Starting on the morning of June 21 between ~6am and 9am PDT, one of our CI jobs which fetches gpg keys with:gpg --keyserver hkp://pool.sks-keyservers.net <http://pool.sks-keyservers.net> --recv-keys ... .... started failing because of what looks like a failure to resolve the pool name.FWIW the following also fails in the same way:gpg --keyserver hkp://ipv4.pool.sks-keyservers.net <http://ipv4.pool.sks-keyservers.net> --recv-keys ...And testing from my machine, it looks like these names now get NXDOMAIN when attempting to resolve in DNS:$ host ipv4.pool.sks-keyservers.net <http://ipv4.pool.sks-keyservers.net>Host ipv4.pool.sks-keyservers.net <http://ipv4.pool.sks-keyservers.net> not found: 3(NXDOMAIN)$ host pool.sks-keyservers.net <http://pool.sks-keyservers.net>Host pool.sks-keyservers.net <http://pool.sks-keyservers.net> not found: 3(NXDOMAIN)Did these names get permanently deleted? Any workarounds or suggestions would be appreciated.
Hey Alex,From what I can tell a lot of the keyservers are being shutdown. Take a look at the message on the SKS site (the SSL cert is expired) https://sks-keyservers.net/.
You can read about some of whats going on from here https://gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f.
Sincerely, Brandon Anderson
OpenPGP_0x255837AEF812E87E.asc
Description: OpenPGP public key
OpenPGP_signature
Description: OpenPGP digital signature
_______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
