[dns-operations] DNSSEC signatures expired for getdnsapi.org and getdnsapi.net
dfk at ripe.net
Mon Sep 18 07:56:34 UTC 2017
On 18/09/2017 09:42, Viktor Dukhovni wrote:
>> On Sep 18, 2017, at 3:32 AM, Willem Toorop <willem at nlnetlabs.nl> wrote:
>> Oops... Consequence of a too hasty and uncareful software update.
>> I just started the signers again.
> I'd like to suggest monitoring. For my own domains, the alarms start
> going off 3 days before the signatures are due to expire. When automatic
> re-signing is working correctly no records ever get that close to
Care to share code?
More information about the dns-operations