[dns-operations] Zone with expired signatures?

Matthew Pounsett matt at conundrum.com
Wed Jul 30 05:05:28 UTC 2014


On Jul 30, 2014, at 00:53 , Doug Barton <dougb at dougbarton.us> wrote:

> I could have sworn that I remembered someone setting up zones with both expired and valid signatures so that people could test against them. But I cannot find any references. I can set that up myself of course, but I don't want to spend the effort if someone else has already invented that particular wheel.

There’s one in the test.dnssec-tools.org zone[1], and another at SIDN[2].  I seem to recall one at NLnet Labs, but can’t find any reference to it currently.  

[1] <https://www.dnssec-tools.org/testzone/>
[2] <https://workbench.sidnlabs.nl/bad-dnssec.html>






More information about the dns-operations mailing list