dnssec: sign CDS/CDNSKEY with KSK instead of ZSK (!897) · Merge requests · Knot projects / Knot DNS

GitLab now enforces expiry dates on tokens that originally had no set expiration date. Those tokens were given an expiration date of one year later. Please review your personal access tokens, project access tokens, and group access tokens to ensure you are aware of upcoming expirations. Administrators of GitLab can find more information on how to identify and mitigate interruption in our documentation.

Self sign-up has been disabled due to increased spam activity. If you want to get access, please send an email to a project owner (preferred) or at gitlab(at)nic(dot)cz. We apologize for the inconvenience.

Libor Peltan requested to merge sign_cds_with_ksk into master Mar 22, 2018

...this is according to RFC 7344 section 4.1

however, this may do problems with offline-KSK setup

Admin message

Admin message

dnssec: sign CDS/CDNSKEY with KSK instead of ZSK

Merge request reports