[Yeti DNS Discuss] Yeti KSK revoke status
dbgong at biigroup.cn
Wed Aug 31 10:11:30 UTC 2016
Now the old KSK(55954) have been revoked.
Please check your resolver status.
you will find that new KSK(19444) is in VALID status, and the old revoked KSK(56082) is in REVOKED status.
for BIND 9:
cat $(ls -t *.mkeys|head -1) # find the latest managed keys
for root operator:
dig @root-server-addr . dnskey +dnssec +multi|grep -1 RRSIG
you will see KSK 19444 and 56082
But one DM failed to do the revoke action, so you may see the old KSK(55954).
In the next serial 2016083100, all Yeti root servers will get the new KSK(19444) and revoked KSK(56082).
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the discuss