[dns-operations] Problem with c.root-servers.net

[Wessels, Duane]

> On Aug 16, 2019, at 1:44 PM, Peter Andreev <andreev.peter at gmail.com> wrote:
> 
> 
> Hello,
>    
> Root zone on c.root-servers.net is obsoleted and this causes a lot of DNSSec-related errors.
> So I'm looking for someone who can help with coping with the problem.  
>    
> host-47-37:~ apn$ dig @a.root-servers.net . SOA +short
> a.root-servers.net. nstld.verisign-grs.com. 2019081601 1800 900 604800 86400
> host-47-37:~ apn$ dig @c.root-servers.net . SOA +short
> a.root-servers.net. nstld.verisign-grs.com. 2019081400 1800 900 604800 86400


Hi Peter,

Can you say more about what sorts of DNSSEC-related errors you observed?

For root zone serial 2019081400, the ZSK signatures were set to expire at
2019-08-27T05:00:00 and the KSK signatures were set to expire at
2019-08-31T00:00:00, so I'm not sure what the problem might've been.

DW


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4675 bytes
Desc: not available
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20190819/6923a692/attachment.bin>