From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <overseers-return-12799-listarch-overseers=sources.redhat.com@sourceware.org>
Received: (qmail 18195 invoked by alias); 12 Jul 2014 15:20:07 -0000
Mailing-List: contact overseers-help@sourceware.org; run by ezmlm
Precedence: bulk
List-Id: <overseers.sourceware.org>
List-Archive: <http://sourceware.org/ml/overseers/>
List-Post: <mailto:overseers@sourceware.org>
List-Help: <mailto:overseers-help@sourceware.org>,
	<http://sourceware.org/ml/#faqs>
Sender: overseers-owner@sourceware.org
Received: (qmail 18157 invoked by uid 89); 12 Jul 2014 15:20:06 -0000
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-3.9 required=5.0 tests=AWL,BAYES_00,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,RP_MATCHES_RCVD,SPF_PASS autolearn=ham version=3.3.2
X-HELO: mail-lb0-f174.google.com
Received: from mail-lb0-f174.google.com (HELO mail-lb0-f174.google.com) (209.85.217.174)
 by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES128-SHA encrypted) ESMTPS; Sat, 12 Jul 2014 15:20:04 +0000
Received: by mail-lb0-f174.google.com with SMTP id u10so1731043lbd.19
        for <overseers@sourceware.org>; Sat, 12 Jul 2014 08:20:01 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20130820;
        h=x-gm-message-state:mime-version:sender:in-reply-to:references:date
         :message-id:subject:from:to:cc:content-type;
        bh=mmNz/+xB7yrEluzVt5mOCdpKqjKmoNzrAz3HieSTwkE=;
        b=jnVmHOCVgQw+f0UIUPu/Vf2Y0LwHNLr+UCstRgQxVBZ+cjh1hGE7OXQEUFIm+JpCCJ
         Kcj6qZIErpMKSfcE0/fVCeSkALdR9AvFJYpp5646SHdU4BfjtvqpQ8rxcWtFjzW3POmu
         /oB+hxGZmNxRHOJ4G4yYOl7mP1md7UrkKOxK+1Hxncy+HxTpzqJzJDi94jbore34Iv0X
         cdfMfdNZkpzY2Dxmem210s1YjaWAS/TlV45+g/4XOg2fp4FGDNx51B5TfHUE1NLomEQ5
         afHdSFjGumUnXKfIhohCRYQhTUCLj5nyfzOKFVGyO+C7mWgvd5kMjY98oiYwfzjNRtRw
         LTRw==
X-Gm-Message-State: ALoCoQnY0FPsAtint9oKkfToILCHLJjaaHafTTR1gvNq3CgB48hikXZIULdX6+rW/1LcWnQJ3J2f
MIME-Version: 1.0
X-Received: by 10.153.7.74 with SMTP id da10mr4688066lad.27.1405178400949;
 Sat, 12 Jul 2014 08:20:00 -0700 (PDT)
Received: by 10.114.12.137 with HTTP; Sat, 12 Jul 2014 08:20:00 -0700 (PDT)
In-Reply-To: <20140712110154.GA12828@redhat.com>
References: <20140712110154.GA12828@redhat.com>
Date: Sat, 12 Jul 2014 15:20:00 -0000
Message-ID: <CAKOQZ8ybhcuPfBmFOXLir7Xf5_9d7FpL=U68knN4qUv48XwO8A@mail.gmail.com>
Subject: Re: dnssec for sourceware
From: Ian Lance Taylor <ianlancetaylor@gmail.com>
To: "Frank Ch. Eigler" <fche@redhat.com>
Cc: Sourceware Overseers <overseers@sourceware.org>
Content-Type: text/plain; charset=UTF-8
X-SW-Source: 2014-q3/txt/msg00023.txt.bz2

On Sat, Jul 12, 2014 at 4:01 AM, Frank Ch. Eigler <fche@redhat.com> wrote:
>
> I believe sourceware.org is set up (with a third-party bind 9.9)
> with dnssec data locally.  The registrar needs to add just these
> two records to their zone:
>
> sourceware.org. IN DS 1828 5 2 AC36913913EC104BB10588DF9AE6BE89281431300F28F6CC70A886FD2904B55C
> sourceware.org. IN DS 96 5 2 29219704D9D4FA42DB897CD82ACE824E73EDB3AD5B7FBDBCF07DA49B26C69C32

Thanks.  I've installed those keys in the DNS registrar for
sourceware.org.  I also made sure that the secondary name servers are
updated.

When I try http://dnssec-debugger.verisignlabs.com/sourceware.org to
test it, it reports "No RRSIGs found".  I'm not sure whether that is
an issue with the secondary name servers (which are running djbdns) or
whether something else is wrong.

Ian