- cacert.org.log | 17 +++++++++++++++-- 2 files changed, 50 insertions(+), 17 deletions(-) diff --git a/cacert.org b/cacert.org index 87fd7e6..4922b2d 100644 --- a/cacert.org +++ b/cacert.org @@ -1,10 +1,10 @@ ; DNS master zone file for cacert.org, under RCS control -; @(#)(CAcert) $Id: cacert.org,v 1.87 2014/09/17 14:37:45 root Exp $ +; @(#)(CAcert) $Id: cacert.org,v 1.90 2015/01/28 14:22:19 root Exp $ $TTL 12h ; default TTL for zone data @ IN SOA ns1.cacert.org. hostmaster.cacert.org. ( - 2014091701 ; Serial + 2015012801 ; Serial 4h ; refresh time 1h ; retry interval 2d ; expire time @@ -43,21 +43,25 @@ cacert-fw IN AAAA 2001:7b8:3:9c::4 cacert-fw01 IN A 213.154.225.253 cacert-fw01 IN AAAA 2001:7b8:3:9c::5 -cacert-fw01 IN SSHFP 2 1 6a5497e3e430425439fe849b47a6b5a5add22241 -cacert-fw01 IN SSHFP 2 2 ce88f62b161af3d1f3f9c5a79a72608fed455340ff3609a51b73dc42232823c1 -cacert-fw01 IN SSHFP 3 1 3e8acf86c3360992eea677a1154b6c3f20811c56 -cacert-fw01 IN SSHFP 3 2 c51db0de0b5cd2096f8326e0252903cc06838c060a3689e2088c215e951ef82c -cacert-fw01 IN SSHFP 1 1 2dd0073329ec5f4ff8ecb7667f10a1bfe65ef6f4 -cacert-fw01 IN SSHFP 1 2 a508ec95e20a465a231f0d6b86afc46ab1486ca7a88272d4ccfdc4b260366885 +cacert-fw01 IN SSHFP 1 1 6be2be69618020056c9e8a235dc51b0367180ebe +cacert-fw01 IN SSHFP 1 2 b1d030fe6f6b087d7725ca919cf85c3475e76162d8c5226018e8c8d04fe4c581 +cacert-fw01 IN SSHFP 2 1 f4a6914295fdd622dea8fa1961d0d72b880c0349 +cacert-fw01 IN SSHFP 2 2 d4279d2861e081b193905fac8b5de13998c04433fa852e8a32e674cd32b69917 +cacert-fw01 IN SSHFP 3 1 44962a1c0e01b6771210447d49f20c3be9b0b3b3 +cacert-fw01 IN SSHFP 3 2 bad68b88e1479b23fa2ded7603606dc1c2100a6a43e536e2af8be7baecaf435b +cacert-fw01 IN SSHFP 4 1 61fbf8396c8b41fa8c0df1d26dd02c67c76f76d4 +cacert-fw01 IN SSHFP 4 2 ca6536da3769d4d6a64cb7b2e1199ce338ae09b263032b7c1954a0fe94dae716 cacert-fw02 IN A 213.154.225.254 cacert-fw02 IN AAAA 2001:7b8:3:9c::6 -cacert-fw02 IN SSHFP 2 1 6e47b51da962818bdf884eb527252019397599ac -cacert-fw02 IN SSHFP 2 2 50faa61404e7a6afb1a46b7224e7b0d609d7dad7d40e5f04d4df78b2a50e79d5 -cacert-fw02 IN SSHFP 3 1 4b136c402acb26cb01a04de243f0c8412d211bbd -cacert-fw02 IN SSHFP 3 2 9c4fc8f7cb81bd45a48313114e55ab261a6379abd6fcc7fd878d05b7206210d7 -cacert-fw02 IN SSHFP 1 1 3bbc40993094812db7188fc01f3dc8b89536bd69 -cacert-fw02 IN SSHFP 1 2 8e0cc3bcabfed1470f82f85c9726c2f002fb8dbc8f636601a7262c7b489b7d6e +cacert-fw02 IN SSHFP 1 1 d70bbfa6d9c625cb1228e7e86424d6d12df388be +cacert-fw02 IN SSHFP 1 2 9b5402576200e78f2238449eb959b48fb18a633bae57911f60cca313abe5ee95 +cacert-fw02 IN SSHFP 2 1 786f6aa7a5936b4b70eabe2a0c47355ab6c9fa03 +cacert-fw02 IN SSHFP 2 2 37f1ff7aa740a18560ff52aff65ed83680dca804b66f727ae5f5b303000695b7 +cacert-fw02 IN SSHFP 3 1 cf670d3b447aecbf42a0f5e3f9b51ef72f040753 +cacert-fw02 IN SSHFP 3 2 63a1f397b4fd6ff9755e34b1bd5580618899a1f0d1733556a44a01c203224f5c +cacert-fw02 IN SSHFP 4 1 0fc5b49ab25ec393f24e0ae75f4edf117bc05580 +cacert-fw02 IN SSHFP 4 2 2b75e0d31cccfbea04b4e9d6b160563f232dfc437cfb31425bb951d940d09d9a cats IN A 213.154.225.243 cats IN SSHFP 1 1 d29d4cc4662d5cb5f42c02823ca8677f05439589 @@ -89,6 +93,22 @@ emailout IN SSHFP 1 1 07414db5fbfd102c6cd497228748df70406a642b emailout IN SSHFP 2 1 ab2cf20c0064ea415e8d8a1e339e36e3ce27741d eu IN A 213.154.225.242 +web IN A 213.154.225.242 +web IN SSHFP 1 1 85f5338d90930200cbbfce1aab56988b4c8f0f22 +web IN SSHFP 1 2 d39cbd51588f322f7b4384274cf0166f25b10f54a6cd153ed7251ff30b5b516e +web IN SSHFP 2 1 906f0c17bb0e233b0f52ce33cfe64038d45ac4f2 +web IN SSHFP 2 2 dbf6221a8a403b4c9f537b676305fdae07ff45a1c18d88b1141031402af0250f +web IN SSHFP 3 1 7b62d8d1e093c28cda0f3d2444846128b41c10de +web IN SSHFP 3 2 0917da677c9e6caf1818c1151ec2a813623a2b2955a1a850f260d64ef041400b + +funding IN A 213.154.225.242 +webstatic IN A 213.154.225.242 +webstatic IN SSHFP 1 1 30897a7a984d8350495946d54c6374e9331237ef +webstatic IN SSHFP 1 2 32bb10c5cf48532d077066e012230058ddf3cce731c561f228e310eb7a546e3f +webstatic IN SSHFP 2 1 868361a51ec60607bfd964d0f8f3e4ee5e803fc6 +webstatic IN SSHFP 2 2 a173bb85ec19f63ecb273bca130ef63501fe1b89fd55b62997195e6816cab547 +webstatic IN SSHFP 3 1 7fc847cec20b9d65296d4a0edafba22a14ee9dc4 +webstatic IN SSHFP 3 2 68879264e0ed5d0914797bf2292436fb32cca24683dcf5d927a53589c1bfb6d7 git IN A 213.154.225.250 git IN SSHFP 1 1 23c7622d6db5822c809152c1c0fd9ea7838f76c6 @@ -152,7 +172,7 @@ ocsp IN AAAA 2001:7b8:616:0163::103 ocsp1 IN A 213.154.225.237 ocsp1 IN AAAA 2001:7b8:616:0163::103 -openppm IN A 82.96.100.150 +openppm IN A 194.24.160.131 pgpkeys IN CNAME infrastructure.cacert.org. diff --git a/cacert.org.log b/cacert.org.log index 656318d..412d53b 100644 --- a/cacert.org.log +++ b/cacert.org.log @@ -1,16 +1,29 @@ RCS file: /var/opendnssec/unsigned/RCS/cacert.org,v Working file: /var/opendnssec/unsigned/cacert.org -head: 1.87 +head: 1.90 branch: locks: strict access list: symbolic names: keyword substitution: kv -total revisions: 87; selected revisions: 87 +total revisions: 90; selected revisions: 90 description: cacert.org - zone file for cacert.org ---------------------------- +revision 1.90 +date: 2015/01/28 14:22:19; author: root; state: Exp; lines: +18 -2 +Add A and SSHFP records for web, funding, webstatic per e-mail request from Jan Dittberner. +See also https://bugs.cacert.org/view.php?id=1363 for details about the shared IP setup. +---------------------------- +revision 1.89 +date: 2015/01/09 09:59:38; author: root; state: Exp; lines: +3 -3 +Update IPv4 address for openppm.cacert.org per e-mail from Benedikt Heintel 08.01.2015. +---------------------------- +revision 1.88 +date: 2014/11/13 13:38:34; author: root; state: Exp; lines: +18 -14 +Update SSHFP records for cacert-fw01 and cacert-fw02 after upgrading firewall OS to OpenBSD 5.6. +---------------------------- revision 1.87 date: 2014/09/17 14:37:45; author: root; state: Exp; lines: +4 -4 Update IPv4 and IPv6 addresses for ns4.cacert.org (ns-ext.nlnetlabs.nl).