RCS file: /home/wytze/RCS/keylist,v Working file: /home/wytze/keylist head: 1.48 branch: locks: strict access list: symbolic names: keyword substitution: kv total revisions: 48; selected revisions: 48 description: keylist - output from the 'ods-ksmutil key list' command at some point in time ---------------------------- revision 1.48 date: 2019/10/28 11:32:37; author: wytze; state: Exp; lines: +24 -28 Snapshot taken end of October 2019 in stable state. ---------------------------- revision 1.47 date: 2019/10/18 08:54:53; author: wytze; state: Exp; lines: +14 -14 Status after completed KSK rollover for cacert.com, cacert.net and cacert.org, involving key ds-seen new-ksk and key ds-gone old-ksk. ---------------------------- revision 1.46 date: 2019/10/17 15:40:51; author: wytze; state: Exp; lines: +31 -21 Snapshot taken mid-October 2019, after upgrade to OpenDNSSEC 2.1.4. ---------------------------- revision 1.45 date: 2018/02/25 09:41:58; author: wytze; state: Exp; lines: +21 -27 Snapshot taken end of February 2018. ---------------------------- revision 1.44 date: 2017/10/26 14:47:43; author: wytze; state: Exp; lines: +27 -21 Status after completed KSK rollover for cacert.com, cacert.net and cacert.org, involving key ds-seen new-ksk and key ds-gone old-ksk. ---------------------------- revision 1.43 date: 2016/11/20 08:14:10; author: wytze; state: Exp; lines: +19 -19 Status after completed KSK rollover for cacert.org, including key ds-seen new-ksk, key ds-gone oldksk and key purge. ---------------------------- revision 1.42 date: 2016/10/04 09:12:59; author: wytze; state: Exp; lines: +18 -18 Status at some quiet moment -- everyhting looks OK. ---------------------------- revision 1.41 date: 2016/08/27 09:04:16; author: wytze; state: Exp; lines: +18 -24 Status after dropping cacert.community zone. ---------------------------- revision 1.40 date: 2016/08/01 10:51:51; author: wytze; state: Exp; lines: +15 -15 Status after migration to OpenSUSE 13.2 server. ---------------------------- revision 1.39 date: 2016/07/24 10:02:26; author: wytze; state: Exp; lines: +15 -35 Status after cleanup by running key purge for the cacert.org, cacert.com and cacert.net zones. ---------------------------- revision 1.38 date: 2016/07/21 09:16:27; author: wytze; state: Exp; lines: +32 -30 Status on July 21, slowly progressing towards healthy state. ---------------------------- revision 1.37 date: 2016/07/20 09:28:08; author: wytze; state: Exp; lines: +52 -30 Status the next day, with reformatted output. ---------------------------- revision 1.36 date: 2016/07/19 13:46:54; author: wytze; state: Exp; lines: +29 -41 Status after repairing cacert.com and cacert.net zones with help from Yuri Schaeffer. cacert.community zone has been deleted and re-added, with weird results for now. ---------------------------- revision 1.35 date: 2016/07/18 15:43:17; author: wytze; state: Exp; lines: +31 -31 Status after applying Yuri Schaeffer's patch to kasp.db, restarting opendnssec, and ods-enforcer enforce + signconf. ---------------------------- revision 1.34 date: 2016/07/18 14:50:01; author: wytze; state: Exp; lines: +11 -7 Status after performing a KSK plus ZSK key rollover for cacert.community, and issuing ds-gone's for all retired KSK's. ---------------------------- revision 1.33 date: 2016/07/18 14:36:50; author: wytze; state: Exp; lines: +9 -5 New situation after rolling over KSK and ZSK for cacert.com. This breaks the zone, because we cannot get the DS for keyid 40429 from key export, which should be uploaded to the registrar to bring the zone back to life. ---------------------------- revision 1.32 date: 2016/07/18 14:13:57; author: wytze; state: Exp; lines: +20 -16 Status on July 18, 2016 16:15, after repairing the cacert.net zone. ---------------------------- revision 1.31 date: 2016/07/16 14:24:06; author: wytze; state: Exp; lines: +21 -0 Run both reports at the same time, since they contain additional information. ---------------------------- revision 1.30 date: 2016/07/16 14:17:59; author: wytze; state: Exp; lines: +20 -20 Status after adding the --debug flag for full OpenDNSSEC 2.0 information. ---------------------------- revision 1.29 date: 2016/07/16 14:03:10; author: wytze; state: Exp; lines: +20 -25 Keylist after upgrade to OpenDNSSEC 2.0. ---------------------------- revision 1.28 date: 2015/10/26 14:36:32; author: wytze; state: Exp; lines: +18 -16 Status on 20151026 after KSK key rollover, submitting new DS hashes and issuing ods-ksmutil key ds-seen for the ready KSK's. The new KSK goes from ready to active, the old KSK from active to retire. Note that cacert.community still needs to be done. ---------------------------- revision 1.27 date: 2014/10/20 10:36:18; author: wytze; state: Exp; lines: +16 -12 Status on 20141020 after KSK key rollover, submitting new DS hashes and issuing ods-ksmutil key ds-seen for the ready KSK's. The new KSK goes from ready to active, the old KSK from active to retire. ---------------------------- revision 1.26 date: 2014/07/16 15:29:44; author: wytze; state: Exp; lines: +10 -10 Status after issuing ods-ksmutil key ds-seen for cacert.community. ---------------------------- revision 1.25 date: 2014/06/11 09:44:19; author: wytze; state: Exp; lines: +11 -6 Status after adding cacert.community domain. ---------------------------- revision 1.24 date: 2013/10/23 14:48:49; author: wytze; state: Exp; lines: +0 -3 Status after retirement of old KSK's. ---------------------------- revision 1.23 date: 2013/10/18 09:03:58; author: wytze; state: Exp; lines: +6 -6 Status after issuing ods-ksmutil key ds-seen for the ready KSK's. The new KSK goes from ready to active, the old KSK from active to retire. ---------------------------- revision 1.22 date: 2013/10/18 08:32:48; author: wytze; state: Exp; lines: +9 -6 Status on 20131018 after key rollover, but before submitting new DS hashes. ---------------------------- revision 1.21 date: 2012/10/24 11:34:54; author: wytze; state: Exp; lines: +0 -4 Status after retirement of old KSK's. ---------------------------- revision 1.20 date: 2012/10/17 15:58:03; author: wytze; state: Exp; lines: +6 -6 Status after issuing ods-ksmutil key ds-seen for the ready KSK's. The new KSK goes from ready to active, the old KSK from active to retire. ---------------------------- revision 1.19 date: 2012/10/17 15:26:00; author: wytze; state: Exp; lines: +1 -1 Refresh on 20121017 before KSK rollover, or rather submitting new DS for all three zones. ---------------------------- revision 1.18 date: 2012/10/16 20:05:58; author: wytze; state: Exp; lines: +6 -4 Refresh on 20121016 before KSK rollover. ---------------------------- revision 1.17 date: 2012/10/05 09:16:16; author: wytze; state: Exp; lines: +8 -6 Refresh on 20121005. ---------------------------- revision 1.16 date: 2011/11/24 10:32:57; author: wytze; state: Exp; lines: +2 -4 Update for 20111124 (after running ods-ksmutil key generate -p default --interval P1Y). ---------------------------- revision 1.15 date: 2011/11/08 16:36:13; author: wytze; state: Exp; lines: +6 -5 Update for 20111108. ---------------------------- revision 1.14 date: 2011/10/18 16:35:40; author: wytze; state: Exp; lines: +0 -1 Update for 20111018. ---------------------------- revision 1.13 date: 2011/10/17 16:34:51; author: wytze; state: Exp; lines: +2 -2 Second update for 20111017. ---------------------------- revision 1.12 date: 2011/10/17 16:34:36; author: wytze; state: Exp; lines: +4 -7 Update for 20111017. ---------------------------- revision 1.11 date: 2011/10/16 16:34:06; author: wytze; state: Exp; lines: +7 -6 Third update for 20111016. ---------------------------- revision 1.10 date: 2011/10/16 16:33:35; author: wytze; state: Exp; lines: +2 -2 Second update for 20111016. ---------------------------- revision 1.9 date: 2011/10/16 16:33:11; author: wytze; state: Exp; lines: +4 -5 Update for 20111016. ---------------------------- revision 1.8 date: 2011/10/15 16:32:41; author: wytze; state: Exp; lines: +2 -1 Update for 20111015. ---------------------------- revision 1.7 date: 2011/10/13 16:32:03; author: wytze; state: Exp; lines: +7 -5 Update for 20111013. ---------------------------- revision 1.6 date: 2011/09/27 16:31:25; author: wytze; state: Exp; lines: +1 -1 Update for 20110927. ---------------------------- revision 1.5 date: 2011/09/19 16:29:45; author: wytze; state: Exp; lines: +1 -1 Second update for 20110919. ---------------------------- revision 1.4 date: 2011/09/19 16:29:14; author: wytze; state: Exp; lines: +10 -8 Update for 20110919. ---------------------------- revision 1.3 date: 2011/08/26 16:28:39; author: wytze; state: Exp; lines: +1 -1 Second update for 20110826. ---------------------------- revision 1.2 date: 2011/08/26 16:27:47; author: wytze; state: Exp; lines: +6 -9 Update for 20110826. ---------------------------- revision 1.1 date: 2011/04/13 16:26:05; author: wytze; state: Exp; Initial revision =============================================================================