1
0
Fork 0
Commit Graph

20 Commits (8176bd3a30786fb84b5de18c520daa7a04ac172e)

Author SHA1 Message Date
Jan Dittberner d3de6eb830 Add AAAA RR for cacert.com and cacert.net 2 years ago
Jan Dittberner 91a49d40dc manual import from ns1.cacert.org 2 years ago
Dirk Astrath 076d4d1466 Update ns1 A and AAAA records for cacert.{com,net,org} 2 years ago
Dirk Astrath 99fcbe3e5f Change ns1/ns2 AAAA records for cacert.com 2 years ago
Dirk Astrath 5ff4fa0ad6 Update cacert.com NS records 2 years ago
Jan Dittberner 0da00703d6 Remove DNSSEC records from cacert.com, adapt NS records 2 years ago
Dirk Astrath fb36036ba8 Import nsd zone for cacert.com 2 years ago
wytze@deboca.net 1129b6e7c3 Disable ns-ext.nlnetlabs.nl for cacert.{org,com,net}.
Disable sns-pba.dm1.sns.isc.org for cacert.{com,net}.
Drop all records for ns5.cacert.{com,net} since ISC will be ending the
secondary name service on January 31, 2020.
Note: ns5.cacert.org should be dropped as well before January 31, 2020.


git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2741 14b1bab8-4ef6-0310-b690-991c95c89dfd
5 years ago
wytze@deboca.net af9fc0a42c Drop ns4.cacert.com/ns4.cacert.net secondary server.
Re-enable IPv6 address for ns3.cacert.com and ns.cacert.net..


git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2726 14b1bab8-4ef6-0310-b690-991c95c89dfd
5 years ago
wytze@deboca.net 660fb8dff6 Update CAA record to contain a valid mailto: URL.
git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2705 14b1bab8-4ef6-0310-b690-991c95c89dfd
6 years ago
wytze@deboca.net 396ec2467c Zone updates up to 25 February 2018.
git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2695 14b1bab8-4ef6-0310-b690-991c95c89dfd
7 years ago
wytze@deboca.net c2227d5a9d Upgrade to new release: 4.1.12.
Set TTL for SOA to 1 hour, and SOA expire time to 7 days, per web recommendations.


git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2685 14b1bab8-4ef6-0310-b690-991c95c89dfd
7 years ago
wytze@deboca.net ccbc0a84ca Upgrade OpenDNSSEC software to version 2.0.0-1.
git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2658 14b1bab8-4ef6-0310-b690-991c95c89dfd
8 years ago
wytze@deboca.net 5dafcb4700 ODS-NOTES: Update instructions for key rollover.
keylist: Status on 20151026 after KSK key rollover, submitting new DS hashes and issuing
     ods-ksmutil key ds-seen for the ready KSK's. The new KSK goes from ready to active,
     the old KSK from active to retire. Note that cacert.community still needs to be done.
cacert.*: Disable IPv6 address for ns3, because this host is currently lacking IPv6 connectivity.


git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2619 14b1bab8-4ef6-0310-b690-991c95c89dfd
9 years ago
wytze@deboca.net 3a45494988 Update IPv4 and IPv6 addresses for ns4.cacert.org aka ns-ext.nlnetlabs.nl.
git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2582 14b1bab8-4ef6-0310-b690-991c95c89dfd
10 years ago
wytze@deboca.net 8d476903f2 Add new (signed) zone cacert.community.
Add zone file for reverse IPv4 for CAcert 213.154.225.224/27.
Add IPv6 address for ns1.cacert.com and ns1.cacert.net.
Drop obsolete dlv record.


git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2561 14b1bab8-4ef6-0310-b690-991c95c89dfd
10 years ago
wytze@deboca.net d35d204bed Update A and AAAA records for ns3 after server migration of mars.overmeer.net.
git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2502 14b1bab8-4ef6-0310-b690-991c95c89dfd
11 years ago
wytze@deboca.net 9da4b0b01b Drop nameserver ns2 because it will be taken out of service soon.
A corresponding change has already been made in the GKG.NET registry.
Drop newsys.gun.de secondary nameserver for cacert.{org,net,com} because it
will be taken out of service soon, and drop its TSIG key as well.
Add temporary experimental A and AAAA records for wwwdb and securedb,
as part of the migration of CAcert's main webserver to new hardware.


git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2482 14b1bab8-4ef6-0310-b690-991c95c89dfd
12 years ago
wytze@deboca.net aeb3bc5df4 Reduce SOA expiration timer from 1 week to 2 days, in order to comply with a
recommendation made in RFC 4641bis: the SOA expiration timer should be between
1/4th and 1/3rd of the size of the signature validity period (1 week at CAcert).


git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2370 14b1bab8-4ef6-0310-b690-991c95c89dfd
13 years ago
wytze@deboca.net 3f4424d7b6 Add software configuration for CAcert ns server.
The primary revision control is kept in RCS on the actual server,
but the RCS logs of that server are also kept in this svn repository.


git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2323 14b1bab8-4ef6-0310-b690-991c95c89dfd
13 years ago