[dns-operations] Requesting insight about a RRSIG expiration/renewal issue

[Richard Lamb]

Sadiq-

Tons of monitoring scripts and systems out there (all better than mine ;-)
but fwiw here is a bash script is use.
Also a my email responder for friends/family use - email to "monme at dc.org"
Subject: dnssec add example.com  - NO GUARANTEES

-Rick



On Mon, Jul 3, 2017 at 2:38 PM, Sadiq Saif <lists at sadiqs.com> wrote:

> On Mon, Jul 3, 2017, at 17:12, Viktor Dukhovni wrote:
>  > For me, BIND's unattended re-signing works well enough, with
> > monitoring catching the very rare glitches.  It would be even better
> > if the underlying issue were identified and resolved.
> >
> > --
> >       Viktor.
>
> I will concur on that. I've been using the BIND automatic DNSSEC
> maintenance for years at this point and this is the first time I've
> noticed an issue.
>
> That said, my monitoring here is non-existent, I only found out about it
> indirectly because a monitoring service couldn't resolve the
> hostname(s).
>
> Viktor, if you can provide your DNSSEC monitoring script(s), I (and
> others) would appreciate it.
>
> --
> Sadiq Saif
> https://sadiqsaif.com
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20170718/9f303aaf/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: monitor
Type: application/octet-stream
Size: 2121 bytes
Desc: not available
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20170718/9f303aaf/attachment.obj>