forked from critical/dns-zones
76cdf889a6
The bind 9.11.2 contained in that release appears to be incompatible with respect to TSIG handling with our NSD 4.1.12. Note that bind 9,9 and bind 9.10 work just fine ... Upgrade nsd to new release: 4.1.23. Update IPv6 address for hopper.cacert.org. git-svn-id: http://svn.cacert.org/CAcert/SystemAdministration/ns/var/opendnssec/unsigned@2714 14b1bab8-4ef6-0310-b690-991c95c89dfd
550 lines
24 KiB
Text
550 lines
24 KiB
Text
|
|
RCS file: /var/opendnssec/unsigned/RCS/cacert.org,v
|
|
Working file: /var/opendnssec/unsigned/cacert.org
|
|
head: 1.116
|
|
branch:
|
|
locks: strict
|
|
access list:
|
|
symbolic names:
|
|
keyword substitution: kv
|
|
total revisions: 116; selected revisions: 116
|
|
description:
|
|
cacert.org - zone file for cacert.org
|
|
----------------------------
|
|
revision 1.116
|
|
date: 2018/06/25 15:35:40; author: root; state: Exp; lines: +3 -3
|
|
Update IPv6 address for hopper.cacert.org.
|
|
----------------------------
|
|
revision 1.115
|
|
date: 2018/05/02 12:48:09; author: root; state: Exp; lines: +3 -3
|
|
Update CAA record to contain a valid mailto: URL.
|
|
----------------------------
|
|
revision 1.114
|
|
date: 2018/04/16 06:34:32; author: root; state: Exp; lines: +3 -2
|
|
Add IPv6 address for translations.cacert.org per e-mail request from Jan Dittberner on 15.04.2018.
|
|
----------------------------
|
|
revision 1.113
|
|
date: 2018/04/07 07:00:00; author: root; state: Exp; lines: +3 -2
|
|
Add IPv6 address for bugs.cacert.org per e-mail request from Jan Dittberrner on 06.04.2018.
|
|
----------------------------
|
|
revision 1.112
|
|
date: 2018/04/03 13:31:39; author: root; state: Exp; lines: +11 -4
|
|
Addd AAAA and update SSHFP records for irc per e-mail request from Jan Dittberner on 03.04.2018.
|
|
----------------------------
|
|
revision 1.111
|
|
date: 2018/02/26 11:13:28; author: root; state: Exp; lines: +3 -2
|
|
Add A record for proxyout per e-mail from Jan Dittbernet of 25.02.2018.
|
|
----------------------------
|
|
revision 1.110
|
|
date: 2018/02/25 09:19:36; author: root; state: Exp; lines: +58 -24
|
|
Tons of changes per e-mail request from Jan Dittberner on 24.02.2018.
|
|
----------------------------
|
|
revision 1.109
|
|
date: 2018/02/18 14:30:49; author: root; state: Exp; lines: +8 -10
|
|
Various changes for infrastructure hosts per e-mail request from Jan Dittberrer on 17.02.2018.
|
|
----------------------------
|
|
revision 1.108
|
|
date: 2018/02/16 08:04:12; author: root; state: Exp; lines: +14 -4
|
|
Add SHA256, ED25519 and ECDSA SSHFP records for blog.cacert.org.
|
|
Add SHA256, ED25519 and ECDSA SSHFP records for bugs.cacert.org.
|
|
Remove records for coaudit.
|
|
(e-mail request from Jan Dittberner on 15.02.2018)
|
|
----------------------------
|
|
revision 1.107
|
|
date: 2018/02/15 15:57:21; author: root; state: Exp; lines: +2 -6
|
|
Drop all records for arbitrations.cacert.org per e-mail request
|
|
from Jan Dittberner on 15.02.2018.
|
|
----------------------------
|
|
revision 1.106
|
|
date: 2018/02/15 10:07:23; author: root; state: Exp; lines: +4 -2
|
|
Add SSHFP records for new ED25519 SSH host key on git.cacert.org
|
|
per e-mail request from Jan Dittberner on 14.02.2018.
|
|
----------------------------
|
|
revision 1.105
|
|
date: 2017/09/29 13:36:39; author: root; state: Exp; lines: +6 -2
|
|
Add CAA records.
|
|
----------------------------
|
|
revision 1.104
|
|
date: 2016/10/12 07:18:06; author: root; state: Exp; lines: +4 -4
|
|
Set TTL for SOA to 1 hour, and SOA expire time to 7 days, per web recommendations.
|
|
----------------------------
|
|
revision 1.103
|
|
date: 2016/08/03 10:44:12; author: root; state: Exp; lines: +8 -8
|
|
Update SSHFP records for hopper after migration to OpenSUSE 13.2.
|
|
----------------------------
|
|
revision 1.102
|
|
date: 2016/07/16 14:42:49; author: root; state: Exp; lines: +2 -2
|
|
Update serial number to force OpenDNSSEC 2.0.0-1 to use a higher serial number.
|
|
----------------------------
|
|
revision 1.101
|
|
date: 2016/07/02 13:13:50; author: root; state: Exp; lines: +6 -2
|
|
Add additional SSHFP records for git.cacert.org.
|
|
----------------------------
|
|
revision 1.100
|
|
date: 2016/05/06 09:29:27; author: root; state: Exp; lines: +4 -2
|
|
Add CNAME for infradocs.cacert,org pointing to webstatic.cacert.org, per e-mail request
|
|
from Jan Dittberner on 05.05.2016.
|
|
----------------------------
|
|
revision 1.99
|
|
date: 2015/12/07 09:57:52; author: root; state: Exp; lines: +5 -5
|
|
Update TLSA parameters for policy.cacert.org to something that hopefully works.
|
|
----------------------------
|
|
revision 1.98
|
|
date: 2015/12/07 09:51:00; author: root; state: Exp; lines: +9 -2
|
|
Add CNAME and TLSA records for policy.cacert.org and subdomains, per e-mail request
|
|
from Benny Baumann on 06.12.2015.
|
|
----------------------------
|
|
revision 1.97
|
|
date: 2015/11/30 08:29:16; author: root; state: Exp; lines: +6 -2
|
|
Add additional SSHFP records for cats.cacert.org.
|
|
----------------------------
|
|
revision 1.96
|
|
date: 2015/10/26 14:49:58; author: root; state: Exp; lines: +3 -3
|
|
Disable IPv6 address for ns3, because this host is currently lacking IPv6 connectivity.
|
|
----------------------------
|
|
revision 1.95
|
|
date: 2015/05/26 15:12:10; author: root; state: Exp; lines: +8 -8
|
|
Clean up fingerprints by dropping internal colons.
|
|
----------------------------
|
|
revision 1.94
|
|
date: 2015/05/26 14:56:50; author: root; state: Exp; lines: +13 -2
|
|
Add RRs with fingerprints for CAcert root certificates (generated by cacert-fingerprints-to-dns).
|
|
----------------------------
|
|
revision 1.93
|
|
date: 2015/05/12 13:17:05; author: root; state: Exp; lines: +18 -18
|
|
Update SSHFP records for cacert-fw01 and cacert-fw02 after upgrading firewall OS to OpenBSD 5.7.
|
|
----------------------------
|
|
revision 1.92
|
|
date: 2015/02/05 08:03:40; author: root; state: Exp; lines: +10 -2
|
|
Add A and SSHFP records for jenkins.cacert.org per e-mail request from Jan Dittberner.
|
|
----------------------------
|
|
revision 1.91
|
|
date: 2015/02/03 08:13:56; author: root; state: Exp; lines: +8 -4
|
|
Update SSHFP records for emailout per e-mail from Jan Dittberner on 02.02.2015.
|
|
----------------------------
|
|
revision 1.90
|
|
date: 2015/01/28 14:22:19; author: root; state: Exp; lines: +18 -2
|
|
Add A and SSHFP records for web, funding, webstatic per e-mail request from Jan Dittberner.
|
|
See also https://bugs.cacert.org/view.php?id=1363 for details about the shared IP setup.
|
|
----------------------------
|
|
revision 1.89
|
|
date: 2015/01/09 09:59:38; author: root; state: Exp; lines: +3 -3
|
|
Update IPv4 address for openppm.cacert.org per e-mail from Benedikt Heintel 08.01.2015.
|
|
----------------------------
|
|
revision 1.88
|
|
date: 2014/11/13 13:38:34; author: root; state: Exp; lines: +18 -14
|
|
Update SSHFP records for cacert-fw01 and cacert-fw02 after upgrading firewall OS to OpenBSD 5.6.
|
|
----------------------------
|
|
revision 1.87
|
|
date: 2014/09/17 14:37:45; author: root; state: Exp; lines: +4 -4
|
|
Update IPv4 and IPv6 addresses for ns4.cacert.org (ns-ext.nlnetlabs.nl).
|
|
----------------------------
|
|
revision 1.86
|
|
date: 2014/09/02 13:27:42; author: root; state: Exp; lines: +7 -2
|
|
Add A record for hopper.
|
|
Add additional SSHFP records for hopper.
|
|
----------------------------
|
|
revision 1.85
|
|
date: 2014/08/24 08:58:27; author: root; state: Exp; lines: +4 -3
|
|
Add IPv6 address for ocsp.cacert.org (replacing the experimental ocsp-ipv6 RR).
|
|
----------------------------
|
|
revision 1.84
|
|
date: 2014/08/09 14:43:05; author: root; state: Exp; lines: +3 -2
|
|
Add IPv6 address for crl.cacert.org.
|
|
----------------------------
|
|
revision 1.83
|
|
date: 2014/07/22 09:34:28; author: root; state: Exp; lines: +4 -2
|
|
Add TLSA record for www.cacert.org and secure.cacert.org.
|
|
This supports effective use of the DNSSEC/TLSA Validator browser plugin
|
|
available from CZ.NIC Labs.
|
|
The records have been created with https://www.huque.com/bin/gen_tlsa
|
|
using these parameters:
|
|
certificate usage: DANE-TA (2) trust anchor
|
|
selector: full cert (0)
|
|
matching type: exact match (0)
|
|
certificate: https://www.cacert.org/certs/root.der
|
|
----------------------------
|
|
revision 1.82
|
|
date: 2014/06/10 13:03:07; author: root; state: Exp; lines: +11 -2
|
|
Add resource records for critmon.cacert.org.
|
|
----------------------------
|
|
revision 1.81
|
|
date: 2014/06/01 07:40:21; author: root; state: Exp; lines: +4 -6
|
|
Drop A records for audit.cacert.org and dev.cacert.org (no longer existing) and
|
|
add A record for openppm.cacert.org, per e-mail request from Benedik Heintel on
|
|
June 1, 2014.
|
|
----------------------------
|
|
revision 1.80
|
|
date: 2014/05/30 15:29:52; author: root; state: Exp; lines: +6 -2
|
|
Add some missing SSHFP records for infrastructure.cacert.org.
|
|
----------------------------
|
|
revision 1.79
|
|
date: 2014/04/07 14:12:09; author: root; state: Exp; lines: +3 -2
|
|
Add experimental AAAA record for ocsp-ipv6.cacert.org.
|
|
----------------------------
|
|
revision 1.78
|
|
date: 2014/02/23 20:39:43; author: root; state: Exp; lines: +6 -2
|
|
Add two CNAME records per e-mail request from Mario Lipinski on 23.02.2014.
|
|
----------------------------
|
|
revision 1.77
|
|
date: 2014/02/08 12:20:55; author: root; state: Exp; lines: +4 -4
|
|
Remove SSHFP records for monitor.cacert.org, because they are illegal: monitor is a CNAME.
|
|
Add CNAME records for www.test.cacert.org and www.test2.cacert.org per e-mail request
|
|
from Mario Lipinski on 08.02.2014.
|
|
----------------------------
|
|
revision 1.76
|
|
date: 2014/02/06 15:40:10; author: root; state: Exp; lines: +73 -5
|
|
Add SSHFP records for infrastructure hosts.
|
|
Reorganize layout for better readability and maintainability.
|
|
----------------------------
|
|
revision 1.75
|
|
date: 2014/02/06 13:43:11; author: root; state: Exp; lines: +7 -7
|
|
Remove indentation added in previous commit: it is not allowed by ods-signer.
|
|
----------------------------
|
|
revision 1.74
|
|
date: 2014/02/06 13:37:58; author: root; state: Exp; lines: +9 -5
|
|
Name changes per e-mail request from Mario Lipinski on 05.02.2014.
|
|
----------------------------
|
|
revision 1.73
|
|
date: 2014/01/29 13:24:18; author: root; state: Exp; lines: +6 -2
|
|
Add four new infrastructure systems.
|
|
----------------------------
|
|
revision 1.72
|
|
date: 2014/01/27 16:03:20; author: root; state: Exp; lines: +3 -2
|
|
Add AAAA record for ns1.cacert.org.
|
|
----------------------------
|
|
revision 1.71
|
|
date: 2014/01/25 16:50:15; author: root; state: Exp; lines: +4 -2
|
|
Add SSHFP records for hopper.
|
|
----------------------------
|
|
revision 1.70
|
|
date: 2014/01/25 16:46:14; author: root; state: Exp; lines: +3 -2
|
|
Add IPv6 address for hopper.cacert.org.
|
|
----------------------------
|
|
revision 1.69
|
|
date: 2014/01/23 15:37:34; author: root; state: Exp; lines: +3 -2
|
|
Add A record for eu.cacert.org (which is actually cacert.eu),
|
|
to show that the IPv4 address in our range is taken.
|
|
----------------------------
|
|
revision 1.68
|
|
date: 2013/12/20 16:04:43; author: root; state: Exp; lines: +2 -4
|
|
Drop wwwmail (mail name for www server) from the DNS.
|
|
----------------------------
|
|
revision 1.67
|
|
date: 2013/12/17 16:27:00; author: root; state: Exp; lines: +10 -9
|
|
Updates requested by Mario Lipinski (e-mail 14.12.2013).
|
|
----------------------------
|
|
revision 1.66
|
|
date: 2013/12/11 15:47:08; author: root; state: Exp; lines: +14 -2
|
|
Add SSHFP records for cacert-fw01 and cacert-fw02.
|
|
----------------------------
|
|
revision 1.65
|
|
date: 2013/12/09 13:52:36; author: root; state: Exp; lines: +8 -2
|
|
Add address records for cacert-fw, cacert-fw01 and cacert-fw02.
|
|
----------------------------
|
|
revision 1.64
|
|
date: 2013/11/27 16:37:59; author: root; state: Exp; lines: +3 -3
|
|
Update TXT spf1 record for blog.cacert.org.
|
|
----------------------------
|
|
revision 1.63
|
|
date: 2013/10/26 19:53:08; author: root; state: Exp; lines: +3 -3
|
|
Include more addresses in SPF record for cacert.org, since the mail probes
|
|
from the web server may come from different addresses (sad but true).
|
|
----------------------------
|
|
revision 1.62
|
|
date: 2013/10/24 15:45:16; author: root; state: Exp; lines: +3 -2
|
|
Add SPF record for cacert.org.
|
|
----------------------------
|
|
revision 1.61
|
|
date: 2013/06/01 08:55:22; author: root; state: Exp; lines: +4 -4
|
|
Update A and AAAA records for ns3 after server migration of mars.overmeer.net.
|
|
----------------------------
|
|
revision 1.60
|
|
date: 2013/05/14 10:37:19; author: root; state: Exp; lines: +2 -7
|
|
Drop obsolete name 'hlin' from the cacert.org zone.
|
|
Drop wwwdb and securedb entries which were added for testing new web server.
|
|
----------------------------
|
|
revision 1.59
|
|
date: 2013/03/17 10:19:32; author: root; state: Exp; lines: +2 -5
|
|
Drop nameserver ns2 because it will be taken out of service soon.
|
|
A corresponding change has already been made in the GKG.NET registry.
|
|
----------------------------
|
|
revision 1.58
|
|
date: 2013/02/27 16:02:23; author: root; state: Exp; lines: +6 -2
|
|
Add temporary experimental A and AAAA records for wwwdb and securedb,
|
|
as part of the migration of CAcert's main webserver to new hardware.
|
|
----------------------------
|
|
revision 1.57
|
|
date: 2012/06/12 15:06:45; author: root; state: Exp; lines: +3 -3
|
|
Update SPF record for lists.cacert.org because it appears that this host is
|
|
now sending mail directly instead of via the cacert.org mail host, as a result
|
|
of the recent Tunix firewall changes.
|
|
----------------------------
|
|
revision 1.56
|
|
date: 2012/06/07 08:56:09; author: root; state: Exp; lines: +3 -2
|
|
Also add IPv6 address for cacert.org itself.
|
|
----------------------------
|
|
revision 1.55
|
|
date: 2012/06/04 09:56:14; author: root; state: Exp; lines: +5 -2
|
|
Add IPv6 addresses for {www,secure,tverify}.cacert.org in preparation for
|
|
World IPv6 Launch on 6 June 2012.
|
|
----------------------------
|
|
revision 1.54
|
|
date: 2012/05/23 09:24:57; author: root; state: Exp; lines: +4 -2
|
|
Add A records for infrastructure.cacert.org and monitor.cacert.org, both
|
|
pointing to 213.154.225.230, per e-mail request from Mario Lipinski on
|
|
May 23, 2012.
|
|
----------------------------
|
|
revision 1.53
|
|
date: 2012/05/21 08:17:26; author: root; state: Exp; lines: +2 -4
|
|
Remove A records for cod.cacert.org and translingo.cacert.org per e-mail
|
|
request from Mario Lipinski on 20.05.2012.
|
|
----------------------------
|
|
revision 1.52
|
|
date: 2012/04/17 07:07:02; author: root; state: Exp; lines: +3 -3
|
|
Reduce SOA expiration timer from 1 week to 2 days, in order to comply with
|
|
a recommendation made in RFC 4641bis: the SOA expiration timer should be
|
|
between 1/4th and 1/3ed of the size of the signature validity period (1 week).
|
|
----------------------------
|
|
revision 1.51
|
|
date: 2012/04/04 15:45:59; author: root; state: Exp; lines: +2 -4
|
|
Drop CNAME records for stamp and timestamp, since this service hasn't been
|
|
supported anymore for years, and has also been removed from the Apache2
|
|
webserver configuration on the CAcert webdb server.
|
|
----------------------------
|
|
revision 1.50
|
|
date: 2012/03/30 09:34:19; author: root; state: Exp; lines: +2 -3
|
|
Remove A record for hashserver service which has been shut down.
|
|
----------------------------
|
|
revision 1.49
|
|
date: 2012/03/29 15:35:37; author: root; state: Exp; lines: +2 -6
|
|
Remove A records for services which have been shut down recently.
|
|
----------------------------
|
|
revision 1.48
|
|
date: 2012/03/27 06:59:08; author: root; state: Exp; lines: +2 -2
|
|
*** empty log message ***
|
|
----------------------------
|
|
revision 1.47
|
|
date: 2012/03/27 06:54:33; author: root; state: Exp; lines: +4 -4
|
|
t=y for DKIM
|
|
----------------------------
|
|
revision 1.46
|
|
date: 2011/12/23 09:32:45; author: root; state: Exp; lines: +2 -3
|
|
Remove A record for research.cacert.org per e-mail request from Piers Lauder.
|
|
----------------------------
|
|
revision 1.45
|
|
date: 2011/09/18 13:55:19; author: root; state: Exp; lines: +4 -2
|
|
Add A record for translations.cacert.org and CNAME record for l10n alias,
|
|
per e-mail from Mario Lipinski on 17.09.2011.
|
|
----------------------------
|
|
revision 1.44
|
|
date: 2011/08/25 09:46:32; author: root; state: Exp; lines: +3 -2
|
|
Add A record for community-vpn per e-mail request from Dominik George on
|
|
24.08.2011.
|
|
----------------------------
|
|
revision 1.43
|
|
date: 2011/07/14 15:30:42; author: root; state: Exp; lines: +3 -2
|
|
Add IPv6 address for ns3 (per e-mail from Mark Overmeer on July 7, 2011).
|
|
----------------------------
|
|
revision 1.42
|
|
date: 2011/07/02 11:16:34; author: root; state: Exp; lines: +3 -2
|
|
Add A record for emailout.cacert.org, attempting to solve e-mail problems
|
|
as requested by Michael Taenzer.
|
|
----------------------------
|
|
revision 1.41
|
|
date: 2011/04/26 07:48:24; author: root; state: Exp; lines: +2 -4
|
|
Drop A records for ldap (per e-mail Mario Lipinski 25.04.2011) and ocsp2
|
|
(was only used during physical migration in June 2010, may be resurrected
|
|
in the future though at some other address).
|
|
----------------------------
|
|
revision 1.40
|
|
date: 2011/04/25 11:50:02; author: root; state: Exp; lines: +3 -3
|
|
Update IPv4 address for cod from .240 to .252 per e-mail from Mario Lipinski
|
|
on 25.04.2011.
|
|
----------------------------
|
|
revision 1.39
|
|
date: 2011/04/13 11:19:00; author: root; state: Exp; lines: +4 -2
|
|
Add cert.svn and nocert.svn as CNAMEs for svn.cacert.org, per e-mail request
|
|
from Jan Dittberner on April 12, 2011.
|
|
----------------------------
|
|
revision 1.38
|
|
date: 2011/01/24 16:13:31; author: root; state: Exp; lines: +2 -4
|
|
Drop dlv TXT RR for validation by dlv.isc.org, because we don't use dlv
|
|
anymore for this zone, its DS record has been uploaded to the registry.
|
|
----------------------------
|
|
revision 1.37
|
|
date: 2010/12/09 13:08:01; author: root; state: Exp; lines: +5 -2
|
|
Add A and AAAA records for ns5.cacert.org (sns-pb.isc.org) and enable
|
|
an NS record for it.
|
|
----------------------------
|
|
revision 1.36
|
|
date: 2010/10/27 14:55:25; author: root; state: Exp; lines: +3 -2
|
|
Enable NS record for ns4.
|
|
----------------------------
|
|
revision 1.35
|
|
date: 2010/10/21 09:55:49; author: root; state: Exp; lines: +4 -2
|
|
Add A and AAAA records for ns4.cacert.org (ns-ext.nlnetlabs.nl).
|
|
----------------------------
|
|
revision 1.34
|
|
date: 2010/10/20 15:48:45; author: root; state: Exp; lines: +2 -4
|
|
Drop dns1.go-now.at. and dns2.go-now.at. from the NS list, since they are
|
|
unable to provide DNSSEC or TSIG service now or in the near future.
|
|
----------------------------
|
|
revision 1.33
|
|
date: 2010/10/15 13:47:05; author: root; state: Exp; lines: +4 -2
|
|
Add dlv TXT RR for validation by dlv.isc.org.
|
|
----------------------------
|
|
revision 1.32
|
|
date: 2010/10/13 09:40:14; author: root; state: Exp; lines: +4 -2
|
|
Add A and AAAA records for wwwmail.cacert.org, to be used as the mailname
|
|
in the postfix configuration of www.cacert.org. To make this fully work,
|
|
we will also request reverse mappings for these A and AAAA addresses
|
|
pointing to wwwmail.cacert.org to be added by BIT.
|
|
----------------------------
|
|
revision 1.31
|
|
date: 2010/10/11 11:19:28; author: root; state: Exp; lines: +3 -4
|
|
Remove obsolete CNAME pastebin pointing to obsoleted druantia.cacert.org.
|
|
Replace CNAME for www.cacert.org by direct A record.
|
|
----------------------------
|
|
revision 1.30
|
|
date: 2010/10/04 15:10:59; author: root; state: Exp; lines: +3 -6
|
|
Drop NS record pointing to dns4.go-now.at. since that machine does not
|
|
provide helpful responses to DNS queries.
|
|
Drop old cruft: records for br.cacert.org and druantia.cacert.org.
|
|
Add IPv6 address for ns2.cacert.org.
|
|
----------------------------
|
|
revision 1.29
|
|
date: 2010/10/03 20:05:15; author: root; state: Exp; lines: +3 -2
|
|
Add A record for board.cacert.org.
|
|
----------------------------
|
|
revision 1.28
|
|
date: 2010/09/15 15:07:39; author: root; state: Exp; lines: +3 -3
|
|
Increase SOA refresh time from 2 hours to 4 hours.
|
|
----------------------------
|
|
revision 1.27
|
|
date: 2010/06/24 21:08:22; author: root; state: Exp; lines: +2 -3
|
|
Remove obsolete A record for *.br.cacert.org.
|
|
----------------------------
|
|
revision 1.26
|
|
date: 2010/06/22 12:49:01; author: root; state: Exp; lines: +3 -4
|
|
Switch ns1 to official CAcert-hosted name server at ns.cacert.org.
|
|
----------------------------
|
|
revision 1.25
|
|
date: 2010/06/21 09:19:27; author: root; state: Exp; lines: +5 -6
|
|
Drop shortened TTLs, migration has finished so we don't need them anymore.
|
|
Drop A record for www2 (only used for migration).
|
|
Add A record for ns.cacert.org, the new master name server for CAcert.
|
|
----------------------------
|
|
revision 1.24
|
|
date: 2010/06/15 16:54:25; author: root; state: Exp; lines: +3 -3
|
|
Fix broken IP address!!!
|
|
----------------------------
|
|
revision 1.23
|
|
date: 2010/06/15 16:17:18; author: root; state: Exp; lines: +5 -5
|
|
Revert to official servers after move to BIT-2B.
|
|
----------------------------
|
|
revision 1.22
|
|
date: 2010/06/15 07:13:00; author: root; state: Exp; lines: +6 -6
|
|
Switch www and ocsp to temporary service.
|
|
Drop special TTL setting for ocsp1 and ocsp2 (not necessary).
|
|
----------------------------
|
|
revision 1.21
|
|
date: 2010/06/11 14:23:56; author: root; state: Exp; lines: +2 -7
|
|
Drop A records for *.way[12345].vhost.cacert.org, since we have no idea
|
|
what they are good for (probably some historic artefact). Main reason for
|
|
doing this now is to check whether our slave servers are picking up the
|
|
notify in time.
|
|
----------------------------
|
|
revision 1.20
|
|
date: 2010/06/04 10:00:19; author: root; state: Exp; lines: +10 -8
|
|
Prepare for dropping dns[124].go-now.at. NS records forever ...
|
|
Add second ocsp record, and explicit name ocsp1 for first (main) ocsp server.
|
|
----------------------------
|
|
revision 1.19
|
|
date: 2010/06/02 10:13:22; author: root; state: Exp; lines: +4 -2
|
|
Add A records for www2 and ocsp2 (backup services at HCC Hobbynet).
|
|
----------------------------
|
|
revision 1.18
|
|
date: 2010/06/01 11:40:33; author: root; state: Exp; lines: +4 -4
|
|
Reduce TTL for A records of cacert.org and ocsp.cacert.org to 5 minutes,
|
|
in anticipation of temporary re-routing during move of BIT server room.
|
|
----------------------------
|
|
revision 1.17
|
|
date: 2010/02/28 10:13:56; author: root; state: Exp; lines: +4 -2
|
|
Add cert.lists.cacert.org and nocert.lists.cacert.org per email request
|
|
from Daniel Black, 20100228.
|
|
----------------------------
|
|
revision 1.16
|
|
date: 2010/01/06 14:36:44; author: root; state: Exp; lines: +4 -2
|
|
Add ns3.cacert.org (mars.overmeer.net).
|
|
----------------------------
|
|
revision 1.15
|
|
date: 2010/01/06 11:06:02; author: root; state: Exp; lines: +6 -3
|
|
Add ns2.cacert.org (newsys.gun.de).
|
|
Document IP numbers of name servers.
|
|
----------------------------
|
|
revision 1.14
|
|
date: 2010/01/05 15:55:21; author: root; state: Exp; lines: +4 -2
|
|
Add A and AAAA RR for ns1.cacert.org (currently housed on ns.deboca.net).
|
|
----------------------------
|
|
revision 1.13
|
|
date: 2009/12/25 15:51:26; author: wytze; state: Exp; lines: +3 -2
|
|
Add ldap.cacert.org A record per e-mail request from Brian Henson.
|
|
----------------------------
|
|
revision 1.12
|
|
date: 2009/10/12 07:56:24; author: wytze; state: Exp; lines: +4 -3
|
|
Rename _ssp._domainkey.lists to _adsp._domainkey.lists and update its
|
|
contents to comply with RFC 5617.
|
|
Add "dkim=unknown" record for _adsp._domainkey.
|
|
Changes requested by Daniel Black, e-mail 12.10.2009 02:19.
|
|
----------------------------
|
|
revision 1.11
|
|
date: 2009/09/17 10:47:04; author: wytze; state: Exp; lines: +3 -3
|
|
Update A record for research per request from Philipp Gühring 16.09.2009.
|
|
----------------------------
|
|
revision 1.10
|
|
date: 2009/09/01 08:02:34; author: wytze; state: Exp; lines: +3 -3
|
|
Renumber paypal from .229 to .250, since .229 appears to be in use as
|
|
the main IP of the mirror firewall.
|
|
----------------------------
|
|
revision 1.9
|
|
date: 2009/08/30 18:16:38; author: wytze; state: Exp; lines: +3 -2
|
|
Add A record for *.forum per request from Christopher Hoth.
|
|
----------------------------
|
|
revision 1.8
|
|
date: 2009/08/29 15:47:50; author: wytze; state: Exp; lines: +2 -2
|
|
Just up the serial number after performin some (failing) tests.
|
|
----------------------------
|
|
revision 1.7
|
|
date: 2009/08/29 15:27:58; author: wytze; state: Exp; lines: +6 -2
|
|
Add four new A records for paypal (.229), cod (.240), test2 (.248) and
|
|
forum (.249).
|
|
----------------------------
|
|
revision 1.6
|
|
date: 2009/08/28 19:07:03; author: wytze; state: Exp; lines: +3 -2
|
|
Add DKIM TXT record for auto._domainkey per request from Daniel Black.
|
|
----------------------------
|
|
revision 1.5
|
|
date: 2009/07/03 10:03:44; author: wytze; state: Exp; lines: +3 -2
|
|
Add new A record for issue.cacert.org per request from Daniel Black.
|
|
----------------------------
|
|
revision 1.4
|
|
date: 2009/06/15 12:24:26; author: wytze; state: Exp; lines: +2 -3
|
|
Remove NS record pointing to dns3.go-now.at. because this one is not
|
|
registered with .ORG, and is also refusing to listen to our notify.
|
|
----------------------------
|
|
revision 1.3
|
|
date: 2009/06/15 12:16:14; author: wytze; state: Exp; lines: +54 -54
|
|
Set default TTL to 12 hours, and remove all explicit TTL settings.
|
|
Adjust some timings in the SOA record.
|
|
This addresses e-mail from Daniel Black on June 14, 2009 and this message:
|
|
https://lists.cacert.org/wws/arc/cacert-support/2009-06/msg00021.html
|
|
----------------------------
|
|
revision 1.2
|
|
date: 2009/06/12 10:18:19; author: wytze; state: Exp; lines: +6 -4
|
|
Perform updates as requested from Georg Markus Kainz on June 5 & 8, 2009.
|
|
----------------------------
|
|
revision 1.1
|
|
date: 2009/06/12 10:11:13; author: wytze; state: Exp;
|
|
Initial revision
|
|
=============================================================================
|