Re: [Sks-devel] "SKS is effectively running as end-of-life software at this point"?

2019-02-07 Thread Kristian Fiskerstrand
d implementation. The current disagreement are really with regards to whether this should be "validating keyservers" or not, and how such servers could interact with non-validating ones. -- ---- Kristian Fiskerstrand Blog: https://blog.sumptuo

Re: [Sks-devel] Data protection concern[Ref. RFA0751305]

2019-02-19 Thread Kristian Fiskerstrand
s we send and receive when dealing with > casework. Not only are we obliged to deal with these in accordance with > the access provisions of the data protection framework and the Freedom > of Information Act 2000, it is in the public interest that we are open > an

Re: [Sks-devel] SKS scaling configuration

2019-03-05 Thread Kristian Fiskerstrand
s_header Server; add_header Via "1.1 keys2.kfwebs.net"; proxy_ignore_client_abort on; } } -- Kristian Fiskerstrand Blog: https://blog.sumptuouscapital.com Twitter: @krifisk Public OpenPGP keyblock at hkp://pool.sks-keyservers.ne

Re: [Sks-devel] Data protection concern[Ref. RFA0751305]

2019-03-08 Thread Kristian Fiskerstrand
On 2/19/19 6:13 PM, Kristian Fiskerstrand wrote: > Hi, > > In order to get a fruitful dialogue on these matters, some > clarifications regarding the role of the sks-keyservers.net pool of > keyservers seems necessary. > The ICO has concluded in this case and no further action

Re: [Sks-devel] Data protection concern[Ref. RFA0751305]

2019-03-08 Thread Kristian Fiskerstrand
On 3/8/19 3:19 PM, Andrew Gallagher wrote: > On 08/03/2019 14:15, Kristian Fiskerstrand wrote: >> The ICO has concluded in this case and no further action will be taken >> from them. > > Was there any legal reasoning attached to this decision? It was a relatively good

Re: [Sks-devel] DNS broken for hkps.pool.sks-keyservers.net

2019-03-18 Thread Kristian Fiskerstrand
in case he filters sks-devel mail. > Well, its a simple enough issue. the CRL expired, so no host validated anymore.. Services should be returning to normal soon enough. Thanks for the ping. -- Kristian Fiskerstrand Blog: https://blog.sumptuouscapital.com Twi

Re: [Sks-devel] IPv6 status

2019-04-25 Thread Kristian Fiskerstrand
blocked by firewall or something? curl "http://[2001:738:0:600:216:3eff:fe02:42]:11371/pks/lookup?op=stats"; .. times out from the system ipv6 tests are done on -- ---- Kristian Fiskerstrand Blog: https://blog.sumptuouscapital.com Twitter: @krifisk --

Re: [Sks-devel] Keyservers and GDPR

2019-05-27 Thread Kristian Fiskerstrand
poradically due to merges. Now, this is somewhat better for the general pool since https://dev.gnupg.org/T4175 results in retry on failover for 5xx codes, but has caused a lot of problem reports in the past and not all distros ship this in stable versions. -- --

Re: [Sks-devel] understanding error message

2019-06-04 Thread Kristian Fiskerstrand
Have you run sks cleandb during setup phase? The setup scripts should include it.. On June 4, 2019 3:38:38 AM GMT+02:00, Skip Carter wrote: >my recon logs have messages like these: > > > error in callback.: Failure("configuration of >remote host () rejected: filters do >not match.\n\tlocal filt

Re: [Sks-devel] The pool is shrinking

2019-06-21 Thread Kristian Fiskerstrand
of complaints I get from users has dropped significantly). And its not really a strict requirement, one can set up VMs / chroots for it on a relatively small server. -- ---- Kristian Fiskerstrand Blog: https://blog.sumptuouscapital.com Twitter: @krifisk

Re: [Sks-devel] The pool is shrinking

2019-06-21 Thread Kristian Fiskerstrand
g. Not that much, but you need at least 8 GiB of RAM allocated for each node and sufficient swap or recon will often get OOM-killed. -- ---- Kristian Fiskerstrand Blog: https://blog.sumptuouscapital.com Twitter: @krifisk Public OpenPGP keyblock a

Re: [Sks-devel] Gossip protocol mentor?

2019-06-30 Thread Kristian Fiskerstrand
KS recon is implemented in the conflux libary and documentation. https://hockeypuck.github.io/ https://gopkg.in/hockeypuck/conflux.v2 -- ---- Kristian Fiskerstrand Blog: https://blog.sumptuouscapital.com Twitter: @krifisk Public OpenPGP keybl

Re: [Sks-devel] Website down

2019-07-10 Thread Kristian Fiskerstrand
Yes, it is a scheduled power outage and should be back up soon, the pool itself functions but wont update in the window. On July 10, 2019 1:29:29 PM GMT+02:00, "Kiss Gabor (Bitman)" wrote: >Dear Kristian, > >I wonder if you know that https://sks-keyservers.net/ is unreachable? > >Regards > >Gab

Re: [Sks-devel] SKS initial key load issue

2019-07-28 Thread Kristian Fiskerstrand
My guess is you need to increase stack size On July 28, 2019 5:37:58 PM GMT+02:00, Marcin Gondek wrote: >Hello All, > >Can someone help me or instruct why every time I do initial key load >i'm getting always getting segfault? >I've tried with many dump and always is the same. >MD5 are ok about p

Re: [Sks-devel] extending status pages

2019-07-30 Thread Kristian Fiskerstrand
See Membership fileSee reference membership file On July 30, 2019 9:51:31 PM GMT+02:00, "Kiss Gabor (Bitman)" wrote: >Dear Kristian, > >I have a suggestion about status pages. >Would you mind to provide information about what other hosts >consider a given server as a peer? > >I mean it could be

Re: [Sks-devel] Shutting down keyserver.zap.org.au

2019-08-21 Thread Kristian Fiskerstrand
Fwiw, that error sounds like too small stack size for the process - in an alternative universe it would be interesting to hear your experience running with a higher stack limit On August 21, 2019 9:16:05 PM GMT+02:00, John Zaitseff wrote: >It is with feelings of sadness and regret that I will

Re: [Sks-devel] Sks-devel Digest, Vol 184, Issue 26

2019-08-22 Thread Kristian Fiskerstrand
ionally you specify it on a per user basis in /etc/security/limits.conf . See also man ulimit for a one-off, e.g ulimit -s unlimited before starting sks. -- ---- Kristian Fiskerstrand Blog: https://blog.sumptuouscapital.com Twitter: @krifisk Pub

Re: [Sks-devel] Sks-devel Digest, Vol 184, Issue 26

2019-08-22 Thread Kristian Fiskerstrand
> >eMail: ja...@insect.com <mailto:ja...@insect.com> >Phone: (910) 689.0557 > (800) 284.7872 >Fax: (910) 689.0558 > > > >> On Aug 22, 2019, at 12:14 PM, Kristian Fiskerstrand > wrote: >> >> On 22.08.2019 18:08, Jason John Schwarz wrote: >&

Re: [Sks-devel] Status page problem

2019-08-23 Thread Kristian Fiskerstrand
> Regards > > Gabor > -- ---- Kristian Fiskerstrand Blog: https://blog.sumptuouscapital.com Twitter: @krifisk Public OpenPGP keyblock at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3 Corruptissima re publi

Re: cant build dabase

2019-12-13 Thread Kristian Fiskerstrand
On 13.12.2019 00:56, Skip Carter wrote: > correction, the errors are stackoverflows not segfaults > ulimit -s unlimited before building. -- ---- Kristian Fiskerstrand Blog: https://blog.sumptuouscapital.com Twitter: @krifisk Public O

Re: hkps.pool.sks-keyservers.net DNS failing to resolve

2020-01-15 Thread Kristian Fiskerstrand
On 15.01.2020 02:28, Todd Fleisher wrote: > Hopefully Kristian finds and fixes his issue in the morning. thanks for the heads up everyone; should be back up on next update run (cause: crl expired) -- ---- Kristian Fiskerstrand Blog: https://blog.sumptuouscapital.

Re: hkps.pool.sks-keyservers.net DNS failing to resolve

2020-01-16 Thread Kristian Fiskerstrand
d for any actual issues anyways), but won't get around to actually updating the crl until this evening or more likely tomorrow as that requires special access. -- ---- Kristian Fiskerstrand Blog: https://blog.sumptuouscapital.com Twitter: @krifisk -

Re: Debian sks.service: Main process exited, code=killed, status=11/SEGV

2020-02-26 Thread Kristian Fiskerstrand
; > > I'd guess it hitting a stack limit during merge of a large key. -- ---- Kristian Fiskerstrand Blog: https://blog.sumptuouscapital.com Twitter: @krifisk Public OpenPGP keyblock at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5

Re: Desperately Seeking Kristian - SKS HKPS certificate renewals

2020-06-23 Thread Kristian Fiskerstrand
t should also be avalable fresh copy through wkd) -- ---- Kristian Fiskerstrand Blog: https://blog.sumptuouscapital.com Twitter: @krifisk Public OpenPGP keyblock at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 510

[Sks-devel] Request for peers

2006-12-02 Thread Kristian Fiskerstrand
If there should be any questions, don't hesitate to ask. Yours sincerely - -- - ---- Kristian Fiskerstrand http://www.kfwebs.net - http://www.secure-my-email.com http://www.secure-my-internet.com -BEGIN PGP SIGNATURE- Version: Gn

[Sks-devel] Keyserver pool

2006-12-03 Thread Kristian Fiskerstrand
email address is found in OpenPGP key 0x6b0b9508) Yours sincerely, - -- - Kristian Fiskerstrand http://www.kfwebs.net - http://www.secure-my-email.com http://www.secure-my-internet.com -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.1

[Sks-devel] Re: Keyserver pool

2006-12-20 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Peter Palfrader wrote, On 12/20/2006 02:41 AM: > On Sun, 03 Dec 2006, Kristian Fiskerstrand wrote: > >> The pool is a round-robin DNS with IP-addresses updated twise a day >> based on the information displayed at http://sks-key

[Sks-devel] Re: keyserver.unixbyte.com goes Offline

2007-06-02 Thread Kristian Fiskerstrand
l? > The domain name is in a redemption grace period (step before pending deletion) after having expired 22-may-2007 and as such it is not included in the TLD zonefile. - -- - Kristian Fiskerstrand http://www.kfwebs.net - Prævenire

Re: New SKS server looking for peers (was Re: [Sks-devel] Installing a new SKS server)

2007-08-13 Thread Kristian Fiskerstrand
on" when I change a peer? > > Thank you. I added it to the following SKS keyservers' membership files: keys.kfwebs.net 11370 keys2.kfwebs.net 11370 No, you don't have to restart the daemon when changing the membership file. - -- - Kristian Fiske

[Sks-devel] Re: Looking for SKS gossip peers

2008-03-21 Thread Kristian Fiskerstrand
ort, and look forward to participating in the SKS > community. Thank you. > I'm unable to connect to neither 11370 or 11371 on that host, atm. I'll consider adding it to the membership file of keys2.kfwebs.net once it stabilizes. - -- - ---- Kri

[Sks-devel] Re: Looking for SKS gossip peers

2008-03-22 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Kristian Fiskerstrand wrote, On 03/21/2008 10:09 PM: > Andrew Girling wrote, On 03/21/2008 09:22 PM: >> Hello all, > >> I am finishing my SKS keyserver setup and I am looking for servers to >> gossip with: > >>

[Sks-devel] Re: SKS server shutting itself down

2008-06-03 Thread Kristian Fiskerstrand
:47:31 Membership: > 2008-06-02 17:47:31 Opening KeyDB database > 2008-06-02 17:47:49 Shutting down database > > > Have you tried rebuilding the ptree? could be a simple corruption issue. - -- - Kristian Fiskerstrand http://www.kfwebs.net - -

[Sks-devel] Re: How to delete single keys from the SKS keyserver

2008-06-04 Thread Kristian Fiskerstrand
network, as you'd be able to delete e.g. revoked keys and replace them with old copies of a compromised key. People wanting such as scheme should use the PGP Global Directory, and the GD only. - -- - ---- Kristian Fiskerstrand http://www.kfwebs.net - ---

[Sks-devel] Re: IPv6 SKS Pool

2008-10-25 Thread Kristian Fiskerstrand
on ipv6, so please come with comments. IPv6 support will be added to keys.kfwebs.net and possibly keys2.kfwebs.net over the next couple of weeks as well. - -- - Kristian Fiskerstrand http://www.kfwebs.net - Ad astra per aspera To the sta

[Sks-devel] Re: IPv6 SKS Pool

2008-10-25 Thread Kristian Fiskerstrand
well. mud.stack.nl. 172800 IN 2001:610:1108:5011:230:48ff:fe12:2794 is what gets added.. I'll look into implementing some checking for IPv6 up-status as well, though... - -- - Kristian Fiskerstrand http://www.kfwebs.net -

Re: [Sks-devel] Re: IPv6 SKS Pool

2009-01-31 Thread Kristian Fiskerstrand
ks as well. > Ok.. I've worked a bit on sks-keyservers.net lately and added some IPv6 checking. Anyone care to test the ipv6.pool.sks-keyservers.net pool? I also added IPv6 flag at http://www.sks-keyservers.net/status/ Hopefully it works a bit better now than last time :) - -- - ---

[Sks-devel] Re: IPv6 SKS Pool

2009-01-31 Thread Kristian Fiskerstrand
lhost 11370 which incidentally is what I use (ps I had to bind sks to 127.0.0.1 rather than 0.0.0.0) - -- - Kristian Fiskerstrand http://www.kfwebs.net - Nulla regula sine exceptione No rule without exception - --

[Sks-devel] Re: IPv6 SKS Pool

2009-01-31 Thread Kristian Fiskerstrand
ecome at one point while I haven't updated (*ehrm*) :p - -- - Kristian Fiskerstrand http://www.kfwebs.net - Nil desperandum Never give up - http://www.secure-my-email.com http://www.secure-my-internet.com ---

[Sks-devel] Re: Traffic volume

2009-02-01 Thread Kristian Fiskerstrand
ity of Norway. > be my guest and throw in keys.kfwebs.net on 11370 , thats located in Ålesund, Norway. I'm also contemplating bringing back up keys2 (Oslo, Norway), but no immidiate plans to do so as long as the number of keyservers is at a decent level, was slightly worse when it was firs

[Sks-devel] Re: Traffic volume

2009-02-01 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Kristian Fiskerstrand wrote, On 02/01/2009 02:54 PM: > Andy Ruddock wrote, On 02/01/2009 02:19 PM: >> John Clizbe wrote: >>> Ryan Hunt wrote: >>>> Very little. >>>> >>>> Mine is pretty high traf

[Sks-devel] Re: problems with SKS 1.0.10 when searching by key ID from GnuPG

2009-03-24 Thread Kristian Fiskerstrand
ry, but >> it would have to be done via whoever controls the particular keyserver >> round-robin. > > Kristian Fiskerstrand, i believe you're controlling > pool.sks-keyservers.net -- do you have any plans to reject members > running known-buggy versions? It is correct th

Re: [Sks-devel] pool.sks-keyservers.net having trouble?

2010-04-05 Thread Kristian Fiskerstrand
h various keyservers and looking at their gossip peers. To get back in the pool one of the closely linked keyservers would have to report keys.nayr.net as a gossip peer - -- - ---- Kristian Fiskerstrand kristian.fiskerstr...@sumptuouscapital.com http://www.

Re: [Sks-devel] pool.sks-keyservers.net having trouble?

2010-04-05 Thread Kristian Fiskerstrand
and feel free to contact me by email directly to help narrowing down the issue. - -- - ---- Kristian Fiskerstrand kristian.fiskerstr...@sumptuouscapital.com http://www.sumptuouscapital.com - Ad astra per aspera To the stars through thorns - --

[Fwd: Re: [Sks-devel] Alternative to round-robin (was Re: pool.sks-keyservers.net having trouble?)]

2010-04-05 Thread Kristian Fiskerstrand
2001:16d8:ee3d:ee30:219:b9ff:fed6:4db8 ;; Query time: 0 msec ;; SERVER: 192.168.0.6#53(192.168.0.6) ;; WHEN: Mon Apr 5 22:01:18 2010 ;; MSG SIZE rcvd: 745 - -- - Kristian Fiskerstrand kristian.fiskerstr...@sumptuouscapital.com http://www.sumptuouscapital.com - ---

Re: [Fwd: Re: [Sks-devel] Alternative to round-robin (was Re: pool.sks-keyservers.net having trouble?)]

2010-04-05 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David Shaw wrote, On 04/05/2010 10:50 PM: > On Apr 5, 2010, at 4:04 PM, Kristian Fiskerstrand wrote: > >> David Shaw wrote, On 04/05/2010 09:25 PM: >>> On Apr 1, 2010, at 12:30 AM, Jonathan Oxer wrote: >>> >>

[Sks-devel] Re: [Fwd: Re: Alternative to round-robin (was Re: pool.sks-keyservers.net having trouble?)]

2010-08-26 Thread Kristian Fiskerstrand
tp._tcp.pool.sks-keyservers.net. 28800 IN SRV 0 541 11371 pgp.uni-mainz.de. At this point, what is the preferred approach? 1) keep the weights as they are 2) group them into intervals / steps in order to get some additional load balancing other than that I'll look into penalizing upon

Re: [Sks-devel] Re: [Fwd: Re: Alternative to round-robin (was Re: pool.sks-keyservers.net having trouble?)]

2010-09-03 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John Marshall wrote, On 09/03/2010 11:24 AM: > On Thu, 26 Aug 2010, 23:48 +0200, Kristian Fiskerstrand wrote: >> That said, it is still a very simplistic approach by timing the >> connection speed (in seconds) and doing a w

Re: [Sks-devel] seeking peers for keyserver.durcheinandertal.ch

2010-09-07 Thread Kristian Fiskerstrand
is be done outside of sks-keyservers.net during the > experimental phase? Good evening, I will add this to my todo-list and have a look at it as soon as time permits. - -- - Kristian Fiskerstrand http://www.sumptuouscapital.com - Veni, vidi, vacatum I came ,

Re: [Sks-devel] seeking peers for keyserver.durcheinandertal.ch

2010-09-07 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Kristian Fiskerstrand wrote, On 09/07/2010 05:19 PM: > Gaudenz Steinlin wrote, On 09/07/2010 09:21 AM: >> Excerpts from Phil Pennock's message of Die Sep 07 03:26:37 +0200 2010: >>> On 2010-09-06 at 21:03 +0200, Gaudenz Stein

Fw: [Sks-devel] Re: Delete key from keyserver

2010-09-08 Thread Kristian Fiskerstrand
lot of thought on implementation. E.g by adding an element to the key to be deleted that is signed by the TI. Kristian Fiskerstrand --Original Message-- From: Yaron Minsky Sender: sks-devel-bounces+reg-sks=kfwebs@nongnu.org To: Jeff Johnson Cc: sks-devel@nongnu.org Cc: Sebasti

Fw: [Sks-devel] keyserver.pramberger.at terminating

2010-09-08 Thread Kristian Fiskerstrand
nism. This way the delete/blacklist is a parralell process that is easier to control. Kristian Fiskerstrand --Original Message-- From: Kim Minh Kaplan Sender: sks-devel-bounces+reg-sks=kfwebs@nongnu.org To: sks-devel@nongnu.org Subject: Re: [Sks-devel] keyserver.pramberger.at terminat

Fw: [Sks-devel] keyserver.pramberger.at terminating

2010-09-08 Thread Kristian Fiskerstrand
--Original Message-- To: pks-ad...@pramberger.at To: sks-devel@nongnu.org Subject: Re: [Sks-devel] keyserver.pramberger.at terminating Sent: 8 Sep 2010 21:45 We could probably learn from the tld registrars (for access to zone files) and set this up as sftp/ftp access with login tokens a

Re: [Sks-devel] Introduction + some ideas ...

2010-10-03 Thread Kristian Fiskerstrand
ity for that is this list ... > > Have a nice weekend. > > Greetings from the warm and sunny germany which is really confusing > for this time of the year ;-) > Just came back from Octoberfest in Munich myself, must admit I found Lãderhosen to be surprisingly c

Fw: [Sks-devel] Re: New search options question

2010-12-30 Thread kristian . fiskerstrand
And this was already implemented for the sub-pool eu.pool.sks-keyservers.net as srv _pgpkey._tcp.eu.pool.sks-keyservers.net based on response times from the servers --Original Message-- From: Daniel Kahn Gillmor Sender: sks-devel-bounces+reg-sks=kfwebs@nongnu.org To: Mike O'Connor C

[Sks-devel] Re: Hardware Issue / Kristian

2011-03-19 Thread Kristian Fiskerstrand
n. I recommend adding these additional nameservers to the glue of sks-keyservers.net's zone, e.g in form nsXX.sks-keyservers.net and then add these as authoritative nameservers for the zone. - -- - Kristian Fiskerstrand http://www

[Sks-devel] Re: Hardware Issue / Kristian (Resolved)

2011-03-20 Thread Kristian Fiskerstrand
also damaged ? > > If that is the case, what about some backup hardware for that machine ? > Need anything ? Im sure that we can also find some help for that too :-) > There we go. Then the primary ns and webserver is back up again :) - -- - ---- Kristian Fiskerstra

[Sks-devel] Re: Hardware Issue / Kristian

2011-03-20 Thread Kristian Fiskerstrand
type slave; file "sec/sks-keyservers.net.zone";masters{ 213.161.224.2; };}; - -- - Kristian Fiskerstrand http://www.kfwebs.net - Nosce te ipsum! Know thyself! - http://www.secure-my-email.com http://www.secure-

[Sks-devel] Re: Hardware Issue / Kristian (Resolved)

2011-03-20 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sebastian Urbach wrote, On 03/20/2011 05:06 PM: > On Sun, 20 Mar 2011 15:21:28 +0100 > Kristian Fiskerstrand wrote: > > Hi, > >>> If that is the case, what about some backup hardware for that machine ? >>> Ne

[Sks-devel] sks-keyservers.net DNS Slaves added

2011-03-20 Thread Kristian Fiskerstrand
. - -- - Kristian Fiskerstrand http://www.kfwebs.net - Nosce te ipsum! Know thyself! - http://www.secure-my-email.com http://www.secure-my-internet.com -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.14 (GNU

[Sks-devel] Re: Are IPv6-only keyservers acceptable in the pool?

2011-04-04 Thread Kristian Fiskerstrand
scenario. I just gave the source a quick look and I don't see any immediate reason why it shouldn't work. PS! I would recommend not including an A record for the FQDN of the keyserver in the hostname. - -- - ---- Kristian Fiskerstrand http://www.kfwebs.net - --

Re: [Sks-devel] self-membership

2011-04-11 Thread Kristian Fiskerstrand
> localhost. :-) > > May I suggest to delete them? The result is quite confusing. > Thanks for pointing this one out. Added it to the exclude list, at least it doesn't show up in the stats anymore now :) - -- - Kristian Fiskerstrand http://www.kfwebs.

Re: [Sks-devel] self-membership

2011-04-11 Thread Kristian Fiskerstrand
> localhost. :-) > > May I suggest to delete them? The result is quite confusing. > Thanks for pointing this one out. Added it to the exclude list, at least it doesn't show up in the stats anymore now :) - -- - Kristian Fiskerstrand http://www.kfwebs.

Re: [Sks-devel] self-membership

2011-04-12 Thread Kristian Fiskerstrand
oc :) Made index2 use the same list as index.php now ... - -- - Kristian Fiskerstrand http://www.kfwebs.net - Nosce te ipsum! Know thyself! - http://www.secure-my-email.com http://www.secure-my-internet.com -BEGIN

Re: [Sks-devel] Big amount of updated keys yesterday?

2011-04-12 Thread Kristian Fiskerstrand
from [2001:610:1:40cc::9164:b9e5]:11371> > > Cheers > > Gabor > 213.161.224.2 is me, I got it from sks.pkqs.net and keyserver.stack.nl 2011-04-11 19:28:14 6777 hashes recovered from 2011-04-12 08:06:05 3824 hashes recovered from - -- - K

Re: [Sks-devel] Big amount of updated keys yesterday?

2011-04-12 Thread Kristian Fiskerstrand
but I'll submit the relevant logs if anyone wants to look at them). PS! People should also report the relevant timezone of the server in this event - -- - Kristian Fiskerstrand http://www.kfwebs.net - Nosce te ipsum! Know thyself! - --

Re: [Sks-devel] Mass drop from pool

2011-04-19 Thread Kristian Fiskerstrand
could try to make sense of http://storage.sks-keyservers.net/map.png :) It is generated using graphviz, so if you want the original .dot file to try to make it more usable, feel free to let me know. - -- - Kristian Fiskerstrand http://www.kfwebs.net -

Re: [Sks-devel] website / pool mirror

2011-04-19 Thread Kristian Fiskerstrand
ics were last updated: 2011-04-09 17:16 (CET)". Jens hasn't added the update script to crontab yet, so its not being updated yet :) - -- - Kristian Fiskerstrand http://www.kfwebs.net - Nosce te ipsum! Know thyself! - -

Re: [Sks-devel] Mass drop from pool

2011-04-19 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Matthew Palmer wrote, On 04/19/2011 07:46 PM: > On Tue, Apr 19, 2011 at 01:32:11PM +0200, Kristian Fiskerstrand wrote: >> Matthew Palmer wrote, On 04/19/2011 10:42 AM: >>> I would recommend making the algorithm less tied to o

Re: [Sks-devel] Mass drop from pool

2011-04-19 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Daniel Kahn Gillmor wrote, On 04/19/2011 08:07 PM: > On 04/19/2011 02:04 PM, Kristian Fiskerstrand wrote: >> All email addresses are mangled in my client here, and you don't seem to >> have signed the message so I can't fin

Re: [Sks-devel] keyserver resources

2011-04-20 Thread Kristian Fiskerstrand
more? (especially additions then from relatively low-power servers) Have a very nice easter, everyone! - -- - Kristian Fiskerstrand http://www.kfwebs.net - Nosce te ipsum! Know thyself! - http://www.secure-my-e

Re: [Sks-devel] key.ip6.li status

2011-05-24 Thread Kristian Fiskerstrand
vide a well-functioning point to get/send keys, so whether 75 or 95 servers are found is of less importance to me as long as it find 1) well-connected and 2) sufficient number of servers. - -- - ---- Kristian Fiskerstrand kristian.fiskerstr...@sumptuouscapital.com ht

Re: [Sks-devel] Pool statistics not parsing 1.1.2's stats pages anymore

2011-09-23 Thread Kristian Fiskerstrand
fixed now in r56 - -- - ---- Kristian Fiskerstrand kristian.fiskerstr...@sumptuouscapital.com http://www.sumptuouscapital.com - Nosce te ipsum! Know thyself! - This email was digitally signed using the OpenPGP standard. If you want to rea

Re: [Sks-devel] Pool statistics not parsing 1.1.2's stats pages anymore

2011-09-23 Thread Kristian Fiskerstrand
fixed now in r56 - -- - ---- Kristian Fiskerstrand kristian.fiskerstr...@sumptuouscapital.com http://www.sumptuouscapital.com - Nosce te ipsum! Know thyself! - This email was digitally signed using the OpenPGP standard. If you want t

Re: [Sks-devel] Invalid Signature

2011-09-23 Thread Kristian Fiskerstrand
t; This is probably just gmane mangling the email address - -- - ---- Kristian Fiskerstrand http://www.sumptuouscapital.com - Adde parvum parvo magnus acervus erit Add little to little and there will be a big pile - ---

Re: [Sks-devel] Pool statistics not parsing 1.1.2's stats pages anymore

2011-09-23 Thread Kristian Fiskerstrand
g the full DOM properly, but for simplicity I'm doing simple PCRE regex matching, so the additional attribute that was introduce was causing a mismatch. But should be fixed now - -- - Kristian Fiskerstrand kristian.fiskerstr...@sumptuouscapital.com http://www.sumpt

[Sks-devel] Maintenance notification sks-keyservers.net website

2011-10-01 Thread Kristian Fiskerstrand
the pool as the DNS servers are distributed. - -- - Kristian Fiskerstrand http://www.sumptuouscapital.com - Nunc aut numquam Now or never - This email was digitally signed using the OpenPGP standard. If you want

Re: [Sks-devel] Maintenance notification sks-keyservers.net website

2011-10-10 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Kristian Fiskerstrand wrote, On 10/01/2011 06:05 PM: > Dear all, > > Due to infrastructure maintenance in the period 3. October - 7th > of October the website sks-keyservers.net and updating of the pool > can be unavailable for some

Re: [Sks-devel] sks-keyservers.net over ipv6

2011-12-16 Thread Kristian Fiskerstrand
. > Thanks for the heads-up I have now added ipv4.sks-keyservers.net as an IPv4 only option - -- - ---- Kristian Fiskerstrand http://www.sumptuouscapital.com - Ubi mel ibi apes Where there's honey, there are bees -

Re: [Sks-devel] sks-keyservers.net over ipv6

2012-01-01 Thread Kristian Fiskerstrand
ys, so sorry for the late reply. Does the problem still persist? I'm able to access ipv4.sks-keyservers.net on my end, at least . - -- - ---- Kristian Fiskerstrand http://www.sumptuouscapital.com - There are two tragedies in life. One is to lo

Re: [Sks-devel] sks.betabuild.net

2012-01-04 Thread Kristian Fiskerstrand
nd bugtracker is at http://code.google.com/p/sks-keyservers-pool/ - -- - ---- Kristian Fiskerstrand http://www.sumptuouscapital.com - Nihil lacrima citius arescit Nothing dries more quickly than a tear - This email w

Re: [Sks-devel] How many is too many?

2012-01-24 Thread Kristian Fiskerstrand
multiple aliases can be shown in multiple locations rather than as a single server. [1] http://sks-keyservers.net/status/sks2.dot [2] http://storage.sks-keyservers.net/map.png - -- - ---- Kristian Fiskerstrand http://www.sumptuouscapital.com - ---

Re: [Sks-devel] How many is too many?

2012-01-24 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Kristian Fiskerstrand wrote, On 01/24/2012 11:10 PM: > The question of gossip partners, in my opinion, should take this > into effect rather than looking at the pure number, as adding > multiple gossip partners within a single cluster

Re: [Sks-devel] Keyserver dump and restore procedure

2012-01-29 Thread Kristian Fiskerstrand
t; reasonable? Alternatively, after shutting down SKS: cd /etc/sks/KDB /usr/bin/db4.1_recover /usr/bin/db4.1_archive | xargs rm cd /etc/sks/PTree /usr/bin/db4.1_recover /usr/bin/db4.1_archive | xargs rm /usr/local/bin/sks cleandb - -- - ---- Kristian Fiskerstrand kr

Re: [Sks-devel] Peers required/offerred

2012-02-07 Thread Kristian Fiskerstrand
0x6b0b9508 - -- - ---- Kristian Fiskerstrand kristian.fiskerstr...@sumptuouscapital.com http://www.sumptuouscapital.com Twitter: @krifisk - Manus manum lavat One hand washes the other - This email was digitally signed using the OpenPGP standard. If you want t

Re: [Sks-devel] New Server

2012-02-07 Thread Kristian Fiskerstrand
ils in return so I can do the > same: > > keyserver.uberslacks.com 11370 # Mike Doty 0xA797C7A7 > > Thank you. > Hi Mike, I've added you to the membership file of keys2.kfwebs.net keys2.kfwebs.net 11370 # 0x6b0b9508 - -- - ---- Kristian Fisk

Re: [Sks-devel] Pool website

2012-02-27 Thread Kristian Fiskerstrand
the heads up, should be back up shortly. - -- - ---- Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krifisk - Nomina stultorum scribuntur ubique locorum Fools have the habit of writing their names everywhere -

Re: [Sks-devel] keyserver.nausch.org died once again :( - PTree may be corrupted

2012-03-16 Thread Kristian Fiskerstrand
should see the current source. By default jiffies are used, but that can cause problems within a VM hypervisor in particular (which is why a few provide custom kernels for it). Adding more clocksources will require a bit of kernel (/module) compilations. [1] http://en.wikipedia.org/wiki/Jiffy_(time)

Re: [Sks-devel] keyserver.nausch.org died once again :( - PTree may be corrupted

2012-03-17 Thread Kristian Fiskerstrand
or similar, but it should have a watchdog to monitor for that. I'm using it here as an example, without having any specific recommendation for your individual system. - -- - Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krifisk -

Re: [Sks-devel] simple DoS against SKS's HKP interface :/

2012-03-19 Thread Kristian Fiskerstrand
e running a similar setup now on both IPv4 and IPv6. - -- - Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krifisk - Corruptissima re publica plurimæ leges The greater the degeneration of the republic, the more of

Re: [Sks-devel] simple DoS against SKS's HKP interface :/

2012-03-19 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 19.03.2012 18:24, Daniel Kahn Gillmor wrote: > On 03/19/2012 07:38 AM, Kristian Fiskerstrand wrote: >> On 19.03.2012 02:25, Daniel Kahn Gillmor wrote: ... > If there was an ha-pool.sks-keyservers.net , i would be very happy > to us

Re: [Sks-devel] keys.christensenplace.us not showing IPv6 capable

2012-03-19 Thread Kristian Fiskerstrand
NEW tcp dpt:11371 > > [2] http://sks-keyservers.net/status/info/keys.christensenplace.us > > -- Eric > I'm getting; alpha sks-keyservers.net # telnet 2001:4830:1600:363::2 11371 Trying 2001:4830:1600:363::2... telnet: connect to address 2001:4830:1600:363::2: Connection refus

Re: [Sks-devel] Problems with sks_build

2012-03-20 Thread Kristian Fiskerstrand
his to unlimited and then try to run the process again? - -- - Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krifisk - Corruptissima re publica plurimæ leges The greater the degeneration of the republic, the more of its laws - This ema

[Sks-devel] Network outage website sks-keyservers.net

2012-03-20 Thread Kristian Fiskerstrand
later today. - -- - Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krifisk - Corruptissima re publica plurimæ leges The greater the degeneration of the republic, the more of its laws - This email

[Sks-devel] sks-keyservers.net: Finally parallelised / Diff changed to 1, 000

2012-03-22 Thread Kristian Fiskerstrand
d any [1] http://code.google.com/p/sks-keyservers-pool/issues/detail?id=4 [2] http://code.google.com/p/sks-keyservers-pool/source/detail?r=74 [3] http://code.google.com/p/sks-keyservers-pool/issues/list - -- - ---- Kristian Fiskerstrand http://www.sumptuouscapital.com Tw

Re: [Sks-devel] simple DoS against SKS's HKP interface :/

2012-03-25 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 21.03.2012 11:49, Phil Pennock wrote: > On 2012-03-19 at 21:11 +0100, Kristian Fiskerstrand wrote: >> Here you go! > >> Added ha.pool. The HTTP Server code is available at e.g. >> http://sks-keyservers.net/status/info/k

Re: [Sks-devel] simple DoS against SKS's HKP interface :/

2012-03-25 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 26.03.2012 00:46, Daniel Kahn Gillmor wrote: > On 03/25/2012 05:53 PM, Kristian Fiskerstrand wrote: >> Did a few more changes[0] to speed up the IP lookup process, and >> included adding IPv6 for some subset pools (including the HA

[Sks-devel] sks-keyservers.net: Now updates 4 times a day / New North America pool

2012-03-29 Thread Kristian Fiskerstrand
c=svn - -- - Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krifisk - Corruptissima re publica plurimæ leges The greater the degeneration of the republic, the more of its laws - This email was digitally signed using the OpenPGP sta

[Sks-devel] sks-keyservers.net: New inclusion criteria for pool

2012-04-09 Thread Kristian Fiskerstrand
vers.net/status/ - -- - ---- Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krifisk - Corruptissima re publica plurimæ leges The greater the degeneration of the republic, the more of its laws - This email was digitally signed us

Re: [Sks-devel] peering broken for keyservers using reverse-proxies?

2012-04-09 Thread Kristian Fiskerstrand
72. This is, however, firewall restricted to IPs of my peers. - -- - ---- Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krifisk - Corruptissima re publica plurimæ leges The greater the degeneration of the

Re: [Sks-devel] Fwd: Unauthorized server connections

2012-04-09 Thread Kristian Fiskerstrand
eer. - -- - ---- Kristian Fiskerstrand http://www.sumptuouscapital.com Twitter: @krifisk - Corruptissima re publica plurimæ leges The greater the degeneration of the republic, the more of its laws - This email was digita

<    1   2   3   4   5   6   7   >