CVS commit: [netbsd-7-0] src/etc/namedb
Module Name:src
Committed By: snj
Date: Sat Mar 10 16:11:46 UTC 2018
Modified Files:
src/etc/namedb [netbsd-7-0]: bind.keys
Log Message:
Pull up following revision(s) (requested by maya in ticket #1583):
etc/namedb/bind.keys: 1.2
Update the keys file to the latest version from:
https://ftp.isc.org/isc/bind9/keys/9.11/bind.keys.v9_11
This includes the new KSK2017 key which is planned to replace the KSK2010
in October 11th, 2018. It is important to have software that ships with
both before September 11th 2018. Anything that bootstraps after that could
have trouble switching.
To generate a diff of this commit:
cvs rdiff -u -r1.1 -r1.1.14.1 src/etc/namedb/bind.keys
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/etc/namedb/bind.keys
diff -u src/etc/namedb/bind.keys:1.1 src/etc/namedb/bind.keys:1.1.14.1
--- src/etc/namedb/bind.keys:1.1 Thu Apr 25 17:02:29 2013
+++ src/etc/namedb/bind.keys Sat Mar 10 16:11:45 2018
@@ -1,5 +1,4 @@
-/* $NetBSD: bind.keys,v 1.1 2013/04/25 17:02:29 christos Exp $ */
-/* Id: bind.keys,v 1.7 2011-01-03 23:45:07 each Exp */
+/* $NetBSD: bind.keys,v 1.1.14.1 2018/03/10 16:11:45 snj Exp $ */
# The bind.keys file is used to override the built-in DNSSEC trust anchors
# which are included as part of BIND 9. As of the current release, the only
# trust anchors it contains are those for the DNS root zone ("."), and for
@@ -16,15 +15,18 @@
#
# This file is NOT expected to be user-configured.
#
-# These keys are current as of January 2011. If any key fails to
+# These keys are current as of February 2017. If any key fails to
# initialize correctly, it may have expired. In that event you should
# replace this file with a current version. The latest version of
# bind.keys can always be obtained from ISC at https://www.isc.org/bind-keys.
managed-keys {
# ISC DLV: See https://www.isc.org/solutions/dlv for details.
-# NOTE: This key is activated by setting "dnssec-lookaside auto;"
-# in named.conf.
+ #
+ # NOTE: The ISC DLV zone is being phased out as of February 2017;
+ # the key will remain in place but the zone will be otherwise empty.
+ # Configuring "dnssec-lookaside auto;" to activate this key is
+ # harmless, but is no longer useful and is not recommended.
dlv.isc.org. initial-key 257 3 5 "BEPHMu/5onzrEE7z1egmhg/WPO0+juoZrW3euWEn4MxDCE1+lLy2
brhQv5rN32RKtMzX6Mj70jdzeND4XknW58dnJNPCxn8+jAGl2FZLK8t+
1uq4W+nnA3qO2+DL+k6BD4mewMLbIYFwe0PG73Te9fZ2kJb56dhgMde5
@@ -33,10 +35,16 @@ managed-keys {
QKtUdvNXDrYJDSHZws3xiRXF1Rf+al9UmZfSav/4NWLKjHzpT59k/VSt
TDN0YUuWrBNh";
- # ROOT KEY: See https://data.iana.org/root-anchors/root-anchors.xml
+ # ROOT KEYS: See https://data.iana.org/root-anchors/root-anchors.xml
# for current trust anchor information.
-# NOTE: This key is activated by setting "dnssec-validation auto;"
-# in named.conf.
+ #
+ # These keys are activated by setting "dnssec-validation auto;"
+ # in named.conf.
+ #
+ # This key (19036) is to be phased out starting in 2017. It will
+ # remain in the root zone for some time after its successor key
+ # has been added. It will remain this file until it is removed from
+ # the root zone.
. initial-key 257 3 8 "AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF
FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX
bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD
@@ -44,4 +52,19 @@ managed-keys {
W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS
Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq
QxA+Uk1ihz0=";
+
+ # This key (20326) is to be published in the root zone in 2017.
+ # Servers which were already using the old key (19036) should
+ # roll seamlessly to this new one via RFC 5011 rollover. Servers
+ # being set up for the first time can use the contents of this
+ # file as initializing keys; thereafter, the keys in the
+ # managed key database will be trusted and maintained
+ # automatically.
+ . initial-key 257 3 8 "AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3
+ +/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kv
+ ArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF
+ 0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+e
+ oZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfd
+ RUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwN
+ R1AkUTV74bU=";
};
CVS commit: [netbsd-7-0] src/etc/namedb
Module Name:src Committed By: snj Date: Sat Mar 10 16:11:46 UTC 2018 Modified Files: src/etc/namedb [netbsd-7-0]: bind.keys Log Message: Pull up following revision(s) (requested by maya in ticket #1583): etc/namedb/bind.keys: 1.2 Update the keys file to the latest version from: https://ftp.isc.org/isc/bind9/keys/9.11/bind.keys.v9_11 This includes the new KSK2017 key which is planned to replace the KSK2010 in October 11th, 2018. It is important to have software that ships with both before September 11th 2018. Anything that bootstraps after that could have trouble switching. To generate a diff of this commit: cvs rdiff -u -r1.1 -r1.1.14.1 src/etc/namedb/bind.keys Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: [netbsd-7-0] src/etc/namedb
Module Name:src Committed By: snj Date: Sun Nov 5 20:52:28 UTC 2017 Modified Files: src/etc/namedb [netbsd-7-0]: root.cache Log Message: Pull up following revision(s) (requested by taca in ticket #1520): etc/namedb/root.cache: revision 1.23 Update root.cache to 2017102400 (October 24, 2017). B.ROOT-SERVERS.NET's IPv4 and IPv6 address has changed. To generate a diff of this commit: cvs rdiff -u -r1.18.4.4 -r1.18.4.5 src/etc/namedb/root.cache Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: [netbsd-7-0] src/etc/namedb
Module Name:src Committed By: snj Date: Sun Nov 5 20:52:28 UTC 2017 Modified Files: src/etc/namedb [netbsd-7-0]: root.cache Log Message: Pull up following revision(s) (requested by taca in ticket #1520): etc/namedb/root.cache: revision 1.23 Update root.cache to 2017102400 (October 24, 2017). B.ROOT-SERVERS.NET's IPv4 and IPv6 address has changed. To generate a diff of this commit: cvs rdiff -u -r1.18.4.4 -r1.18.4.5 src/etc/namedb/root.cache Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. Modified files: Index: src/etc/namedb/root.cache diff -u src/etc/namedb/root.cache:1.18.4.4 src/etc/namedb/root.cache:1.18.4.5 --- src/etc/namedb/root.cache:1.18.4.4 Tue Nov 1 19:51:24 2016 +++ src/etc/namedb/root.cache Sun Nov 5 20:52:28 2017 @@ -1,4 +1,4 @@ -; $NetBSD: root.cache,v 1.18.4.4 2016/11/01 19:51:24 snj Exp $ +; $NetBSD: root.cache,v 1.18.4.5 2017/11/05 20:52:28 snj Exp $ ; This file holds the information on root name servers needed to ; initialize cache of Internet domain name servers ; (e.g. reference this file in the "cache . " @@ -10,10 +10,10 @@ ; on server FTP.INTERNIC.NET ; -OR-RS.INTERNIC.NET ; -; last update:October 20, 2016 -; related version of root zone: 2016102001 +; last update:October 24, 2017 +; related version of root zone: 2017102400 ; -; formerly NS.INTERNIC.NET +; FORMERLY NS.INTERNIC.NET ; .360 NSA.ROOT-SERVERS.NET. A.ROOT-SERVERS.NET. 360 A 198.41.0.4 @@ -22,8 +22,8 @@ A.ROOT-SERVERS.NET. 360 AA ; FORMERLY NS1.ISI.EDU ; .360 NSB.ROOT-SERVERS.NET. -B.ROOT-SERVERS.NET. 360 A 192.228.79.201 -B.ROOT-SERVERS.NET. 360 2001:500:84::b +B.ROOT-SERVERS.NET. 360 A 199.9.14.201 +B.ROOT-SERVERS.NET. 360 2001:500:200::b ; ; FORMERLY C.PSI.NET ;
CVS commit: [netbsd-7-0] src/etc/namedb
Module Name:src Committed By: snj Date: Tue Nov 1 19:51:24 UTC 2016 Modified Files: src/etc/namedb [netbsd-7-0]: root.cache Log Message: Pull up following revision(s) (requested by taca in ticket #1267): etc/namedb/root.cache: revision 1.22 Update root.cache to 2016102001 (October 20, 2016). To generate a diff of this commit: cvs rdiff -u -r1.18.4.3 -r1.18.4.4 src/etc/namedb/root.cache Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: [netbsd-7-0] src/etc/namedb
Module Name:src Committed By: snj Date: Tue Nov 1 19:51:24 UTC 2016 Modified Files: src/etc/namedb [netbsd-7-0]: root.cache Log Message: Pull up following revision(s) (requested by taca in ticket #1267): etc/namedb/root.cache: revision 1.22 Update root.cache to 2016102001 (October 20, 2016). To generate a diff of this commit: cvs rdiff -u -r1.18.4.3 -r1.18.4.4 src/etc/namedb/root.cache Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. Modified files: Index: src/etc/namedb/root.cache diff -u src/etc/namedb/root.cache:1.18.4.3 src/etc/namedb/root.cache:1.18.4.4 --- src/etc/namedb/root.cache:1.18.4.3 Sun Sep 18 06:06:13 2016 +++ src/etc/namedb/root.cache Tue Nov 1 19:51:24 2016 @@ -1,4 +1,4 @@ -; $NetBSD: root.cache,v 1.18.4.3 2016/09/18 06:06:13 snj Exp $ +; $NetBSD: root.cache,v 1.18.4.4 2016/11/01 19:51:24 snj Exp $ ; This file holds the information on root name servers needed to ; initialize cache of Internet domain name servers ; (e.g. reference this file in the "cache . " @@ -10,8 +10,8 @@ ; on server FTP.INTERNIC.NET ; -OR-RS.INTERNIC.NET ; -; last update:August 25, 2016 -; related version of root zone: 2016082500 +; last update:October 20, 2016 +; related version of root zone: 2016102001 ; ; formerly NS.INTERNIC.NET ; @@ -53,6 +53,7 @@ F.ROOT-SERVERS.NET. 360 AA ; .360 NSG.ROOT-SERVERS.NET. G.ROOT-SERVERS.NET. 360 A 192.112.36.4 +G.ROOT-SERVERS.NET. 360 2001:500:12::d0d ; ; FORMERLY AOS.ARL.ARMY.MIL ;
CVS commit: [netbsd-7-0] src/etc/namedb
Module Name:src Committed By: snj Date: Sun Sep 18 06:06:13 UTC 2016 Modified Files: src/etc/namedb [netbsd-7-0]: root.cache Log Message: Pull up following revision(s) (requested by taca in ticket #1246): etc/namedb/root.cache: revision 1.21 Update root.cache to 2016/8/25 version, l.root-servers.net has record now. To generate a diff of this commit: cvs rdiff -u -r1.18.4.2 -r1.18.4.3 src/etc/namedb/root.cache Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. Modified files: Index: src/etc/namedb/root.cache diff -u src/etc/namedb/root.cache:1.18.4.2 src/etc/namedb/root.cache:1.18.4.3 --- src/etc/namedb/root.cache:1.18.4.2 Mon Apr 11 10:03:35 2016 +++ src/etc/namedb/root.cache Sun Sep 18 06:06:13 2016 @@ -1,4 +1,4 @@ -; $NetBSD: root.cache,v 1.18.4.2 2016/04/11 10:03:35 snj Exp $ +; $NetBSD: root.cache,v 1.18.4.3 2016/09/18 06:06:13 snj Exp $ ; This file holds the information on root name servers needed to ; initialize cache of Internet domain name servers ; (e.g. reference this file in the "cache . " @@ -10,8 +10,8 @@ ; on server FTP.INTERNIC.NET ; -OR-RS.INTERNIC.NET ; -; last update:March 23, 2016 -; related version of root zone: 2016032301 +; last update:August 25, 2016 +; related version of root zone: 2016082500 ; ; formerly NS.INTERNIC.NET ; @@ -41,6 +41,7 @@ D.ROOT-SERVERS.NET. 360 AA ; .360 NSE.ROOT-SERVERS.NET. E.ROOT-SERVERS.NET. 360 A 192.203.230.10 +E.ROOT-SERVERS.NET. 360 2001:500:a8::e ; ; FORMERLY NS.ISC.ORG ;
CVS commit: [netbsd-7-0] src/etc/namedb
Module Name:src Committed By: snj Date: Sun Sep 18 06:06:13 UTC 2016 Modified Files: src/etc/namedb [netbsd-7-0]: root.cache Log Message: Pull up following revision(s) (requested by taca in ticket #1246): etc/namedb/root.cache: revision 1.21 Update root.cache to 2016/8/25 version, l.root-servers.net has record now. To generate a diff of this commit: cvs rdiff -u -r1.18.4.2 -r1.18.4.3 src/etc/namedb/root.cache Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: [netbsd-7-0] src/etc/namedb
Module Name:src Committed By: snj Date: Mon Apr 11 10:03:35 UTC 2016 Modified Files: src/etc/namedb [netbsd-7-0]: root.cache Log Message: Pull up following revision(s) (requested by taca in ticket #1150): etc/namedb/root.cache: revision 1.20 Update root.cache to 2016/3/23 version, l.root-servers.net's record has changed. To generate a diff of this commit: cvs rdiff -u -r1.18.4.1 -r1.18.4.2 src/etc/namedb/root.cache Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: [netbsd-7-0] src/etc/namedb
Module Name:src Committed By: snj Date: Mon Apr 11 10:03:35 UTC 2016 Modified Files: src/etc/namedb [netbsd-7-0]: root.cache Log Message: Pull up following revision(s) (requested by taca in ticket #1150): etc/namedb/root.cache: revision 1.20 Update root.cache to 2016/3/23 version, l.root-servers.net's record has changed. To generate a diff of this commit: cvs rdiff -u -r1.18.4.1 -r1.18.4.2 src/etc/namedb/root.cache Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. Modified files: Index: src/etc/namedb/root.cache diff -u src/etc/namedb/root.cache:1.18.4.1 src/etc/namedb/root.cache:1.18.4.2 --- src/etc/namedb/root.cache:1.18.4.1 Tue Jan 5 22:14:17 2016 +++ src/etc/namedb/root.cache Mon Apr 11 10:03:35 2016 @@ -1,4 +1,4 @@ -; $NetBSD: root.cache,v 1.18.4.1 2016/01/05 22:14:17 snj Exp $ +; $NetBSD: root.cache,v 1.18.4.2 2016/04/11 10:03:35 snj Exp $ ; This file holds the information on root name servers needed to ; initialize cache of Internet domain name servers ; (e.g. reference this file in the "cache . " @@ -10,8 +10,8 @@ ; on server FTP.INTERNIC.NET ; -OR-RS.INTERNIC.NET ; -; last update:December 01, 2015 -; related version of root zone: 2015120100 +; last update:March 23, 2016 +; related version of root zone: 2016032301 ; ; formerly NS.INTERNIC.NET ; @@ -81,7 +81,7 @@ K.ROOT-SERVERS.NET. 360 AA ; .360 NSL.ROOT-SERVERS.NET. L.ROOT-SERVERS.NET. 360 A 199.7.83.42 -L.ROOT-SERVERS.NET. 360 2001:500:3::42 +L.ROOT-SERVERS.NET. 360 2001:500:9f::42 ; ; OPERATED BY WIDE ;
CVS commit: [netbsd-7-0] src/etc/namedb
Module Name:src Committed By: snj Date: Tue Jan 5 22:14:17 UTC 2016 Modified Files: src/etc/namedb [netbsd-7-0]: root.cache Log Message: Pull up following revision(s) (requested by taca in ticket #1055): etc/namedb/root.cache: revision 1.19 Update to 2015120100. * Addresses of H.ROOT-SERVERS.NET has updated. * Make IPv6 address lower case. To generate a diff of this commit: cvs rdiff -u -r1.18 -r1.18.4.1 src/etc/namedb/root.cache Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. Modified files: Index: src/etc/namedb/root.cache diff -u src/etc/namedb/root.cache:1.18 src/etc/namedb/root.cache:1.18.4.1 --- src/etc/namedb/root.cache:1.18 Tue Jul 1 03:33:28 2014 +++ src/etc/namedb/root.cache Tue Jan 5 22:14:17 2016 @@ -1,4 +1,4 @@ -; $NetBSD: root.cache,v 1.18 2014/07/01 03:33:28 taca Exp $ +; $NetBSD: root.cache,v 1.18.4.1 2016/01/05 22:14:17 snj Exp $ ; This file holds the information on root name servers needed to ; initialize cache of Internet domain name servers ; (e.g. reference this file in the "cache . " @@ -10,32 +10,32 @@ ; on server FTP.INTERNIC.NET ; -OR-RS.INTERNIC.NET ; -; last update:June 2, 2014 -; related version of root zone: 2014060201 +; last update:December 01, 2015 +; related version of root zone: 2015120100 ; ; formerly NS.INTERNIC.NET ; -.360 IN NSA.ROOT-SERVERS.NET. +.360 NSA.ROOT-SERVERS.NET. A.ROOT-SERVERS.NET. 360 A 198.41.0.4 -A.ROOT-SERVERS.NET. 360 2001:503:BA3E::2:30 +A.ROOT-SERVERS.NET. 360 2001:503:ba3e::2:30 ; ; FORMERLY NS1.ISI.EDU ; .360 NSB.ROOT-SERVERS.NET. B.ROOT-SERVERS.NET. 360 A 192.228.79.201 -B.ROOT-SERVERS.NET. 360 2001:500:84::B +B.ROOT-SERVERS.NET. 360 2001:500:84::b ; ; FORMERLY C.PSI.NET ; .360 NSC.ROOT-SERVERS.NET. C.ROOT-SERVERS.NET. 360 A 192.33.4.12 -C.ROOT-SERVERS.NET. 360 2001:500:2::C +C.ROOT-SERVERS.NET. 360 2001:500:2::c ; ; FORMERLY TERP.UMD.EDU ; .360 NSD.ROOT-SERVERS.NET. D.ROOT-SERVERS.NET. 360 A 199.7.91.13 -D.ROOT-SERVERS.NET. 360 2001:500:2D::D +D.ROOT-SERVERS.NET. 360 2001:500:2d::d ; ; FORMERLY NS.NASA.GOV ; @@ -46,7 +46,7 @@ E.ROOT-SERVERS.NET. 360 A ; .360 NSF.ROOT-SERVERS.NET. F.ROOT-SERVERS.NET. 360 A 192.5.5.241 -F.ROOT-SERVERS.NET. 360 2001:500:2F::F +F.ROOT-SERVERS.NET. 360 2001:500:2f::f ; ; FORMERLY NS.NIC.DDN.MIL ; @@ -56,26 +56,26 @@ G.ROOT-SERVERS.NET. 360 A ; FORMERLY AOS.ARL.ARMY.MIL ; .360 NSH.ROOT-SERVERS.NET. -H.ROOT-SERVERS.NET. 360 A 128.63.2.53 -H.ROOT-SERVERS.NET. 360 2001:500:1::803F:235 +H.ROOT-SERVERS.NET. 360 A 198.97.190.53 +H.ROOT-SERVERS.NET. 360 2001:500:1::53 ; ; FORMERLY NIC.NORDU.NET ; .360 NSI.ROOT-SERVERS.NET. I.ROOT-SERVERS.NET. 360 A 192.36.148.17 -I.ROOT-SERVERS.NET. 360 2001:7FE::53 +I.ROOT-SERVERS.NET. 360 2001:7fe::53 ; ; OPERATED BY VERISIGN, INC. ; .360 NSJ.ROOT-SERVERS.NET. J.ROOT-SERVERS.NET. 360 A 192.58.128.30 -J.ROOT-SERVERS.NET. 360 2001:503:C27::2:30 +J.ROOT-SERVERS.NET. 360 2001:503:c27::2:30 ; ; OPERATED BY RIPE NCC ; .360 NSK.ROOT-SERVERS.NET. K.ROOT-SERVERS.NET. 360 A 193.0.14.129 -K.ROOT-SERVERS.NET. 360 2001:7FD::1 +K.ROOT-SERVERS.NET. 360 2001:7fd::1 ; ; OPERATED BY ICANN ; @@ -87,5 +87,5 @@ L.ROOT-SERVERS.NET. 360 AA ; .360 NSM.ROOT-SERVERS.NET. M.ROOT-SERVERS.NET. 360 A 202.12.27.33 -M.ROOT-SERVERS.NET. 360 2001:DC3::35 -; End of File +M.ROOT-SERVERS.NET. 360 2001:dc3::35 +; End of file
CVS commit: [netbsd-7-0] src/etc/namedb
Module Name:src Committed By: snj Date: Tue Jan 5 22:14:17 UTC 2016 Modified Files: src/etc/namedb [netbsd-7-0]: root.cache Log Message: Pull up following revision(s) (requested by taca in ticket #1055): etc/namedb/root.cache: revision 1.19 Update to 2015120100. * Addresses of H.ROOT-SERVERS.NET has updated. * Make IPv6 address lower case. To generate a diff of this commit: cvs rdiff -u -r1.18 -r1.18.4.1 src/etc/namedb/root.cache Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
