Skip to content
Snippets Groups Projects
Verified Commit afd10757 authored by Petr Špaček's avatar Petr Špaček
Browse files

docs: update link to IANA web with DNSSEC root TA

parent 06fd748d
Branches
Tags
1 merge request!358Split CLI for managed and unmanaged trust anchor modes
Pipeline #32200 passed with warnings with stages
in 8 minutes and 43 seconds
......@@ -22,8 +22,8 @@ To enable it, you need to provide trusted root keys. Bootstrapping of the keys i
$ kresd -k root-new.keys # File for root keys
[ ta ] keyfile 'root-new.keys': doesn't exist, bootstrapping
[ ta ] Root trust anchors bootstrapped over https with pinned certificate.
You may want to verify them manually, as described on:
https://data.iana.org/root-anchors/old/draft-icann-dnssec-trust-anchor.html#sigs
You SHOULD verify them manually against original source:
https://www.iana.org/dnssec/files
[ ta ] Current root trust anchors are:
. 0 IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5
. 0 IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D
......
......@@ -42,8 +42,8 @@ local function bootstrap(url, ca)
return false, string.format('[ ta ] failed to get any record from "%s"', url)
end
local msg = '[ ta ] Root trust anchors bootstrapped over https with pinned certificate.\n'
.. ' You may want to verify them manually, as described on:\n'
.. ' https://data.iana.org/root-anchors/old/draft-icann-dnssec-trust-anchor.html#sigs\n'
.. ' You SHOULD verify them manually against original source:\n'
.. ' https://www.iana.org/dnssec/files\n'
.. '[ ta ] Current root trust anchors are:'
.. rr
return rr, msg
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment