Re: DNS Key rollover for dnsmasq [SOLVED}

2018-10-07 Thread Rick Thomas
On Oct 7, 2018, at 3:36 AM, Eduardo M KALINOWSKI wrote: > On 07-10-2018 07:11, Rick Thomas wrote: >> On further study, it seems that (in Debian Stretch, at least) the root KSK’s >> used by dnsmasq are taken from the file /usr/share/dns/root.ds, which is >> provided by the package dns-root-da

Re: DNS Key rollover

2018-10-07 Thread Rob van der Putten
Hi there On 04/10/2018 20:32, Reco wrote: Please do not top post. On Thu, Oct 04, 2018 at 02:15:52PM -0400, Default User wrote: Hi, Henning. I am running Unstable, with 4.18.0-2 amd-64 kernel, all updated. I don't know anything about bind. How do I know what bind version I am running, and

Re: DNS Key rollover for dnsmasq [SOLVED}

2018-10-07 Thread Rob van der Putten
Hi there On 07/10/2018 12:36, Eduardo M KALINOWSKI wrote: On 07-10-2018 07:11, Rick Thomas wrote: On further study, it seems that (in Debian Stretch, at least) the root KSK’s used by dnsmasq are taken from the file /usr/share/dns/root.ds, which is provided by the package dns-root-data; and

Re: DNS Key rollover for dnsmasq [SOLVED}

2018-10-07 Thread Eduardo M KALINOWSKI
On 07-10-2018 07:11, Rick Thomas wrote: > On further study, it seems that (in Debian Stretch, at least) the root KSK’s > used by dnsmasq are taken from the file /usr/share/dns/root.ds, which is > provided by the package dns-root-data; and that package seems to be part of > the standard Stretch i

Re: DNS Key rollover for dnsmasq [SOLVED}

2018-10-07 Thread Rick Thomas
H… On further study, it seems that (in Debian Stretch, at least) the root KSK’s used by dnsmasq are taken from the file /usr/share/dns/root.ds, which is provided by the package dns-root-data; and that package seems to be part of the standard Stretch installation. That file lists both keys

Re: DNS Key rollover

2018-10-07 Thread Rick Thomas
On Oct 4, 2018, at 11:32 AM, Reco wrote: > On Thu, Oct 04, 2018 at 02:15:52PM -0400, Default User wrote: >> Hi, Henning. >> >> I am running Unstable, with 4.18.0-2 amd-64 kernel, all updated. >> >> I don't know anything about bind. How do I know what bind version I am >> running, and if I nee

Re: DNS Key rollover

2018-10-04 Thread Default User
On Thu, Oct 4, 2018 at 2:33 PM Reco wrote: > Hi. > > Please do not top post. > > On Thu, Oct 04, 2018 at 02:15:52PM -0400, Default User wrote: > > Hi, Henning. > > > > I am running Unstable, with 4.18.0-2 amd-64 kernel, all updated. > > > > I don't know anything about bind. How do I know

Re: DNS Key rollover

2018-10-04 Thread Reco
Hi. Please do not top post. On Thu, Oct 04, 2018 at 02:15:52PM -0400, Default User wrote: > Hi, Henning. > > I am running Unstable, with 4.18.0-2 amd-64 kernel, all updated. > > I don't know anything about bind. How do I know what bind version I am > running, and if I need to do anythin

Re: DNS Key rollover

2018-10-04 Thread john doe
On 10/4/2018 8:15 PM, Default User wrote: > Hi, Henning. > > I am running Unstable, with 4.18.0-2 amd-64 kernel, all updated. > > I don't know anything about bind. How do I know what bind version I am > running, and if I need to do anything regarding the change you mentioned? > Are you using BI

Re: DNS Key rollover

2018-10-04 Thread Default User
Hi, Henning. I am running Unstable, with 4.18.0-2 amd-64 kernel, all updated. I don't know anything about bind. How do I know what bind version I am running, and if I need to do anything regarding the change you mentioned? On Thu, Oct 4, 2018, 09:11 Henning Follmann wrote: > Hello Everybody,

DNS Key rollover

2018-10-04 Thread Henning Follmann
Hello Everybody, just a small reminder. In one week (yes seven days) a new root anker must be used for dnssec resolver. If you run bind9 from current debian stretch you should be fine. If you roll your own bind.keys file make sure the key with serial 20326 is loaded. happy resolving, -H -- He