Date: Sun, 2 May 2021 01:05:38 +0200 From: Rainer Duffner <rainer@ultra-secure.de> To: patrick.prugger@uname.at Cc: freebsd-pkg@freebsd.org, dnsadm@freebsd.org Subject: Re: DNSSEC Errors on geo.freebsd.org Message-ID: <CD0CA45E-A45D-4103-8AF3-A9759C079BE1@ultra-secure.de> In-Reply-To: <0a0c01d73ece$22f1dc60$68d59520$@uname.at> References: <0a0c01d73ece$22f1dc60$68d59520$@uname.at>
next in thread | previous in thread | raw e-mail | index | archive | help
> Am 01.05.2021 um 23:08 schrieb patrick.prugger--- via freebsd-pkg = <freebsd-pkg@freebsd.org>: >=20 > Hello everyone! >=20 > I just turned on DNSSEC validation on my DNS and it came to my eye = that pkg > now doesn't work anymore. > Pkg is trying to access http://pkgmir.geo.freebsd.org/ to download de > repository catalogue. >=20 > Unfortunately it seems freebsd.org is signed with DNSSEC, but > geo.freebsd.org isn't which leads to a DNSSEC error, broken chain of = trust. > For a diagram look here: > https://dnsviz.net/d/pkgmir.geo.freebsd.org/dnssec/ >=20 > Does anyone here have a contact to the maintainers of the freebsd.org = DNS > zone? >=20 https://www.freebsd.org/administration/#t-dnsadm
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CD0CA45E-A45D-4103-8AF3-A9759C079BE1>