Groups > linux.debian.user > #200983

Re: DNS Key rollover for dnsmasq [SOLVED}

From	Rick Thomas <rbthomas@pobox.com>
Newsgroups	linux.debian.user
Subject	Re: DNS Key rollover for dnsmasq [SOLVED}
Date	2018-10-08 01:20 +0200
Message-ID	<wGqv7-84-3@gated-at.bofh.it> (permalink)
References	(1 earlier) <wFgo9-8wn-1@gated-at.bofh.it> <wFgHw-aG-3@gated-at.bofh.it> <wGcit-m3-1@gated-at.bofh.it> <wGeki-1um-5@gated-at.bofh.it> <wGfT3-2ea-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Oct 7, 2018, at 3:36 AM, Eduardo M KALINOWSKI <eduardo@kalinowski.com.br> wrote:

> On 07-10-2018 07:11, Rick Thomas wrote:
>> On further study, it seems that (in Debian Stretch, at least) the root KSK’s used by dnsmasq are taken from the file /usr/share/dns/root.ds, which is provided by the package dns-root-data; and that package seems to be part of the standard Stretch installation.  That file lists both keys (the new “20326” and the old “19036”). So it’s all set to go.  No need to panic…  (-:
> 
> Where did you get that information from? I found nothing about
> dns-root-data in dnsmasq package.
> 
> I'd just add a new trust-anchor to the configuration. Just copy and
> paste from https://github.com/imp/dnsmasq/blob/master/trust-anchors.conf
> 
> -- 
> 	O que eu temo não e a estrategia do inimigo, mas os nossos
> 	erros
> 		-- Pericles, filosofo grego
> 
> Eduardo M KALINOWSKI
> eduardo@kalinowski.com.br

Hi Eduardo,

I got it from “ps auww `prep dnsmasq`” then following up what I saw by looking in /etc/init.d/dnsmasq, which is called by systemd in “/lib/systemd/system/dnsmasq.service” (as is the case for lots of services that still rely on /etc/init.d for startup).

Enjoy!
Rick

Thread

DNS Key rollover Henning Follmann <hfollmann@itcfollmann.com> - 2018-10-04 15:20 +0200
  Re: DNS Key rollover Default User <hunguponcontent@gmail.com> - 2018-10-04 20:20 +0200
    Re: DNS Key rollover john doe <johndoe65534@mail.com> - 2018-10-04 20:40 +0200
    Re: DNS Key rollover Reco <recoverym4n@enotuniq.net> - 2018-10-04 20:40 +0200
      Re: DNS Key rollover Default User <hunguponcontent@gmail.com> - 2018-10-04 21:50 +0200
      Re: DNS Key rollover Rick Thomas <rbthomas@pobox.com> - 2018-10-07 10:10 +0200
        Re: DNS Key rollover for dnsmasq [SOLVED} Rick Thomas <rbthomas@pobox.com> - 2018-10-07 12:20 +0200
          Re: DNS Key rollover for dnsmasq [SOLVED} Rob van der Putten <rob@sput.nl> - 2018-10-07 14:00 +0200
          Re: DNS Key rollover for dnsmasq [SOLVED} Rick Thomas <rbthomas@pobox.com> - 2018-10-08 01:20 +0200
      Re: DNS Key rollover Rob van der Putten <rob@sput.nl> - 2018-10-07 14:10 +0200

csiph-web