[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Sks-devel] DNS broken for hkps.pool.sks-keyservers.net
|
From: |
Jeremy T. Bouse |
|
Subject: |
Re: [Sks-devel] DNS broken for hkps.pool.sks-keyservers.net |
|
Date: |
Mon, 18 Mar 2019 15:35:29 -0400 |
|
User-agent: |
Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.5.3 |
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On 3/18/2019 1:08 PM, Kristian Fiskerstrand wrote:
> On 3/18/19 3:58 PM, Todd Fleisher wrote:
>> The GNUPG-users post mentions something that may be the root
>> cause: The status page for sks-keyservers.net shows no hosts are
>> currently available via hkps but other ports are available.
>> https://sks-keyservers.net/status/
>> <https://sks-keyservers.net/status/>I’m speculating here, but if
>> whatever Kristian users to update the DNS for
>> hkps.pool.sks-keyservers.net
>> <http://hkps.pool.sks-keyservers.net/> doesn’t think there are
>> any valid nodes available perhaps it doesn’t publish any records.
>> This would result in NXDOMAIN. Given that pool.sks-keyservers.net
>> <http://pool.sks-keyservers.net/> & na.pool.sks-keyservers.net
>> <http://na.pool.sks-keyservers.net/> & others are still resolving
>> properly I don’t think it’s an EDNS issue.
>>
>> Adding Kristian directly in case he filters sks-devel mail.
>>
>
> Well, its a simple enough issue. the CRL expired, so no host
> validated anymore.. Services should be returning to normal soon
> enough. Thanks for the ping.
>
I had noticed that I was only able to resolve pool.sks-keyserver.net
and not any of the others, but I hadn't said anything as I was busy
putting out some other fires around here. Happy to report I'm seeing
full resolution of all pool hostnames once again though now.
-----BEGIN PGP SIGNATURE-----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=0Ok2
-----END PGP SIGNATURE-----