DNSSEC Errors on geo.freebsd.org

patrick.prugger at uname.at patrick.prugger at uname.at
Sat May 1 21:08:35 UTC 2021


Hello everyone!

I just turned on DNSSEC validation on my DNS and it came to my eye that pkg
now doesn't work anymore.
Pkg is trying to access http://pkgmir.geo.freebsd.org/ to download de
repository catalogue.

Unfortunately it seems freebsd.org is signed with DNSSEC, but
geo.freebsd.org isn't which leads to a DNSSEC error, broken chain of trust.
For a diagram look here:
https://dnsviz.net/d/pkgmir.geo.freebsd.org/dnssec/

Does anyone here have a contact to the maintainers of the freebsd.org DNS
zone?

Best regards
Patrick Prugger



More information about the freebsd-pkg mailing list