From afd10757aef4f7913c56495621af0106d103877f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= <petr.spacek@nic.cz>
Date: Tue, 23 Jan 2018 15:20:01 +0100
Subject: [PATCH] docs: update link to IANA web with DNSSEC root TA
---
daemon/README.rst | 4 ++--
daemon/lua/trust_anchors.lua.in | 4 ++--
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/daemon/README.rst b/daemon/README.rst
index 1c2a21f68..c3dc6e317 100644
--- a/daemon/README.rst
+++ b/daemon/README.rst
@@ -22,8 +22,8 @@ To enable it, you need to provide trusted root keys. Bootstrapping of the keys i
$ kresd -k root-new.keys # File for root keys
[ ta ] keyfile 'root-new.keys': doesn't exist, bootstrapping
[ ta ] Root trust anchors bootstrapped over https with pinned certificate.
- You may want to verify them manually, as described on:
- https://data.iana.org/root-anchors/old/draft-icann-dnssec-trust-anchor.html#sigs
+ You SHOULD verify them manually against original source:
+ https://www.iana.org/dnssec/files
[ ta ] Current root trust anchors are:
. 0 IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5
. 0 IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D
diff --git a/daemon/lua/trust_anchors.lua.in b/daemon/lua/trust_anchors.lua.in
index 78c990c2b..7c9e27dad 100644
--- a/daemon/lua/trust_anchors.lua.in
+++ b/daemon/lua/trust_anchors.lua.in
@@ -42,8 +42,8 @@ local function bootstrap(url, ca)
return false, string.format('[ ta ] failed to get any record from "%s"', url)
end
local msg = '[ ta ] Root trust anchors bootstrapped over https with pinned certificate.\n'
- .. ' You may want to verify them manually, as described on:\n'
- .. ' https://data.iana.org/root-anchors/old/draft-icann-dnssec-trust-anchor.html#sigs\n'
+ .. ' You SHOULD verify them manually against original source:\n'
+ .. ' https://www.iana.org/dnssec/files\n'
.. '[ ta ] Current root trust anchors are:'
.. rr
return rr, msg
--
GitLab