Groups > linux.debian.user > #200961

Re: DNS Key rollover

From	Rob van der Putten <rob@sput.nl>
Newsgroups	linux.debian.user
Subject	Re: DNS Key rollover
Date	2018-10-07 14:10 +0200
Message-ID	<wGg2J-2wE-1@gated-at.bofh.it> (permalink)
References	<wFbHP-5MN-1@gated-at.bofh.it> <wFgo9-8wn-1@gated-at.bofh.it> <wFgHw-aG-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Hi there


On 04/10/2018 20:32, Reco wrote:

> Please do not top post.
> 
> On Thu, Oct 04, 2018 at 02:15:52PM -0400, Default User wrote:
>> Hi, Henning.
>>
>> I am running Unstable, with 4.18.0-2 amd-64 kernel, all updated.
>>
>> I don't know anything about bind. How do I know what bind version I am
>> running, and if I need to do anything regarding the change you mentioned?
> 
> Stretch's bind has this public part of root's KSK:
> 
> # grep -A2 20326 /etc/bind/bind.keys
>          # This key (20326) is to be published in the root zone in 2017.
>          # Servers which were already using the old key (19036) should
>          # roll seamlessly to this new one via RFC 5011 rollover. Servers

I have an old config with just contains 19036.
However, the mkeys file in /var/cache/bind/ contains both. I think this 
is due to 'dnssec-validation auto' in named.conf.

> If you have the same - there's nothing to do.
> If you don't - DNSSEC will stop working for you in seven days.
> If you do not use BIND - there's nothing to do.


Regards,
Rob

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

DNS Key rollover Henning Follmann <hfollmann@itcfollmann.com> - 2018-10-04 15:20 +0200
  Re: DNS Key rollover Default User <hunguponcontent@gmail.com> - 2018-10-04 20:20 +0200
    Re: DNS Key rollover john doe <johndoe65534@mail.com> - 2018-10-04 20:40 +0200
    Re: DNS Key rollover Reco <recoverym4n@enotuniq.net> - 2018-10-04 20:40 +0200
      Re: DNS Key rollover Default User <hunguponcontent@gmail.com> - 2018-10-04 21:50 +0200
      Re: DNS Key rollover Rick Thomas <rbthomas@pobox.com> - 2018-10-07 10:10 +0200
        Re: DNS Key rollover for dnsmasq [SOLVED} Rick Thomas <rbthomas@pobox.com> - 2018-10-07 12:20 +0200
          Re: DNS Key rollover for dnsmasq [SOLVED} Rob van der Putten <rob@sput.nl> - 2018-10-07 14:00 +0200
          Re: DNS Key rollover for dnsmasq [SOLVED} Rick Thomas <rbthomas@pobox.com> - 2018-10-08 01:20 +0200
      Re: DNS Key rollover Rob van der Putten <rob@sput.nl> - 2018-10-07 14:10 +0200

csiph-web