forked from critical/dns-zones
Add SSHFP records for infrastructure hosts.
Reorganize layout for better readability and maintainability. Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME. Add CNAME records for www.test.cacert.org and www.test2.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
This commit is contained in:
wytze@deboca.net
parent
be584cdb5e
commit
d417978a99
2 changed files with 86 additions and 7 deletions
78
cacert.org
78
cacert.org
|
|
@ -1,10 +1,10 @@
|
|||
; DNS master zone file for cacert.org, under RCS control
|
||||
; @(#)(CAcert) $Id: cacert.org,v 1.75 2014/02/06 13:43:11 root Exp $
|
||||
; @(#)(CAcert) $Id: cacert.org,v 1.77 2014/02/08 12:20:55 root Exp $
|
||||
|
||||
$TTL 12h ; default TTL for zone data
|
||||
|
||||
@ IN SOA ns1.cacert.org. hostmaster.cacert.org. (
|
||||
2014020601 ; Serial
|
||||
2014020801 ; Serial
|
||||
4h ; refresh time
|
||||
1h ; retry interval
|
||||
2d ; expire time
|
||||
|
|
@ -22,12 +22,27 @@ $TTL 12h ; default TTL for zone data
|
|||
@ IN TXT "v=spf1 ip4:213.154.225.245 ip4:213.154.225.246 ip4:213.154.225.247 ip6:2001:7b8:3:9c::245 ip6:2001:7b8:3:9c::246 ip6:2001:7b8:3:9c::247 ip4:213.154.225.228 ip4:213.154.225.230 ip4:213.154.225.239 -all"
|
||||
|
||||
arbitration IN A 213.154.225.241
|
||||
arbitration IN SSHFP 1 1 40d9c8ebcf8d41a04b990fbc5308675d029bf4ef
|
||||
arbitration IN SSHFP 2 1 7474bfb01af775511805bf15c45bb9d7591d0ce6
|
||||
|
||||
audit IN A 78.46.255.66
|
||||
|
||||
blog IN A 213.154.225.234
|
||||
blog IN SSHFP 1 1 32ca6e4ba3275aab0d65f0f46969b11a4c4b36e8
|
||||
blog IN SSHFP 2 1 aafba94ebe5c5c45cdf5ef10d0bc31bea4d9ecec
|
||||
|
||||
board IN A 213.154.225.252
|
||||
board IN SSHFP 1 1 f5c02a860a1cc07aeefbf802540680c7476bde6e
|
||||
board IN SSHFP 2 1 7b6eeb0ccdfb2e2cfe479e0aece36ff995fdd1f4
|
||||
finance IN CNAME board.cacert.org.
|
||||
|
||||
bugs IN A 213.154.225.232
|
||||
bugs IN SSHFP 1 1 4b4bc32c4e655559b43a370b77cad4983e8c24f8
|
||||
bugs IN SSHFP 2 1 7916e317983d8bc85d719bb793e5e46a6b4976b2
|
||||
|
||||
cacert-fw IN A 213.154.225.229
|
||||
cacert-fw IN AAAA 2001:7b8:3:9c::4
|
||||
|
||||
cacert-fw01 IN A 213.154.225.253
|
||||
cacert-fw01 IN AAAA 2001:7b8:3:9c::5
|
||||
cacert-fw01 IN SSHFP 2 1 6a5497e3e430425439fe849b47a6b5a5add22241
|
||||
|
|
@ -36,6 +51,7 @@ cacert-fw01 IN SSHFP 3 1 3e8acf86c3360992eea677a1154b6c3f20811c56
|
|||
cacert-fw01 IN SSHFP 3 2 c51db0de0b5cd2096f8326e0252903cc06838c060a3689e2088c215e951ef82c
|
||||
cacert-fw01 IN SSHFP 1 1 2dd0073329ec5f4ff8ecb7667f10a1bfe65ef6f4
|
||||
cacert-fw01 IN SSHFP 1 2 a508ec95e20a465a231f0d6b86afc46ab1486ca7a88272d4ccfdc4b260366885
|
||||
|
||||
cacert-fw02 IN A 213.154.225.254
|
||||
cacert-fw02 IN AAAA 2001:7b8:3:9c::6
|
||||
cacert-fw02 IN SSHFP 2 1 6e47b51da962818bdf884eb527252019397599ac
|
||||
|
|
@ -44,24 +60,51 @@ cacert-fw02 IN SSHFP 3 1 4b136c402acb26cb01a04de243f0c8412d211bbd
|
|||
cacert-fw02 IN SSHFP 3 2 9c4fc8f7cb81bd45a48313114e55ab261a6379abd6fcc7fd878d05b7206210d7
|
||||
cacert-fw02 IN SSHFP 1 1 3bbc40993094812db7188fc01f3dc8b89536bd69
|
||||
cacert-fw02 IN SSHFP 1 2 8e0cc3bcabfed1470f82f85c9726c2f002fb8dbc8f636601a7262c7b489b7d6e
|
||||
|
||||
cats IN A 213.154.225.243
|
||||
community IN CNAME email.cacert.org.
|
||||
cats IN SSHFP 1 1 d29d4cc4662d5cb5f42c02823ca8677f05439589
|
||||
cats IN SSHFP 2 1 0342eb1e7325eb90a1c0483de3d6597e36e569c8
|
||||
|
||||
community-vpn IN A 78.47.142.76
|
||||
|
||||
crl IN A 213.154.225.236
|
||||
|
||||
dev IN A 78.46.255.66
|
||||
|
||||
email IN A 213.154.225.228
|
||||
email IN SSHFP 1 1 bf391fd72656a275524d1d25a624c6045b44ae90
|
||||
email IN SSHFP 2 1 73b0d8acb492a7187016dd3c5fc1519b309a550f
|
||||
community IN CNAME email.cacert.org.
|
||||
|
||||
emailout IN A 213.154.225.239
|
||||
emailout IN SSHFP 1 1 07414db5fbfd102c6cd497228748df70406a642b
|
||||
emailout IN SSHFP 2 1 ab2cf20c0064ea415e8d8a1e339e36e3ce27741d
|
||||
|
||||
eu IN A 213.154.225.242
|
||||
finance IN CNAME board.cacert.org.
|
||||
|
||||
git IN A 213.154.225.250
|
||||
git IN SSHFP 1 1 23c7622d6db5822c809152c1c0fd9ea7838f76c6
|
||||
git IN SSHFP 2 1 8509db491902fe10ab84c8f24b02f10c1adf0e7f
|
||||
|
||||
hopper IN AAAA 2001:7b8:616:0162::100
|
||||
hopper IN SSHFP 1 1 22f35bfddd356b119c1555c3bf4f86edd8ae8dfd
|
||||
hopper IN SSHFP 2 1 026d7dda6753c2d8810466336fe758d37aed899d
|
||||
|
||||
infrastructure IN A 213.154.225.230
|
||||
infrastructure IN SSHFP 1 1 5a82d3c150af002c05784f73250a067053aeed63
|
||||
infrastructure IN SSHFP 2 1 af8d8e3386eaa72997709632adf2b457e6fef0dc
|
||||
|
||||
irc IN A 213.154.225.233
|
||||
irc IN SSHFP 1 1 c123f73001682277de5346923518d17cc94e298e
|
||||
irc IN SSHFP 2 1 b85941c077732f78be290b8f0b44b0a5e8a0e51d
|
||||
|
||||
issue IN A 213.154.225.244
|
||||
l10n IN CNAME translations.cacert.org.
|
||||
issue IN SSHFP 1 1 3f55e52b51d142ef9d15eeaa9ca25b3aa30c7c6e
|
||||
issue IN SSHFP 2 1 fd9a5c79c4a9057b87ae8e639fd223b386af4bdb
|
||||
|
||||
lists IN A 213.154.225.231
|
||||
lists IN SSHFP 1 1 87f75b9124326b566ed22dcf65a9740eede8f0ff
|
||||
lists IN SSHFP 2 1 8d79e68e731ed72667f3d286c477245df653083b
|
||||
cert.lists IN CNAME lists.cacert.org.
|
||||
nocert.lists IN CNAME lists.cacert.org.
|
||||
lists IN MX 10 email.cacert.org.
|
||||
|
|
@ -71,32 +114,57 @@ _adsp._domainkey.lists IN TXT "dkim=all"
|
|||
lists._domainkey.lists IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCs2Hu5HQpT5FWj2TrqHZwFM/h0Tc35idlBviaArkdp5fRPx402ID+pMYZZW6lVM/IJlmeTqPGO73oQyl/tFlnXWj/X8p809IFqWnKWzGKJLhnxMAZW7bmzyjR8siK3It93+s5mu9r/4pwHCW3bEbdtKartd7cud84JO15cLJYA+QIDAQAB"
|
||||
mail._domainkey IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOZV5h3rm18QRiNfNnwXadX8jeSC3zjpU7GFNTfZk1ifjLxrlVrSsfAvlVfFvR2/uQXegwEkiNV5bd57d989T+VVLZZbSv+OAXX4ZwihsLkf3huDszKtJTvsybqUNh97OE00THSyJCrcowFDcLv5IN2ULCOlMjTqbZxZuaNW0S6wIDAQAB"
|
||||
auto._domainkey IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDNFxiNr+NHJwih3OPhGr4iwLE+BBDu72YrMSzUnU1FF50CW7iOtuhg796UZ6xrZ5VuhAix6YmmzcvF2UxYzoD/XpfZ4MzBu0ND4/nkt9/YOTyIBzwQqn9uMNve0Y76Zsel89dIJtOI+y+lfnFExV0jKwe53gzmxMVpMSSCcZPGwIDAQAB" ; ----- DKIM auto for cacert.org
|
||||
|
||||
monitor IN CNAME infrastructure.cacert.org.
|
||||
|
||||
ns IN A 213.154.225.251 ; master
|
||||
ns1 IN A 213.154.225.251 ; ns.cacert.org
|
||||
ns1 IN AAAA 2001:7b8:616:0163::102
|
||||
|
||||
ns3 IN A 46.249.47.169 ; mars.overmeer.net
|
||||
ns3 IN AAAA 2a00:1ca8:2a::31
|
||||
|
||||
ns4 IN A 213.154.224.4 ; ns-ext.nlnetlabs.nl
|
||||
ns4 IN AAAA 2001:7b8:206:1::4:53
|
||||
|
||||
ns5 IN A 192.5.4.1 ; sns-pb.isc.org
|
||||
ns5 IN AAAA 2001:500:2e::1
|
||||
|
||||
ocsp IN A 213.154.225.237
|
||||
ocsp1 IN A 213.154.225.237
|
||||
|
||||
secure IN A 213.154.225.246
|
||||
secure IN AAAA 2001:7b8:3:9c::246
|
||||
|
||||
svn IN A 213.154.225.238
|
||||
svn IN SSHFP 1 1 1128972fb54f927477a781718e2f9c114e9ca383
|
||||
svn IN SSHFP 2 1 3a36e5df06304c481f01fc723fd88a086e82d986
|
||||
cert.svn IN CNAME svn.cacert.org.
|
||||
nocert.svn IN CNAME svn.cacert.org.
|
||||
|
||||
test IN A 213.154.225.248
|
||||
test IN SSHFP 1 1 11bcb0ab4d1fd39547426d9527b88afb8ff85209
|
||||
test IN SSHFP 2 1 3414c17e5ae898b2f5db7b3ddf9e34c2f5e816ac
|
||||
secure.test IN CNAME test.cacert.org.
|
||||
cats.test IN CNAME test.cacert.org.
|
||||
mgr.test IN CNAME test.cacert.org.
|
||||
www.test IN CNAME test.cacert.org.
|
||||
|
||||
test2 IN A 213.154.225.249
|
||||
secure.test2 IN CNAME test2.cacert.org.
|
||||
www.test2 IN CNAME test2.cacert.org.
|
||||
|
||||
translations IN A 213.154.225.240
|
||||
translations IN SSHFP 1 1 1128972fb54f927477a781718e2f9c114e9ca383
|
||||
translations IN SSHFP 2 1 3a36e5df06304c481f01fc723fd88a086e82d986
|
||||
l10n IN CNAME translations.cacert.org.
|
||||
|
||||
tverify IN A 213.154.225.247
|
||||
tverify IN AAAA 2001:7b8:3:9c::247
|
||||
|
||||
wiki IN A 213.154.225.235
|
||||
wiki IN SSHFP 1 1 5c3e0d3265782405e0141c47bf0e16ec14b12e08
|
||||
wiki IN SSHFP 2 1 04f7ab767579f004cc3ab2cc42a4ccaa24e51154
|
||||
|
||||
www IN A 213.154.225.245
|
||||
www IN AAAA 2001:7b8:3:9c::245
|
||||
|
|
|
|||
|
|
@ -1,16 +1,27 @@
|
|||
|
||||
RCS file: /var/opendnssec/unsigned/RCS/cacert.org,v
|
||||
Working file: /var/opendnssec/unsigned/cacert.org
|
||||
head: 1.75
|
||||
head: 1.77
|
||||
branch:
|
||||
locks: strict
|
||||
access list:
|
||||
symbolic names:
|
||||
keyword substitution: kv
|
||||
total revisions: 75; selected revisions: 75
|
||||
total revisions: 77; selected revisions: 77
|
||||
description:
|
||||
cacert.org - zone file for cacert.org
|
||||
----------------------------
|
||||
revision 1.77
|
||||
date: 2014/02/08 12:20:55; author: root; state: Exp; lines: +4 -4
|
||||
Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME.
|
||||
Add CNAME records for www.test.cacert.org and www.test2.cacert.org per e-mail request
|
||||
from Mario Lipinski on 08.02.2014.
|
||||
----------------------------
|
||||
revision 1.76
|
||||
date: 2014/02/06 15:40:10; author: root; state: Exp; lines: +73 -5
|
||||
Add SSHFP records for infrastructure hosts.
|
||||
Reorganize layout for better readability and maintainability.
|
||||
----------------------------
|
||||
revision 1.75
|
||||
date: 2014/02/06 13:43:11; author: root; state: Exp; lines: +7 -7
|
||||
Remove indentation added in previous commit: it is not allowed by ods-signer.
|
||||
|
|
|
|||
Loading…
Reference in a new issue