1
0
Fork 0

Add SSHFP records for infrastructure hosts.

Reorganize layout for better readability and maintainability.
Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME.
Add CNAME records for www.test.cacert.org and www.test2.cacert.org.


git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2543 14b1bab8-4ef6-0310-b690-991c95c89dfd
add-secure1-alias-for-www1
wytze@deboca.net 11 years ago
parent be584cdb5e
commit d417978a99

@ -1,10 +1,10 @@
; DNS master zone file for cacert.org, under RCS control
; @(#)(CAcert) $Id: cacert.org,v 1.75 2014/02/06 13:43:11 root Exp $
; @(#)(CAcert) $Id: cacert.org,v 1.77 2014/02/08 12:20:55 root Exp $
$TTL 12h ; default TTL for zone data
@ IN SOA ns1.cacert.org. hostmaster.cacert.org. (
2014020601 ; Serial
2014020801 ; Serial
4h ; refresh time
1h ; retry interval
2d ; expire time
@ -22,12 +22,27 @@ $TTL 12h ; default TTL for zone data
@ IN TXT "v=spf1 ip4:213.154.225.245 ip4:213.154.225.246 ip4:213.154.225.247 ip6:2001:7b8:3:9c::245 ip6:2001:7b8:3:9c::246 ip6:2001:7b8:3:9c::247 ip4:213.154.225.228 ip4:213.154.225.230 ip4:213.154.225.239 -all"
arbitration IN A 213.154.225.241
arbitration IN SSHFP 1 1 40d9c8ebcf8d41a04b990fbc5308675d029bf4ef
arbitration IN SSHFP 2 1 7474bfb01af775511805bf15c45bb9d7591d0ce6
audit IN A 78.46.255.66
blog IN A 213.154.225.234
blog IN SSHFP 1 1 32ca6e4ba3275aab0d65f0f46969b11a4c4b36e8
blog IN SSHFP 2 1 aafba94ebe5c5c45cdf5ef10d0bc31bea4d9ecec
board IN A 213.154.225.252
board IN SSHFP 1 1 f5c02a860a1cc07aeefbf802540680c7476bde6e
board IN SSHFP 2 1 7b6eeb0ccdfb2e2cfe479e0aece36ff995fdd1f4
finance IN CNAME board.cacert.org.
bugs IN A 213.154.225.232
bugs IN SSHFP 1 1 4b4bc32c4e655559b43a370b77cad4983e8c24f8
bugs IN SSHFP 2 1 7916e317983d8bc85d719bb793e5e46a6b4976b2
cacert-fw IN A 213.154.225.229
cacert-fw IN AAAA 2001:7b8:3:9c::4
cacert-fw01 IN A 213.154.225.253
cacert-fw01 IN AAAA 2001:7b8:3:9c::5
cacert-fw01 IN SSHFP 2 1 6a5497e3e430425439fe849b47a6b5a5add22241
@ -36,6 +51,7 @@ cacert-fw01 IN SSHFP 3 1 3e8acf86c3360992eea677a1154b6c3f20811c56
cacert-fw01 IN SSHFP 3 2 c51db0de0b5cd2096f8326e0252903cc06838c060a3689e2088c215e951ef82c
cacert-fw01 IN SSHFP 1 1 2dd0073329ec5f4ff8ecb7667f10a1bfe65ef6f4
cacert-fw01 IN SSHFP 1 2 a508ec95e20a465a231f0d6b86afc46ab1486ca7a88272d4ccfdc4b260366885
cacert-fw02 IN A 213.154.225.254
cacert-fw02 IN AAAA 2001:7b8:3:9c::6
cacert-fw02 IN SSHFP 2 1 6e47b51da962818bdf884eb527252019397599ac
@ -44,24 +60,51 @@ cacert-fw02 IN SSHFP 3 1 4b136c402acb26cb01a04de243f0c8412d211bbd
cacert-fw02 IN SSHFP 3 2 9c4fc8f7cb81bd45a48313114e55ab261a6379abd6fcc7fd878d05b7206210d7
cacert-fw02 IN SSHFP 1 1 3bbc40993094812db7188fc01f3dc8b89536bd69
cacert-fw02 IN SSHFP 1 2 8e0cc3bcabfed1470f82f85c9726c2f002fb8dbc8f636601a7262c7b489b7d6e
cats IN A 213.154.225.243
community IN CNAME email.cacert.org.
cats IN SSHFP 1 1 d29d4cc4662d5cb5f42c02823ca8677f05439589
cats IN SSHFP 2 1 0342eb1e7325eb90a1c0483de3d6597e36e569c8
community-vpn IN A 78.47.142.76
crl IN A 213.154.225.236
dev IN A 78.46.255.66
email IN A 213.154.225.228
email IN SSHFP 1 1 bf391fd72656a275524d1d25a624c6045b44ae90
email IN SSHFP 2 1 73b0d8acb492a7187016dd3c5fc1519b309a550f
community IN CNAME email.cacert.org.
emailout IN A 213.154.225.239
emailout IN SSHFP 1 1 07414db5fbfd102c6cd497228748df70406a642b
emailout IN SSHFP 2 1 ab2cf20c0064ea415e8d8a1e339e36e3ce27741d
eu IN A 213.154.225.242
finance IN CNAME board.cacert.org.
git IN A 213.154.225.250
git IN SSHFP 1 1 23c7622d6db5822c809152c1c0fd9ea7838f76c6
git IN SSHFP 2 1 8509db491902fe10ab84c8f24b02f10c1adf0e7f
hopper IN AAAA 2001:7b8:616:0162::100
hopper IN SSHFP 1 1 22f35bfddd356b119c1555c3bf4f86edd8ae8dfd
hopper IN SSHFP 2 1 026d7dda6753c2d8810466336fe758d37aed899d
infrastructure IN A 213.154.225.230
infrastructure IN SSHFP 1 1 5a82d3c150af002c05784f73250a067053aeed63
infrastructure IN SSHFP 2 1 af8d8e3386eaa72997709632adf2b457e6fef0dc
irc IN A 213.154.225.233
irc IN SSHFP 1 1 c123f73001682277de5346923518d17cc94e298e
irc IN SSHFP 2 1 b85941c077732f78be290b8f0b44b0a5e8a0e51d
issue IN A 213.154.225.244
l10n IN CNAME translations.cacert.org.
issue IN SSHFP 1 1 3f55e52b51d142ef9d15eeaa9ca25b3aa30c7c6e
issue IN SSHFP 2 1 fd9a5c79c4a9057b87ae8e639fd223b386af4bdb
lists IN A 213.154.225.231
lists IN SSHFP 1 1 87f75b9124326b566ed22dcf65a9740eede8f0ff
lists IN SSHFP 2 1 8d79e68e731ed72667f3d286c477245df653083b
cert.lists IN CNAME lists.cacert.org.
nocert.lists IN CNAME lists.cacert.org.
lists IN MX 10 email.cacert.org.
@ -71,32 +114,57 @@ _adsp._domainkey.lists IN TXT "dkim=all"
lists._domainkey.lists IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCs2Hu5HQpT5FWj2TrqHZwFM/h0Tc35idlBviaArkdp5fRPx402ID+pMYZZW6lVM/IJlmeTqPGO73oQyl/tFlnXWj/X8p809IFqWnKWzGKJLhnxMAZW7bmzyjR8siK3It93+s5mu9r/4pwHCW3bEbdtKartd7cud84JO15cLJYA+QIDAQAB"
mail._domainkey IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOZV5h3rm18QRiNfNnwXadX8jeSC3zjpU7GFNTfZk1ifjLxrlVrSsfAvlVfFvR2/uQXegwEkiNV5bd57d989T+VVLZZbSv+OAXX4ZwihsLkf3huDszKtJTvsybqUNh97OE00THSyJCrcowFDcLv5IN2ULCOlMjTqbZxZuaNW0S6wIDAQAB"
auto._domainkey IN TXT "v=DKIM1\;g=*\;k=rsa\;t=y\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDNFxiNr+NHJwih3OPhGr4iwLE+BBDu72YrMSzUnU1FF50CW7iOtuhg796UZ6xrZ5VuhAix6YmmzcvF2UxYzoD/XpfZ4MzBu0ND4/nkt9/YOTyIBzwQqn9uMNve0Y76Zsel89dIJtOI+y+lfnFExV0jKwe53gzmxMVpMSSCcZPGwIDAQAB" ; ----- DKIM auto for cacert.org
monitor IN CNAME infrastructure.cacert.org.
ns IN A 213.154.225.251 ; master
ns1 IN A 213.154.225.251 ; ns.cacert.org
ns1 IN AAAA 2001:7b8:616:0163::102
ns3 IN A 46.249.47.169 ; mars.overmeer.net
ns3 IN AAAA 2a00:1ca8:2a::31
ns4 IN A 213.154.224.4 ; ns-ext.nlnetlabs.nl
ns4 IN AAAA 2001:7b8:206:1::4:53
ns5 IN A 192.5.4.1 ; sns-pb.isc.org
ns5 IN AAAA 2001:500:2e::1
ocsp IN A 213.154.225.237
ocsp1 IN A 213.154.225.237
secure IN A 213.154.225.246
secure IN AAAA 2001:7b8:3:9c::246
svn IN A 213.154.225.238
svn IN SSHFP 1 1 1128972fb54f927477a781718e2f9c114e9ca383
svn IN SSHFP 2 1 3a36e5df06304c481f01fc723fd88a086e82d986
cert.svn IN CNAME svn.cacert.org.
nocert.svn IN CNAME svn.cacert.org.
test IN A 213.154.225.248
test IN SSHFP 1 1 11bcb0ab4d1fd39547426d9527b88afb8ff85209
test IN SSHFP 2 1 3414c17e5ae898b2f5db7b3ddf9e34c2f5e816ac
secure.test IN CNAME test.cacert.org.
cats.test IN CNAME test.cacert.org.
mgr.test IN CNAME test.cacert.org.
www.test IN CNAME test.cacert.org.
test2 IN A 213.154.225.249
secure.test2 IN CNAME test2.cacert.org.
www.test2 IN CNAME test2.cacert.org.
translations IN A 213.154.225.240
translations IN SSHFP 1 1 1128972fb54f927477a781718e2f9c114e9ca383
translations IN SSHFP 2 1 3a36e5df06304c481f01fc723fd88a086e82d986
l10n IN CNAME translations.cacert.org.
tverify IN A 213.154.225.247
tverify IN AAAA 2001:7b8:3:9c::247
wiki IN A 213.154.225.235
wiki IN SSHFP 1 1 5c3e0d3265782405e0141c47bf0e16ec14b12e08
wiki IN SSHFP 2 1 04f7ab767579f004cc3ab2cc42a4ccaa24e51154
www IN A 213.154.225.245
www IN AAAA 2001:7b8:3:9c::245

@ -1,16 +1,27 @@
RCS file: /var/opendnssec/unsigned/RCS/cacert.org,v
Working file: /var/opendnssec/unsigned/cacert.org
head: 1.75
head: 1.77
branch:
locks: strict
access list:
symbolic names:
keyword substitution: kv
total revisions: 75; selected revisions: 75
total revisions: 77; selected revisions: 77
description:
cacert.org - zone file for cacert.org
----------------------------
revision 1.77
date: 2014/02/08 12:20:55; author: root; state: Exp; lines: +4 -4
Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME.
Add CNAME records for www.test.cacert.org and www.test2.cacert.org per e-mail request
from Mario Lipinski on 08.02.2014.
----------------------------
revision 1.76
date: 2014/02/06 15:40:10; author: root; state: Exp; lines: +73 -5
Add SSHFP records for infrastructure hosts.
Reorganize layout for better readability and maintainability.
----------------------------
revision 1.75
date: 2014/02/06 13:43:11; author: root; state: Exp; lines: +7 -7
Remove indentation added in previous commit: it is not allowed by ods-signer.

Loading…
Cancel
Save