[dns-operations] Problem with c.root-servers.net

[David Conrad]

Duane,

It’s also probably worth mentioning that there were 4 root zone changes to 4 TLDs (a name server addition and 3 DS record changes) between 2019081400 and 2019081601.

Regards,
-drc

> On Aug 19, 2019, at 12:53 AM, Peter Andreev <andreev.peter at gmail.com> wrote:
> 
> Duane,
> 
> We were rotating KSK at that moment and when IANA reported completion of changes we proceeded to next step and this action was a bit premature.
> 
> пн, 19 авг. 2019 г. в 08:51, Wessels, Duane <dwessels at verisign.com <mailto:dwessels at verisign.com>>:
> 
> 
> > On Aug 16, 2019, at 1:44 PM, Peter Andreev <andreev.peter at gmail.com <mailto:andreev.peter at gmail.com>> wrote:
> >
> >
> > Hello,
> >
> > Root zone on c.root-servers.net <http://c.root-servers.net/> is obsoleted and this causes a lot of DNSSec-related errors.
> > So I'm looking for someone who can help with coping with the problem.
> >
> > host-47-37:~ apn$ dig @a.root-servers.net <http://a.root-servers.net/> . SOA +short
> > a.root-servers.net <http://a.root-servers.net/>. nstld.verisign-grs.com <http://nstld.verisign-grs.com/>. 2019081601 1800 900 604800 86400
> > host-47-37:~ apn$ dig @c.root-servers.net <http://c.root-servers.net/> . SOA +short
> > a.root-servers.net <http://a.root-servers.net/>. nstld.verisign-grs.com <http://nstld.verisign-grs.com/>. 2019081400 1800 900 604800 86400
> 
> 
> Hi Peter,
> 
> Can you say more about what sorts of DNSSEC-related errors you observed?
> 
> For root zone serial 2019081400, the ZSK signatures were set to expire at
> 2019-08-27T05:00:00 and the KSK signatures were set to expire at
> 2019-08-31T00:00:00, so I'm not sure what the problem might've been.
> 
> DW
> 
> 
> 
> 
> --
> Is there any problem Exterminatus cannot solve? I have not found one yet.
> 
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20190820/3eac38fd/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Message signed with OpenPGP
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20190820/3eac38fd/attachment.sig>