CSK rollovers (!856) · Merge requests · Knot projects / Knot DNS · GitLab

GitLab now enforces expiry dates on tokens that originally had no set expiration date. Those tokens were given an expiration date of one year later. Please review your personal access tokens, project access tokens, and group access tokens to ensure you are aware of upcoming expirations. Administrators of GitLab can find more information on how to identify and mitigate interruption in our documentation.

Self sign-up has been disabled due to increased spam activity. If you want to get access, please send an email to a project owner (preferred) or at gitlab(at)nic(dot)cz. We apologize for the inconvenience.

Libor Peltan requested to merge csk_rollovers into master Nov 03, 2017

Implementation of various rollovers regarding CombinedSigningKey:

algorithm rollover using CSK either on first algo, second algo, or both
signing scheme rollover: from CSK to KSK+ZSK in the same algo and back

The rollovers are triggered by reloading configuration and are exclusive in time.

Edited Nov 10, 2017 by Libor Peltan