Compare commits

...

5 commits

Author SHA1 Message Date
d09d38a794 Disable DKIM records
Disabling DKIM as email/lists servers do not currently sign outgoing emails with DKIM. If they are ever updated with DKIM support in the future, please enable DKIM again. Perhaps, it'll be necessary to create new DKIM records, and not just enable the old.
2024-03-29 15:51:16 +00:00
8176bd3a30 Merge pull request 'Add missing NS record for ns3.cacert.org' (#19) from add-ns-record-for-ns3 into main
Reviewed-on: critical/dns-zones#19
Reviewed-by: Dirk Astrath <dirk@cacert.org>
2024-02-07 12:41:05 +00:00
c181887cec Add missing NS record for ns3.cacert.org 2024-02-07 13:36:17 +01:00
04125bf2f3 Merge pull request 'Fix changed ns3 and ns4 AAAA records' (#18) from fix-ns3-ns4-aaaa-records into main
Reviewed-on: critical/dns-zones#18
Reviewed-by: Dirk Astrath <dirk@cacert.org>
2024-02-07 12:19:40 +00:00
9de5285a08 Fix changed ns3 and ns4 AAAA records
This commit exchanges the AAAA records of ns3 and ns4. Dirk reported
that they are in the wrong order.
2023-11-11 19:48:55 +01:00

View file

@ -14,17 +14,19 @@ cacert.org 43200 IN CAA 0 iodef "mailto:critical-admin@cacert.org"
cacert.org 43200 IN MX 10 email.cacert.org.
cacert.org 43200 IN NS ns1.cacert.org.
cacert.org 43200 IN NS ns5.cacert.org.
cacert.org 43200 IN NS ns2.cacert.org.
cacert.org 43200 IN NS ns3.cacert.org.
cacert.org 43200 IN NS ns4.cacert.org.
cacert.org 43200 IN NS ns5.cacert.org.
; SPF and DKIM
; SPF allows www, secure, www1, email, infra02, emailout, ping
cacert.org 43200 IN TXT "v=spf1 a mx a:emailout.cacert.org a:secure.cacert.org a:www1.cacert.org ip4:213.154.225.230 ip6:2001:7b8:616:162:1::10 ip6:2001:7b8:616:28:50::11 -all"
auto._domainkey.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDNFxiNr+NHJwih3OPhGr4iwLE+BBDu72YrMSzUnU1FF50CW7iOtuhg796UZ6xrZ5VuhAix6YmmzcvF2UxYzoD/XpfZ4MzBu0ND4/nkt9/YOTyIBzwQqn9uMNve0Y76Zsel89dIJtOI+y+lfnFExV0jKwe53gzmxMVpMSSCcZPGwIDAQAB"
mail._domainkey.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOZV5h3rm18QRiNfNnwXadX8jeSC3zjpU7GFNTfZk1ifjLxrlVrSsfAvlVfFvR2/uQXegwEkiNV5bd57d989T+VVLZZbSv+OAXX4ZwihsLkf3huDszKtJTvsybqUNh97OE00THSyJCrcowFDcLv5IN2ULCOlMjTqbZxZuaNW0S6wIDAQAB"
_adsp._domainkey.cacert.org 43200 IN TXT "dkim=unknown"
; Disabling DKIM as email server does not currently sign outgoing emails with DKIM
; auto._domainkey.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDNFxiNr+NHJwih3OPhGr4iwLE+BBDu72YrMSzUnU1FF50CW7iOtuhg796UZ6xrZ5VuhAix6YmmzcvF2UxYzoD/XpfZ4MzBu0ND4/nkt9/YOTyIBzwQqn9uMNve0Y76Zsel89dIJtOI+y+lfnFExV0jKwe53gzmxMVpMSSCcZPGwIDAQAB"
; mail._domainkey.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOZV5h3rm18QRiNfNnwXadX8jeSC3zjpU7GFNTfZk1ifjLxrlVrSsfAvlVfFvR2/uQXegwEkiNV5bd57d989T+VVLZZbSv+OAXX4ZwihsLkf3huDszKtJTvsybqUNh97OE00THSyJCrcowFDcLv5IN2ULCOlMjTqbZxZuaNW0S6wIDAQAB"
; _adsp._domainkey.cacert.org 43200 IN TXT "dkim=unknown"
; certificate fingerprints
_certs.g1._fp.cacert.org 43200 IN TXT "root_X0F class3_2021"
@ -281,8 +283,9 @@ lists.cacert.org 43200 IN TXT "v=spf1 ip4:213.154.225.231 ip6:2001:7b8:616:162:2
cert.lists.cacert.org 43200 IN CNAME lists.cacert.org.
nocert.lists.cacert.org 43200 IN CNAME lists.cacert.org.
_adsp._domainkey.lists.cacert.org 43200 IN TXT "dkim=all"
lists._domainkey.lists.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCs2Hu5HQpT5FWj2TrqHZwFM/h0Tc35idlBviaArkdp5fRPx402ID+pMYZZW6lVM/IJlmeTqPGO73oQyl/tFlnXWj/X8p809IFqWnKWzGKJLhnxMAZW7bmzyjR8siK3It93+s5mu9r/4pwHCW3bEbdtKartd7cud84JO15cLJYA+QIDAQAB"
; Disabling DKIM as lists server does not currently sign outgoing emails with DKIM
; _adsp._domainkey.lists.cacert.org 43200 IN TXT "dkim=all"
; lists._domainkey.lists.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCs2Hu5HQpT5FWj2TrqHZwFM/h0Tc35idlBviaArkdp5fRPx402ID+pMYZZW6lVM/IJlmeTqPGO73oQyl/tFlnXWj/X8p809IFqWnKWzGKJLhnxMAZW7bmzyjR8siK3It93+s5mu9r/4pwHCW3bEbdtKartd7cud84JO15cLJYA+QIDAQAB"
; internal MariaDB service
mariadb.cacert.org 43200 IN AAAA 2001:7b8:616:162:3::11
@ -333,9 +336,9 @@ ns1.cacert.org 43200 IN AAAA 2001:7b8:616:163::102
ns2.cacert.org 43200 IN A 213.154.225.237
ns2.cacert.org 43200 IN AAAA 2001:7b8:616:163::202
ns3.cacert.org 43200 IN A 46.249.47.169
ns3.cacert.org 43200 IN AAAA 2001:19f0:4400:407d::1313
ns3.cacert.org 43200 IN AAAA 2a00:1ca8:2a::31
ns4.cacert.org 43200 IN A 45.77.40.159
ns4.cacert.org 43200 IN AAAA 2a00:1ca8:2a::31
ns4.cacert.org 43200 IN AAAA 2001:19f0:4400:407d::1313
ns5.cacert.org 43200 IN A 167.86.117.119
ns5.cacert.org 43200 IN AAAA 2a02:c207:3004:6195::1