DNS KSK rollover, local_unbound and 11.2-STABLE

Sat Oct 13 10:31:10 UTC 2018

Just to show that there is no difference between a forwarding setup and
a recursing setup:

# truncate -s0 /etc/resolv.conf      
# service local_unbound setup  
Performing initial setup.
Extracting forwarders from /etc/resolv.conf.
No forwarders found in resolv.conf, unbound will recurse.
/var/unbound/lan-zones.conf created
/var/unbound/control.conf created
/var/unbound/unbound.conf created
/etc/resolvconf.conf not modified
original /etc/resolv.conf saved as /etc/resolv.conf.20181013.122338
# service local_unbound anchor
# cat /var/unbound/root.key 
; created by unbound-anchor on Sat Oct 13 12:23:48 2018
. IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5
. IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D
# /usr/sbin/unbound -ddvv >& tmp/local_unbound-112p3-recursing.log &
[1] 13249
# host www.freebsd.org
www.freebsd.org is an alias for wfe0.nyi.freebsd.org.
wfe0.nyi.freebsd.org has address 96.47.72.84
wfe0.nyi.freebsd.org has IPv6 address 2610:1c1:1:606c::50:15
wfe0.nyi.freebsd.org mail is handled by 0 .
# fg
[1]  + running    sudo /usr/sbin/unbound -ddvv >&tmp/local_unbound-112p3-recursing.log
^C#
# cat /var/unbound/root.key 
; autotrust trust anchor file
;;id: . 1
;;last_queried: 1539426235 ;;Sat Oct 13 12:23:55 2018
;;last_success: 1539426235 ;;Sat Oct 13 12:23:55 2018
;;next_probe_time: 1539469164 ;;Sun Oct 14 00:19:24 2018
;;query_failed: 0
;;query_interval: 43200
;;retry_time: 8640
.	172800	IN	DNSKEY	257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ;{id = 20326 (ksk), size = 2048b} ;;state=2 [  VALID  ] ;;count=0 ;;lastchange=1539426235 ;;Sat Oct 13 12:23:55 2018
.	172800	IN	DNSKEY	257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} ;;state=1 [ ADDPEND ] ;;count=1 ;;lastchange=1539426235 ;;Sat Oct 13 12:23:55 2018

DES
-- 
Dag-Erling Smørgrav - des at des.no

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: local_unbound-112p3-recursing.log
URL: <http://lists.freebsd.org/pipermail/freebsd-net/attachments/20181013/314ee5e5/attachment.ksh>