[dns-operations] DNSSEC signatures expired for getdnsapi.org and getdnsapi.net

Mon Sep 18 07:56:34 UTC 2017


On 18/09/2017 09:42, Viktor Dukhovni wrote:
> 
>> On Sep 18, 2017, at 3:32 AM, Willem Toorop <willem at nlnetlabs.nl> wrote:
>>
>> Oops... Consequence of a too hasty and uncareful software update.
>> I just started the signers again.
> 
> I'd like to suggest monitoring.  For my own domains, the alarms start
> going off 3 days before the signatures are due to expire.  When automatic
> re-signing is working correctly no records ever get that close to
> expiration.
> 
Care to share code?