[dns-operations] Problem with c.root-servers.net
andreev.peter at gmail.com
Mon Aug 19 07:53:55 UTC 2019
We were rotating KSK at that moment and when IANA reported completion of
changes we proceeded to next step and this action was a bit premature.
пн, 19 авг. 2019 г. в 08:51, Wessels, Duane <dwessels at verisign.com>:
> > On Aug 16, 2019, at 1:44 PM, Peter Andreev <andreev.peter at gmail.com>
> > Hello,
> > Root zone on c.root-servers.net is obsoleted and this causes a lot of
> DNSSec-related errors.
> > So I'm looking for someone who can help with coping with the problem.
> > host-47-37:~ apn$ dig @a.root-servers.net . SOA +short
> > a.root-servers.net. nstld.verisign-grs.com. 2019081601 1800 900 604800
> > host-47-37:~ apn$ dig @c.root-servers.net . SOA +short
> > a.root-servers.net. nstld.verisign-grs.com. 2019081400 1800 900 604800
> Hi Peter,
> Can you say more about what sorts of DNSSEC-related errors you observed?
> For root zone serial 2019081400, the ZSK signatures were set to expire at
> 2019-08-27T05:00:00 and the KSK signatures were set to expire at
> 2019-08-31T00:00:00, so I'm not sure what the problem might've been.
Is there any problem Exterminatus cannot solve? I have not found one yet.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the dns-operations