From 3cd2e1bceb7bfcb3480f5ce913ba8494af1a8324518e5c4b568ec287d9f2478d Mon Sep 17 00:00:00 2001 From: Marguerite Su Date: Sat, 3 Nov 2018 02:58:17 +0000 Subject: [PATCH] Accepting request 645289 from home:dstoecker:oldos - Drop pre-rollover key 19036 from 2010, only leave 2017/2018 rollover key 20326 (bsc#1112009, bsc#1004165) A temporary fix in my eyes - long term solution should be to find an way to generate these files on installation. OBS-URL: https://build.opensuse.org/request/show/645289 OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=89 --- root.anchor | 1 - root.key | 3 +-- unbound.changes | 6 ++++++ 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/root.anchor b/root.anchor index 9b9cea2..1688bb5 100644 --- a/root.anchor +++ b/root.anchor @@ -1,2 +1 @@ . 172800 IN DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ;{id = 20326 (ksk), size = 2048b} -. 98799 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} diff --git a/root.key b/root.key index 0a54815..e359a3b 100644 --- a/root.key +++ b/root.key @@ -1,8 +1,7 @@ ; https://ftp.isc.org/isc/bind9/keys/9.11/bind.keys.v9_11 ; // The root key in bind format. This can be read by most tools, including ; // named, unbound, et. For libunbound, use ub_ctx_trustedkeys() to load this -; // first key 19036 (2010), second key 20326 (key-rollover 2017/2018) +; // key 20326 (key-rollover 2017/2018) trusted-keys { -"." 257 3 8 "AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0="; // key id = 19036 "." 257 3 8 "AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU="; // key id = 20326 }; diff --git a/unbound.changes b/unbound.changes index 1235294..9d31de2 100644 --- a/unbound.changes +++ b/unbound.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Tue Oct 16 17:47:13 UTC 2018 - Dirk Stoecker + +- Drop pre-rollover key 19036 from 2010, only leave 2017/2018 rollover + key 20326 (bsc#1112009, bsc#1004165) + ------------------------------------------------------------------- Tue Oct 16 15:01:15 UTC 2018 - Karol Babioch