[dns-operations] DNSSEC signatures expired for getdnsapi.org and getdnsapi.net
Viktor Dukhovni
ietf-dane at dukhovni.org
Mon Sep 18 07:42:55 UTC 2017
> On Sep 18, 2017, at 3:32 AM, Willem Toorop <willem at nlnetlabs.nl> wrote:
>
> Oops... Consequence of a too hasty and uncareful software update.
> I just started the signers again.
I'd like to suggest monitoring. For my own domains, the alarms start
going off 3 days before the signatures are due to expire. When automatic
re-signing is working correctly no records ever get that close to
expiration.
--
Viktor.
More information about the dns-operations
mailing list