Re: Anybody else having problems w/ DNSSEC and ftp.debian.org?
* Heiko Schlittermann:
>> Can you show us the output from:
>>
>> dig +cd +dnssec ftp.debian.org DS
Same here.
>> dig +cd +dnssec ftp.debian.org DNSKEY
DNSKEYs are the same, but then we've got this:
ftp.debian.org. IN DNSKEY 256 3 5 AwEAAbKb7JLMdZbv5Ao/WndIcKiSajrEOzDggGF4JZGhkB/KD74sdZP4 Stx47dJqUCOoA2ULnN3vtovBZbUdOkTFi2cSNuyzt6r4WnSmSi+iVtth 4yTroUSirmT3dSQYU6Ouz6XhtqmwSL6kO94GHSg0rOYr2qDd0lu3uqs8 gOCt+H3WHb1R+kl6yvFT1eb7cbmknQ==
ftp.debian.org. IN DNSKEY 256 3 5 AwEAAd2Q5QHO6rL3wGJET0d5foLUwiEZwXpRodq7j+70fKBTL5jEl6AB xpnt/zUHm62u1sYyDhv/mtB0q6cUKm6EnQ03WTiUU2n656fdjtaC+71D 2B8KYv4uVHxVya5lEaxIklGLJvSnPwClkClanrCeCf0ALqfC74nOAZzy sWJ4iDfIth4DX9gcRrNf7lwcShr+Vw==
ftp.debian.org. IN DNSKEY 257 3 5 AwEAAanX1lSBuFPJX67wvJVJ81hkv1bV1BiqojH3pwdkxusxthvaLbGE bHWO4n3uY1gBhYw6ycRpyAUbjLE1NySzjpvfJY5KrLVPh1F89jyo9l16 nlevXODge/Y5+Q0lOZhNhTDkt+c/Xvf0WfnkWZZVYY3SAZpZP5FBdkpI idbyXKMF63JYkYoRSC5gaURYRy6NwJrhUXTRDPPRC0sf7sw1ganNodDy 6P7KqrWXdUOMBgFfHyQN3BmWjMRVdiY9N2+BnQ==
-ftp.debian.org. IN RRSIG DNSKEY 5 3 28800 20110117141747 20101220141747 40396 ftp.debian.org. Ol3z3D9HUqkLIwHye/XwTYyIU3YdJ3GuPKp2RnrP3QkMPCyd6iR6gW8w zh2TCDVZN4NpmFLoApDWFLjavk4WO+5lksA4nseBOc9gs/pR2z41P9cN iLyEa5VUOWKQPcXnHDrQHiBRYTsHOoyTE7IRWwSqmkBpPvITrCisSeUT c8qdTa/xpmbVw49eiG+EqGOJkbQKwdeHXOpQLhmF0FyPDD9ZvHIMHS4+ RCF/eucWdhfp/lx+7F8HFXC7OzjC/NOY
-ftp.debian.org. IN RRSIG DNSKEY 5 3 28800 20110117141747 20101220141747 9783 ftp.debian.org. cI/DJ/lAFVbFgxdZ/B6d7IKG3/M6Jf0EgxCCc1jc8j5u+FsdjKr3Y6Ie NeDNwbmu7o3tr6tTj2q1dxhESlz4aLF+GUB7apJ4PlhNO86fkq1J16ii Rod91FOKNAetC4T12EZEt6twYhp8QI7/upqkkJCb/44+qLTvygb1PLKr T+9ROlVitFEzvUakxbUCiR3N
+ftp.debian.org. IN RRSIG DNSKEY 5 3 28800 20110110133902 20101213133902 40396 ftp.debian.org. FenuaVpG8s5hjyRdyEmcAzXA/JtGsF7V1LqZeQZJ8pwlB6gidgCAUXDW wGjZBzzJl48LklxrSxyZDxdtN99/7lbDFgIEsmN5MabeQz6WCP2GBFq6 A/nQJzLpPnZTqhw5pgfqTCjEyvOEVembqrEX4nU7QzeuYON0p6Y2I49Z PHpurX20dxW7DoLtXjeduUF0uTFVk6ToKt4SOpWcUF3syUeoyLzza7S1 7VaeqLdi0L0u2CE907HQZKP1m3KaFWWN
+ftp.debian.org. IN RRSIG DNSKEY 5 3 28800 20110110133902 20101213133902 9783 ftp.debian.org. v0ug+Kxv8QeSHZg7doZQUnsbKrAnuegSGX+Nfe7BmezONMyXXnbH8TC/ CCw3qQBBSltEJY1ytyvicfQnCaHXDc1vDvR9e6kzjoFFJxnSpNKsZXkh HtTSuO9RwmwWHQocpv06AOcRL2HeNl6hQcRh+28HGq3bgWveuRASEgKD u9eHCuQqtSrk97ymRJzNArON
- is mine, + is yours.
Do you still see the 20101220141747 signature, or has your view since
updated to 20101213133902 or later?
Please also post the output of: dig +cd +dnssec ftp.debian.org TXT
Reply to: