diff options
| -rw-r--r-- | Kjqmt7v.crt | bin | 974 -> 0 bytes | |||
| -rw-r--r-- | Kjqmt7v.csr | bin | 765 -> 0 bytes | |||
| -rw-r--r-- | root-anchors.p7s | bin | 2551 -> 2523 bytes | |||
| -rw-r--r-- | root-anchors.xml | 8 | ||||
| -rwxr-xr-x | update-root-anchors.sh | 21 | ||||
| -rwxr-xr-x | update-root-hints.sh | 21 |
6 files changed, 49 insertions, 1 deletions
diff --git a/Kjqmt7v.crt b/Kjqmt7v.crt Binary files differdeleted file mode 100644 index 61c6647..0000000 --- a/Kjqmt7v.crt +++ /dev/null diff --git a/Kjqmt7v.csr b/Kjqmt7v.csr Binary files differdeleted file mode 100644 index 2610452..0000000 --- a/Kjqmt7v.csr +++ /dev/null diff --git a/root-anchors.p7s b/root-anchors.p7s Binary files differindex fc6cd07..2330484 100644 --- a/root-anchors.p7s +++ b/root-anchors.p7s diff --git a/root-anchors.xml b/root-anchors.xml index 3536f08..a484ecb 100644 --- a/root-anchors.xml +++ b/root-anchors.xml @@ -1,5 +1,5 @@ <?xml version="1.0" encoding="UTF-8"?> -<TrustAnchor id="380DC50D-484E-40D0-A3AE-68F2B18F61C7" source="http://data.iana.org/root-anchors/root-anchors.xml"> +<TrustAnchor id="E9724F53-1851-4F86-85E5-F1392102940B" source="http://data.iana.org/root-anchors/root-anchors.xml"> <Zone>.</Zone> <KeyDigest id="Kjqmt7v" validFrom="2010-07-15T00:00:00+00:00" validUntil="2019-01-11T00:00:00+00:00"> <KeyTag>19036</KeyTag> @@ -13,4 +13,10 @@ <DigestType>2</DigestType> <Digest>E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D</Digest> </KeyDigest> +<KeyDigest id="Kmyv6jo" validFrom="2024-07-18T00:00:00+00:00"> +<KeyTag>38696</KeyTag> +<Algorithm>8</Algorithm> +<DigestType>2</DigestType> +<Digest>683D2D0ACB8C9B712A1948B27F741219298D0A450D612C483AF444A4C0FB2B16</Digest> +</KeyDigest> </TrustAnchor> diff --git a/update-root-anchors.sh b/update-root-anchors.sh new file mode 100755 index 0000000..298c224 --- /dev/null +++ b/update-root-anchors.sh @@ -0,0 +1,21 @@ +#!/bin/sh -e +# This data is documented at <https://www.iana.org/dnssec/files>. + +wget -O root-anchors.xml.NEW https://data.iana.org/root-anchors/root-anchors.xml + +# ignore the update date, which changes daily +if diff -u root-anchors.xml root-anchors.xml.NEW; then + echo "root-anchors.xml has NOT changed." + rm root-anchors.xml.NEW + exit +fi + +echo "root-anchors.xml has changed." + +wget -O root-anchors.p7s.NEW https://data.iana.org/root-anchors/root-anchors.p7s + +openssl smime -verify -content signed-file -CAfile icannbundle.pem -inform DER -in root-anchors.p7s -content root-anchors.xml -out /dev/null + +mv root-anchors.xml.NEW root-anchors.xml +mv root-anchors.p7s.NEW root-anchors.p7s + diff --git a/update-root-hints.sh b/update-root-hints.sh new file mode 100755 index 0000000..14319b3 --- /dev/null +++ b/update-root-hints.sh @@ -0,0 +1,21 @@ +#!/bin/sh -e +# This data is documented at <https://www.iana.org/domains/root/files>. + +wget -O root.hints.NEW https://www.internic.net/domain/named.root + +# ignore the update date, which changes daily +if diff -u --ignore-matching-lines='^;[[:space:]]*\(last update\|related version of root zone\):' root.hints root.hints.NEW; then + echo "root.hints has NOT changed." + rm root.hints.NEW + exit +fi + +echo "root.hints has changed." + +wget -O root.hints.sig.NEW https://www.internic.net/domain/named.root.sig + +gpgv --keyring $(pwd)/registry-admin.key root.hints.sig.NEW root.hints.NEW + +mv root.hints.NEW root.hints +mv root.hints.sig.NEW root.hints.sig + |