[Yeti DNS Discuss] First KSK rollover in Yeti Testbed
Stephane Bortzmeyer
bortzmeyer at nic.fr
Thu Jul 2 14:59:22 UTC 2015
On Wed, Jul 01, 2015 at 07:43:13PM +0300,
Kovalenko Dmitry <d.kovalenko at msk-ix.ru> wrote
a message of 70 lines which said:
> and it differs from what you have sent.
> So I think your resolver picked up new KSK, but dropped old one.
No, the problem was simply that I was too impatient. Now, I have the
new key (and, of course, still the "old" one).
; autotrust trust anchor file
;;id: . 1
;;last_queried: 1435813814 ;;Thu Jul 2 05:10:14 2015
;;last_success: 1435813814 ;;Thu Jul 2 05:10:14 2015
;;next_probe_time: 1435856265 ;;Thu Jul 2 16:57:45 2015
;;query_failed: 0
;;query_interval: 43200
;;retry_time: 8640
. 86400 IN DNSKEY 257 3 8 AwEAAaP3gGQ4db0tAiDEky0dcUNGeI1aTDYP5NFxzhbdpD60ZhKLVV4KyxPmoSNUpq5Fv5M0iBwK1Tyswsyq/9sMSoZ8zx8aT3ho1YnPsSqQeJfjTT1WsX6YZ5Kw6B2QkjRNa6OMGZ96Kn8AI/slqsw+z8hY49Sn3baeo9iJxHPzloNc2dQkW4aLqzNEYxnuoJsthCfGrPSAXlUjY9m3YKIaEWR5WFYQk770fT+gGWLk/54Vp0sG+Lw75JZnwhDhixPFaToTDNqbHQmkEylq1XJLO15uZ/+RZNRfTXZKO4fVR0tMEbMAITqRmyP8xLXY4RXbS4J32gnenQbzABX8sQmwO7s= ;{id = 55954 (ksk), size = 2048b} ;;state=1 [ ADDPEND ] ;;count=1 ;;lastchange=1435813814 ;;Thu Jul 2 05:10:14 2015
. 85667 IN DNSKEY 257 3 8 AwEAAchb6LrHCdz9Yo55u1id/b+X1FqVDF66xNrhbgnV+vtpiq7pDsT8KgzSijNuGs4GLGsMhVE/9H0wOtmVRUQqQ50PHZsiqg8gqB6i5zLortjpaCLZS7Oke1xP+6LzVRgT4c8NXlRBg3m/gDjzijBD0BMACjVGZNv0gReAg2OCr9dBrweE6DnM6twG7D2NyuGjpWzKeJfNd3Hek39V9NGHuABGkmYG16XCao37IWcP/s/57HuBom5U3SNfuzfVDppokatuL6dXp9ktuuVXsESc/rUERU/GPleuNfRuPHFr3URmrRud4DYbRWNVIsxqkSLrCldDjP1Hicf3S8NgVHJTSRE= ;{id = 24439 (ksk), size = 2048b} ;;state=2 [ VALID ] ;;count=0 ;;lastchange=1434990786 ;;Mon Jun 22 16:33:06 2015
More information about the discuss
mailing list