<div dir="ltr"><br><div>I checked and all the Unbound servers my employer operates has accepted the new KSK as trusted </div><div>My personal ones as well </div><div><br></div><div>Olafur</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Aug 11, 2017 at 8:00 AM, Edward Lewis <span dir="ltr"><<a href="mailto:edward.lewis@icann.org" target="_blank">edward.lewis@icann.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">My servers picked it up - a BIND 9.9.5-3ubuntu0.13-Ubuntu and an Unbound 1.5.8.<br>
<br>
I couldn't check on my Aug 10 (an eye exam related issue), but when I woke up Aug 11 they were caught up.<br>
<div class="HOEnZb"><div class="h5"><br>
On 8/10/17, 22:20, "Richard Lamb" <<a href="mailto:richard.lamb@icann.org">richard.lamb@icann.org</a>> wrote:<br>
<br>
Samples before and after today.<br>
<br>
*** 10 Aug 2017 1815 UTC APPEND ***<br>
<br>
/usr/local/etc/unbound$ cat root.key<br>
; autotrust trust anchor file<br>
;;id: . 1<br>
;;last_queried: 1502363785 ;;Thu Aug 10 04:16:25 2017<br>
;;last_success: 1502363785 ;;Thu Aug 10 04:16:25 2017<br>
;;next_probe_time: 1502406039 ;;Thu Aug 10 16:00:39 2017<br>
;;query_failed: 0<br>
;;query_interval: 43200<br>
;;retry_time: 8640<br>
. 172800 IN DNSKEY 257 3 8 AwEAAaz/<wbr>tAm8yTn4Mfeh5eyI96WSVexTBAvkMg<wbr>JzkKTOiW1vkIbzxeF3+/<wbr>4RgWOq7HrxRixHlFlExOLAJr5emLvN<wbr>7SWXgnLh4+<wbr>B5xQlNVz8Og8kvArMtNROxVQuCaSnI<wbr>DdD5LKyWbRd2n9WGe2R8PzgCmr3EgV<wbr>LrjyBxWezF0jLHwVN8efS3rCj/<wbr>EWgvIWgb9tarpVUDK/b58Da+<wbr>sqqls3eNbuv7pr+eoZG+<wbr>SrDK6nWeL3c6H5Apxz7LjVc1uTIdsI<wbr>XxuOLYA4/<wbr>ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+<wbr>2hM8AnXGXws9555KrUB5qihylGa8su<wbr>bX2Nn6UwNR1AkUTV74bU= ;{id = 20326 (ksk), size = 2048b} ;;state=1 [ ADDPEND ] ;;count=65 ;;lastchange=1499788113 ;;Tue Jul 11 08:48:33 2017<br>
. 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+<wbr>9W29euxhJhVVLOyQbSEW0O8gcCjFFV<wbr>QUTf6v58fLjwBd0YI0EzrAcQqBGCzh<wbr>/<wbr>RStIoO8g0NfnfL2MTJRkxoXbfDaUeV<wbr>PQuYEhg37NZWAJQ9VnMVDxP/<wbr>VHL496M/QZxkjf5/<wbr>Efucp2gaDX6RS6CXpoY68LsvPVjR0Z<wbr>Swzz1apAzvN9dlzEheX7ICJBBtuA6G<wbr>3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6<wbr>DoBQzgul0sGIcGOYl7OyQdXfZ57rel<wbr>SQageu+<wbr>ipAdTTJ25AsRTAoub8ONGcLmqrAmRL<wbr>KBP1dfwhYB4N7knNnulqQxA+<wbr>Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} ;;state=2 [ VALID ] ;;count=0 ;;lastchange=1480379125 ;;Mon Nov 28 16:25:25 2016<br>
<br>
*** 11 Aug 2017 0112 UTC ***<br>
<br>
/usr/local/etc/unbound$ cat root.key<br>
; autotrust trust anchor file<br>
;;id: . 1<br>
;;last_queried: 1502406039 ;;Thu Aug 10 16:00:39 2017<br>
;;last_success: 1502406039 ;;Thu Aug 10 16:00:39 2017<br>
;;next_probe_time: 1502447443 ;;Fri Aug 11 03:30:43 2017<br>
;;query_failed: 0<br>
;;query_interval: 43200<br>
;;retry_time: 8640<br>
. 172800 IN DNSKEY 257 3 8 AwEAAaz/<wbr>tAm8yTn4Mfeh5eyI96WSVexTBAvkMg<wbr>JzkKTOiW1vkIbzxeF3+/<wbr>4RgWOq7HrxRixHlFlExOLAJr5emLvN<wbr>7SWXgnLh4+<wbr>B5xQlNVz8Og8kvArMtNROxVQuCaSnI<wbr>DdD5LKyWbRd2n9WGe2R8PzgCmr3EgV<wbr>LrjyBxWezF0jLHwVN8efS3rCj/<wbr>EWgvIWgb9tarpVUDK/b58Da+<wbr>sqqls3eNbuv7pr+eoZG+<wbr>SrDK6nWeL3c6H5Apxz7LjVc1uTIdsI<wbr>XxuOLYA4/<wbr>ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+<wbr>2hM8AnXGXws9555KrUB5qihylGa8su<wbr>bX2Nn6UwNR1AkUTV74bU= ;{id = 20326 (ksk), size = 2048b} ;;state=2 [ VALID ] ;;count=0 ;;lastchange=1502406039 ;;Thu Aug 10 16:00:39 2017<br>
. 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+<wbr>9W29euxhJhVVLOyQbSEW0O8gcCjFFV<wbr>QUTf6v58fLjwBd0YI0EzrAcQqBGCzh<wbr>/<wbr>RStIoO8g0NfnfL2MTJRkxoXbfDaUeV<wbr>PQuYEhg37NZWAJQ9VnMVDxP/<wbr>VHL496M/QZxkjf5/<wbr>Efucp2gaDX6RS6CXpoY68LsvPVjR0Z<wbr>Swzz1apAzvN9dlzEheX7ICJBBtuA6G<wbr>3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6<wbr>DoBQzgul0sGIcGOYl7OyQdXfZ57rel<wbr>SQageu+<wbr>ipAdTTJ25AsRTAoub8ONGcLmqrAmRL<wbr>KBP1dfwhYB4N7knNnulqQxA+<wbr>Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} ;;state=2 [ VALID ] ;;count=0 ;;lastchange=1480379125 ;;Mon Nov 28 16:25:25 2016<br>
<br>
<br>
> -----Original Message-----<br>
> From: <a href="mailto:ksk-rollover-bounces@icann.org">ksk-rollover-bounces@icann.org</a> [mailto:<a href="mailto:ksk-rollover-">ksk-rollover-</a><br>
> <a href="mailto:bounces@icann.org">bounces@icann.org</a>] On Behalf Of Jakob Schlyter<br>
> Sent: Thursday, August 10, 2017 11:03 AM<br>
> To: Edward Lewis <<a href="mailto:edward.lewis@icann.org">edward.lewis@icann.org</a>><br>
> Cc: <a href="mailto:ksk-rollover@icann.org">ksk-rollover@icann.org</a><br>
> Subject: Re: [ksk-rollover] Automated Updates (aka RFC 5011) add-hold for<br>
> the new root zone KSK expires soon<br>
><br>
><br>
><br>
> > On 9 Aug 2017, at 19:31, Edward Lewis <<a href="mailto:edward.lewis@icann.org">edward.lewis@icann.org</a>> wrote:<br>
> ><br>
> > Looking at my records, the new KSK appeared between 2017-07-<br>
> 11@1305UTC and 2017-07-11@1405UTC. (I run some probes at 5 minutes<br>
> after the hour.)<br>
> ><br>
> > "30 Days later" means 10 August (not 11 August!). We are less than 24<br>
> hours away from that as I write this message (about 20 hours now).<br>
><br>
> ; autotrust trust anchor file<br>
> ;;id: . 1<br>
> ;;last_queried: 1502388111 ;;Thu Aug 10 20:01:51 2017<br>
> ;;last_success: 1502388111 ;;Thu Aug 10 20:01:51 2017<br>
> ;;next_probe_time: 1502428592 ;;Fri Aug 11 07:16:32 2017<br>
> ;;query_failed: 0<br>
> ;;query_interval: 43200<br>
> ;;retry_time: 8640<br>
> . 172800 IN DNSKEY 257 3 8<br>
> AwEAAagAIKlVZrpC6Ia7gEzahOR+<wbr>9W29euxhJhVVLOyQbSEW0O8gcCjFFV<wbr>QUT<br>
> f6v58fLjwBd0YI0EzrAcQqBGCzh/<wbr>RStIoO8g0NfnfL2MTJRkxoXbfDaUeV<wbr>PQuYEh<br>
> g37NZWAJQ9VnMVDxP/VHL496M/<wbr>QZxkjf5/<wbr>Efucp2gaDX6RS6CXpoY68LsvPVjR<br>
> 0ZSwzz1apAzvN9dlzEheX7ICJBBtuA<wbr>6G3LQpzW5hOA2hzCTMjJPJ8LbqF6ds<wbr>V6D<br>
> oBQzgul0sGIcGOYl7OyQdXfZ57relS<wbr>Qageu+<wbr>ipAdTTJ25AsRTAoub8ONGcLmqrA<br>
> mRLKBP1dfwhYB4N7knNnulqQxA+<wbr>Uk1ihz0= ;{id = 19036 (ksk), size = 2048b}<br>
> ;;state=2 [ VALID ] ;;count=0 ;;lastchange=1418717042 ;;Tue Dec 16 09:04:02<br>
> 2014<br>
> . 172800 IN DNSKEY 257 3 8<br>
> AwEAAaz/<wbr>tAm8yTn4Mfeh5eyI96WSVexTBAvkMg<wbr>JzkKTOiW1vkIbzxeF3+/4Rg<br>
> WOq7HrxRixHlFlExOLAJr5emLvN7SW<wbr>XgnLh4+<wbr>B5xQlNVz8Og8kvArMtNROxVQ<br>
> uCaSnIDdD5LKyWbRd2n9WGe2R8PzgC<wbr>mr3EgVLrjyBxWezF0jLHwVN8efS3rC<wbr>j/<br>
> EWgvIWgb9tarpVUDK/b58Da+<wbr>sqqls3eNbuv7pr+eoZG+<wbr>SrDK6nWeL3c6H5Apxz<br>
> 7LjVc1uTIdsIXxuOLYA4/<wbr>ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+<wbr>2hM8AnXGXws<br>
> 9555KrUB5qihylGa8subX2Nn6UwNR1<wbr>AkUTV74bU= ;{id = 20326 (ksk), size =<br>
> 2048b} ;;state=2 [ VALID ] ;;count=0 ;;lastchange=1502388111 ;;Thu Aug 10<br>
> 20:01:51 2017<br>
><br>
> ______________________________<wbr>_________________<br>
> ksk-rollover mailing list<br>
> <a href="mailto:ksk-rollover@icann.org">ksk-rollover@icann.org</a><br>
> <a href="https://mm.icann.org/mailman/listinfo/ksk-rollover" rel="noreferrer" target="_blank">https://mm.icann.org/mailman/<wbr>listinfo/ksk-rollover</a><br>
<br>
</div></div><br>______________________________<wbr>_________________<br>
ksk-rollover mailing list<br>
<a href="mailto:ksk-rollover@icann.org">ksk-rollover@icann.org</a><br>
<a href="https://mm.icann.org/mailman/listinfo/ksk-rollover" rel="noreferrer" target="_blank">https://mm.icann.org/mailman/<wbr>listinfo/ksk-rollover</a><br>
<br></blockquote></div><br></div>