[ksk-rollover] new root trust anchor confirmation

Ralf Weber dns at fl1ger.de
Fri Aug 11 10:23:43 UTC 2017


Moin!

On 10 Aug 2017, at 23:03, Evan Hunt wrote:

> On Thu, Aug 10, 2017 at 06:03:42PM +0000, Wessels, Duane via 
> ksk-rollover wrote:
>> In general, no.
>>
>> If you happen to run a recent unbound you could query your validator 
>> for
>> trustanchor.unbound CH TXT
>
> If you run a recent BIND, "rndc managed-keys status"
>
> I'm told powerdns has "rec_control get-tas".
Nominum Cacheserve has:
	nom-tell cacheserve resolver.mget fields='(managed-keys-state)'
and the setup I have has by now picked up and accepted the new root key.

So long
-Ralf


More information about the ksk-rollover mailing list