Jan Dittberner
565c2881b0
Add appregistration and idp records
...
Add records for appregistration.cacert.org and idp.cacert.org that are
meant to be used for the IDP (Identity Provider) and application
registration parts of the OpenID Connect/OAuth2 setup.
1 year ago
Jan Dittberner
d79167a436
Add authserver records
1 year ago
Jan Dittberner
ee97f88832
Merge pull request 'clean-cacert-org-zones' ( #9 ) from clean-cacert-org-zone into main
...
Reviewed-on: critical/dns-zones#9
1 year ago
Jan Dittberner
992d534697
Tighten SPF record
...
PowerDNS cuts TXT records at 255 chars
(https://doc.powerdns.com/authoritative/appendices/types.html#txt ). This
commit reduces the size by using mx and a SPF policy entries.
1 year ago
Jan Dittberner
17106f7c86
Fix forward and reverse entries
...
- add missing AAAA records in cacert.org
- add missing PTR records in IPv6 reverse zone
- remove broken PTR records in IPv6 reverse zone
- fix SPF records
2 years ago
Jan Dittberner
1f976e4d65
Sort reverse DNS zones
2 years ago
Jan Dittberner
302a6d26f5
Sort and clean zone cacert.org
2 years ago
Jan Dittberner
b1891e9a5b
Merge pull request 'Fix warnings from pdnsutil check-all-zones' ( #6 ) from fix-pdnsutil-check-zone-warnings into main
...
Reviewed-on: critical/dns-zones#6
Reviewed-by: Dirk Astrath <dirk@cacert.org>
2 years ago
Jan Dittberner
87e24a3b41
Merge branch 'main' into fix-pdnsutil-check-zone-warnings
2 years ago
Jan Dittberner
a3a661bfe2
Merge pull request 'Remove services that are not available anymore' ( #7 ) from remove-dead-services into main
...
Reviewed-on: critical/dns-zones#7
Reviewed-by: Dirk Astrath <dirk@cacert.org>
2 years ago
Jan Dittberner
7744e78659
Remove services that are not available anymore
2 years ago
Jan Dittberner
50d3959257
Fix warnings from pdnsutil check-all-zones
2 years ago
Jan Dittberner
1d6b970a6a
Merge pull request 'add-secondary-ns-support' ( #5 ) from add-secondary-ns-support into main
...
Reviewed-on: critical/dns-zones#5
Reviewed-by: Dirk Astrath <dirk@cacert.org>
2 years ago
Jan Dittberner
2c896a85ac
Add support for secondary nameservers
...
Fixes #4
2 years ago
Jan Dittberner
5f7fb5235d
Remove the import_zone script
...
This commit removes the older import_zone script to avoid accidential
usage.
2 years ago
Jan Dittberner
3698bb4e53
Add README.md with usage documentation
2 years ago
Jan Dittberner
f70ee9f182
Merge pull request 'Add AAAA RR for cacert.com and cacert.net' ( #3 ) from add-missing-aaaa-records into main
...
Reviewed-on: critical/dns-zones#3
2 years ago
Jan Dittberner
d3de6eb830
Add AAAA RR for cacert.com and cacert.net
2 years ago
Jan Dittberner
91a49d40dc
manual import from ns1.cacert.org
2 years ago
Jan Dittberner
11b092beb0
Use git branch -D for reference_branch
...
This commit allows the use of a reference_branch that is not merged into
the current working directory.
Imports have been sorted by isort
2 years ago
Jan Dittberner
424bd7954f
Use sendmail instead of SMTP
...
- remove the SMTP requirement to be able to work with /usr/lib/sendmail
instead
- use f-strings where appropriate to improve readability
- use text-parameter to subprocess.run to avoid extra decode calls
2 years ago
Jan Dittberner
d93300732b
Implement update-zones.py to update zones from git
...
- ignore temporary files and Python bytecode
- add update-zones.py
2 years ago
Jan Dittberner
f70a11c863
Fix warnings from pdnsutil check-zone
...
This commit removes explicit DNSKEY entries and invalid names from the
cacert.org zone.
2 years ago
Jan Dittberner
976a391df2
Use delegated 224-27.225.154.213.in-addr.arpa zone
2 years ago
Dirk Astrath
1b231b8fb5
Add import_zone script from NS2
...
Signed-off-by: Jan Dittberner <jandd@cacert.org>
2 years ago
Dirk Astrath
143cc348cb
Remove ns3, and ocsp1 from cacert.org.
...
Signed-off-by: Jan Dittberner <jandd@cacert.org>
2 years ago
Dirk Astrath
076d4d1466
Update ns1 A and AAAA records for cacert.{com,net,org}
2 years ago
Dirk Astrath
8d1f2e0117
Update from ns2.cacert.org
2 years ago
Dirk Astrath
8f11930cf1
Switch crl.cacert.org back to critical, add crl_egal
2 years ago
Dirk Astrath
7f3670760f
Add ping.cacert.org AAAA, remove webdb.cacert.org
2 years ago
Dirk Astrath
6cbd6f92a6
Add AAAA record for webdb.cacert.org
2 years ago
Dirk Astrath
6b9aa5cced
Change AAAA record of crl.cacert.org
2 years ago
Dirk Astrath
690dffbaac
Update crl servers for cacert.org
...
- add crl2
- move crl to external address
2 years ago
Dirk Astrath
493baa3a57
Update cacert.org AAAA records for ns1 and ns2
2 years ago
Dirk Astrath
4659cac454
Add code.cacert.org and pgsql.cacert.org
2 years ago
Dirk Astrath
f7b19773ff
Update cacert.org NS records
2 years ago
Dirk Astrath
8eb1b378c9
Sort SSHFP for hopper.cacert.org
2 years ago
Dirk Astrath
cd11540381
Convert cacert.org to PowerDNS format
2 years ago
Dirk Astrath
11f67755b2
Change cacert.net AAAA for ns1 and ns2
2 years ago
Dirk Astrath
0961327761
Change NS records for cacert.net
2 years ago
Dirk Astrath
ff17ba99ce
Convert cacert.net for PowerDNS
...
- change zone syntax to absolute names
- add ns2, ns4, ns5
2 years ago
Jan Dittberner
10c93e9cbb
Remove cacert.community
2 years ago
Dirk Astrath
99fcbe3e5f
Change ns1/ns2 AAAA records for cacert.com
2 years ago
Dirk Astrath
5ff4fa0ad6
Update cacert.com NS records
2 years ago
Jan Dittberner
0da00703d6
Remove DNSSEC records from cacert.com, adapt NS records
2 years ago
Dirk Astrath
fb36036ba8
Import nsd zone for cacert.com
2 years ago
Dirk Astrath
91fbc3f21c
Re-order IPv6 reverse DNS records
2 years ago
Dirk Astrath
7742926d51
Add IPv6 PTR records for www.cacert.org
2 years ago
Dirk Astrath
a0aa862a32
Bump IPv6 reverse SOA serial
2 years ago
Dirk Astrath
886b2a1f3c
Switch IPv6 reverse zone to PowerDNS syntax
2 years ago
