Re: [Dnsmasq-discuss] Ready for dnssec key signing key rollover on Oct 11?

2018-10-08 Thread Uwe Schindler
nsmasq-discuss On Behalf Of Neil Jerram Sent: Monday, October 8, 2018 12:19 PM To: logana...@gmail.com Cc: dnsmasq-discuss Subject: Re: [Dnsmasq-discuss] Ready for dnssec key signing key rollover on Oct 11? On Sun, Oct 7, 2018 at 12:05 PM Loganaden Velvindron mailto:logana...@gmail.com> >

Re: [Dnsmasq-discuss] Ready for dnssec key signing key rollover on Oct 11?

2018-10-08 Thread Neil Jerram
On Sun, Oct 7, 2018 at 12:05 PM Loganaden Velvindron wrote: > On Sun, Oct 7, 2018 at 2:13 PM Rick Thomas wrote: > > > > What do I need to do to be ready for the DNSSEC Root KSK (key signing > key) rollover on October 11, 2018? > > > > Well, dnsmasq already commited a patch for the new trust anch

Re: [Dnsmasq-discuss] Ready for dnssec key signing key rollover on Oct 11?

2018-10-07 Thread Loganaden Velvindron
On Sun, Oct 7, 2018 at 2:13 PM Rick Thomas wrote: > > What do I need to do to be ready for the DNSSEC Root KSK (key signing key) > rollover on October 11, 2018? > Well, dnsmasq already commited a patch for the new trust anchor : http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=05da

Re: [Dnsmasq-discuss] Ready for dnssec key signing key rollover on Oct 11? [SOLVED]

2018-10-07 Thread Rick Thomas
H… On further study, it seems that (in Debian Stretch, at least) the root KSK’s used by dnsmasq are taken from the file /usr/share/dns/root.ds, which is provided by the package dns-root-data; and that package seems to be part of the standard Stretch installation. That file lists both keys