Jan Dittberner
9cb7ac6da6
Update infra02 SSH host keys
...
- remove DSA key
- add ED25519 key
1 year ago
Jan Dittberner
ee97f88832
Merge pull request 'clean-cacert-org-zones' ( #9 ) from clean-cacert-org-zone into main
...
Reviewed-on: critical/dns-zones#9
1 year ago
Jan Dittberner
992d534697
Tighten SPF record
...
PowerDNS cuts TXT records at 255 chars
(https://doc.powerdns.com/authoritative/appendices/types.html#txt ). This
commit reduces the size by using mx and a SPF policy entries.
1 year ago
Jan Dittberner
17106f7c86
Fix forward and reverse entries
...
- add missing AAAA records in cacert.org
- add missing PTR records in IPv6 reverse zone
- remove broken PTR records in IPv6 reverse zone
- fix SPF records
2 years ago
Jan Dittberner
1f976e4d65
Sort reverse DNS zones
2 years ago
Jan Dittberner
302a6d26f5
Sort and clean zone cacert.org
2 years ago
Jan Dittberner
b1891e9a5b
Merge pull request 'Fix warnings from pdnsutil check-all-zones' ( #6 ) from fix-pdnsutil-check-zone-warnings into main
...
Reviewed-on: critical/dns-zones#6
Reviewed-by: Dirk Astrath <dirk@cacert.org>
2 years ago
Jan Dittberner
87e24a3b41
Merge branch 'main' into fix-pdnsutil-check-zone-warnings
2 years ago
Jan Dittberner
a3a661bfe2
Merge pull request 'Remove services that are not available anymore' ( #7 ) from remove-dead-services into main
...
Reviewed-on: critical/dns-zones#7
Reviewed-by: Dirk Astrath <dirk@cacert.org>
2 years ago
Jan Dittberner
7744e78659
Remove services that are not available anymore
2 years ago
Jan Dittberner
50d3959257
Fix warnings from pdnsutil check-all-zones
2 years ago
Jan Dittberner
1d6b970a6a
Merge pull request 'add-secondary-ns-support' ( #5 ) from add-secondary-ns-support into main
...
Reviewed-on: critical/dns-zones#5
Reviewed-by: Dirk Astrath <dirk@cacert.org>
2 years ago
Jan Dittberner
2c896a85ac
Add support for secondary nameservers
...
Fixes #4
2 years ago
Jan Dittberner
5f7fb5235d
Remove the import_zone script
...
This commit removes the older import_zone script to avoid accidential
usage.
2 years ago
Jan Dittberner
3698bb4e53
Add README.md with usage documentation
2 years ago
Jan Dittberner
f70ee9f182
Merge pull request 'Add AAAA RR for cacert.com and cacert.net' ( #3 ) from add-missing-aaaa-records into main
...
Reviewed-on: critical/dns-zones#3
2 years ago
Jan Dittberner
d3de6eb830
Add AAAA RR for cacert.com and cacert.net
2 years ago
Jan Dittberner
91a49d40dc
manual import from ns1.cacert.org
2 years ago
Jan Dittberner
11b092beb0
Use git branch -D for reference_branch
...
This commit allows the use of a reference_branch that is not merged into
the current working directory.
Imports have been sorted by isort
2 years ago
Jan Dittberner
424bd7954f
Use sendmail instead of SMTP
...
- remove the SMTP requirement to be able to work with /usr/lib/sendmail
instead
- use f-strings where appropriate to improve readability
- use text-parameter to subprocess.run to avoid extra decode calls
2 years ago
Jan Dittberner
d93300732b
Implement update-zones.py to update zones from git
...
- ignore temporary files and Python bytecode
- add update-zones.py
2 years ago
Jan Dittberner
f70a11c863
Fix warnings from pdnsutil check-zone
...
This commit removes explicit DNSKEY entries and invalid names from the
cacert.org zone.
2 years ago
Jan Dittberner
976a391df2
Use delegated 224-27.225.154.213.in-addr.arpa zone
2 years ago
Dirk Astrath
1b231b8fb5
Add import_zone script from NS2
...
Signed-off-by: Jan Dittberner <jandd@cacert.org>
2 years ago
Dirk Astrath
143cc348cb
Remove ns3, and ocsp1 from cacert.org.
...
Signed-off-by: Jan Dittberner <jandd@cacert.org>
2 years ago
Dirk Astrath
076d4d1466
Update ns1 A and AAAA records for cacert.{com,net,org}
2 years ago
Dirk Astrath
8d1f2e0117
Update from ns2.cacert.org
2 years ago
Dirk Astrath
8f11930cf1
Switch crl.cacert.org back to critical, add crl_egal
2 years ago
Dirk Astrath
7f3670760f
Add ping.cacert.org AAAA, remove webdb.cacert.org
2 years ago
Dirk Astrath
6cbd6f92a6
Add AAAA record for webdb.cacert.org
2 years ago
Dirk Astrath
6b9aa5cced
Change AAAA record of crl.cacert.org
2 years ago
Dirk Astrath
690dffbaac
Update crl servers for cacert.org
...
- add crl2
- move crl to external address
2 years ago
Dirk Astrath
493baa3a57
Update cacert.org AAAA records for ns1 and ns2
2 years ago
Dirk Astrath
4659cac454
Add code.cacert.org and pgsql.cacert.org
2 years ago
Dirk Astrath
f7b19773ff
Update cacert.org NS records
2 years ago
Dirk Astrath
8eb1b378c9
Sort SSHFP for hopper.cacert.org
2 years ago
Dirk Astrath
cd11540381
Convert cacert.org to PowerDNS format
2 years ago
Dirk Astrath
11f67755b2
Change cacert.net AAAA for ns1 and ns2
2 years ago
Dirk Astrath
0961327761
Change NS records for cacert.net
2 years ago
Dirk Astrath
ff17ba99ce
Convert cacert.net for PowerDNS
...
- change zone syntax to absolute names
- add ns2, ns4, ns5
2 years ago
Jan Dittberner
10c93e9cbb
Remove cacert.community
2 years ago
Dirk Astrath
99fcbe3e5f
Change ns1/ns2 AAAA records for cacert.com
2 years ago
Dirk Astrath
5ff4fa0ad6
Update cacert.com NS records
2 years ago
Jan Dittberner
0da00703d6
Remove DNSSEC records from cacert.com, adapt NS records
2 years ago
Dirk Astrath
fb36036ba8
Import nsd zone for cacert.com
2 years ago
Dirk Astrath
91fbc3f21c
Re-order IPv6 reverse DNS records
2 years ago
Dirk Astrath
7742926d51
Add IPv6 PTR records for www.cacert.org
2 years ago
Dirk Astrath
a0aa862a32
Bump IPv6 reverse SOA serial
2 years ago
Dirk Astrath
886b2a1f3c
Switch IPv6 reverse zone to PowerDNS syntax
2 years ago
Dirk Astrath
dce203320e
Update IPv4 reverse zone
2 years ago
