diff --git a/daemon/README.rst b/daemon/README.rst index 1c2a21f6820e89526697c30e9897ba292e7da600..c3dc6e3179e1b24f91d8b458e64327a5a8fc19f6 100644 --- a/daemon/README.rst +++ b/daemon/README.rst @@ -22,8 +22,8 @@ To enable it, you need to provide trusted root keys. Bootstrapping of the keys i $ kresd -k root-new.keys # File for root keys [ ta ] keyfile 'root-new.keys': doesn't exist, bootstrapping [ ta ] Root trust anchors bootstrapped over https with pinned certificate. - You may want to verify them manually, as described on: - https://data.iana.org/root-anchors/old/draft-icann-dnssec-trust-anchor.html#sigs + You SHOULD verify them manually against original source: + https://www.iana.org/dnssec/files [ ta ] Current root trust anchors are: . 0 IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5 . 0 IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D diff --git a/daemon/lua/trust_anchors.lua.in b/daemon/lua/trust_anchors.lua.in index 78c990c2b96c19f0b8848c8e213b35a92e7df52a..7c9e27dad61be687dbbd09132a459368d5457aad 100644 --- a/daemon/lua/trust_anchors.lua.in +++ b/daemon/lua/trust_anchors.lua.in @@ -42,8 +42,8 @@ local function bootstrap(url, ca) return false, string.format('[ ta ] failed to get any record from "%s"', url) end local msg = '[ ta ] Root trust anchors bootstrapped over https with pinned certificate.\n' - .. ' You may want to verify them manually, as described on:\n' - .. ' https://data.iana.org/root-anchors/old/draft-icann-dnssec-trust-anchor.html#sigs\n' + .. ' You SHOULD verify them manually against original source:\n' + .. ' https://www.iana.org/dnssec/files\n' .. '[ ta ] Current root trust anchors are:' .. rr return rr, msg