* Heiko Schlittermann:

>> Can you show us the output from:
>> 
>>   dig +cd +dnssec ftp.debian.org DS

Same here.

>>   dig +cd +dnssec ftp.debian.org DNSKEY

DNSKEYs are the same, but then we've got this:

 ftp.debian.org.                IN      DNSKEY  256 3 5 
AwEAAbKb7JLMdZbv5Ao/WndIcKiSajrEOzDggGF4JZGhkB/KD74sdZP4 
Stx47dJqUCOoA2ULnN3vtovBZbUdOkTFi2cSNuyzt6r4WnSmSi+iVtth 
4yTroUSirmT3dSQYU6Ouz6XhtqmwSL6kO94GHSg0rOYr2qDd0lu3uqs8 
gOCt+H3WHb1R+kl6yvFT1eb7cbmknQ==
 ftp.debian.org.                IN      DNSKEY  256 3 5 
AwEAAd2Q5QHO6rL3wGJET0d5foLUwiEZwXpRodq7j+70fKBTL5jEl6AB 
xpnt/zUHm62u1sYyDhv/mtB0q6cUKm6EnQ03WTiUU2n656fdjtaC+71D 
2B8KYv4uVHxVya5lEaxIklGLJvSnPwClkClanrCeCf0ALqfC74nOAZzy 
sWJ4iDfIth4DX9gcRrNf7lwcShr+Vw==
 ftp.debian.org.                IN      DNSKEY  257 3 5 
AwEAAanX1lSBuFPJX67wvJVJ81hkv1bV1BiqojH3pwdkxusxthvaLbGE 
bHWO4n3uY1gBhYw6ycRpyAUbjLE1NySzjpvfJY5KrLVPh1F89jyo9l16 
nlevXODge/Y5+Q0lOZhNhTDkt+c/Xvf0WfnkWZZVYY3SAZpZP5FBdkpI 
idbyXKMF63JYkYoRSC5gaURYRy6NwJrhUXTRDPPRC0sf7sw1ganNodDy 
6P7KqrWXdUOMBgFfHyQN3BmWjMRVdiY9N2+BnQ==
-ftp.debian.org.                IN      RRSIG   DNSKEY 5 3 28800 20110117141747 
20101220141747 40396 ftp.debian.org. 
Ol3z3D9HUqkLIwHye/XwTYyIU3YdJ3GuPKp2RnrP3QkMPCyd6iR6gW8w 
zh2TCDVZN4NpmFLoApDWFLjavk4WO+5lksA4nseBOc9gs/pR2z41P9cN 
iLyEa5VUOWKQPcXnHDrQHiBRYTsHOoyTE7IRWwSqmkBpPvITrCisSeUT 
c8qdTa/xpmbVw49eiG+EqGOJkbQKwdeHXOpQLhmF0FyPDD9ZvHIMHS4+ 
RCF/eucWdhfp/lx+7F8HFXC7OzjC/NOY
-ftp.debian.org.                IN      RRSIG   DNSKEY 5 3 28800 20110117141747 
20101220141747 9783 ftp.debian.org. 
cI/DJ/lAFVbFgxdZ/B6d7IKG3/M6Jf0EgxCCc1jc8j5u+FsdjKr3Y6Ie 
NeDNwbmu7o3tr6tTj2q1dxhESlz4aLF+GUB7apJ4PlhNO86fkq1J16ii 
Rod91FOKNAetC4T12EZEt6twYhp8QI7/upqkkJCb/44+qLTvygb1PLKr 
T+9ROlVitFEzvUakxbUCiR3N
+ftp.debian.org.                IN      RRSIG   DNSKEY 5 3 28800 20110110133902 
20101213133902 40396 ftp.debian.org. 
FenuaVpG8s5hjyRdyEmcAzXA/JtGsF7V1LqZeQZJ8pwlB6gidgCAUXDW 
wGjZBzzJl48LklxrSxyZDxdtN99/7lbDFgIEsmN5MabeQz6WCP2GBFq6 
A/nQJzLpPnZTqhw5pgfqTCjEyvOEVembqrEX4nU7QzeuYON0p6Y2I49Z 
PHpurX20dxW7DoLtXjeduUF0uTFVk6ToKt4SOpWcUF3syUeoyLzza7S1 
7VaeqLdi0L0u2CE907HQZKP1m3KaFWWN
+ftp.debian.org.                IN      RRSIG   DNSKEY 5 3 28800 20110110133902 
20101213133902 9783 ftp.debian.org. 
v0ug+Kxv8QeSHZg7doZQUnsbKrAnuegSGX+Nfe7BmezONMyXXnbH8TC/ 
CCw3qQBBSltEJY1ytyvicfQnCaHXDc1vDvR9e6kzjoFFJxnSpNKsZXkh 
HtTSuO9RwmwWHQocpv06AOcRL2HeNl6hQcRh+28HGq3bgWveuRASEgKD 
u9eHCuQqtSrk97ymRJzNArON

- is mine, + is yours.

Do you still see the 20101220141747 signature, or has your view since
updated to 20101213133902 or later?

Please also post the output of: dig +cd +dnssec ftp.debian.org TXT


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/87y67k6tz2....@mid.deneb.enyo.de

Reply via email to