DNSSEC Errors on geo.freebsd.org

Sat May 1 23:05:52 UTC 2021


> Am 01.05.2021 um 23:08 schrieb patrick.prugger--- via freebsd-pkg <freebsd-pkg at freebsd.org>:
> 
> Hello everyone!
> 
> I just turned on DNSSEC validation on my DNS and it came to my eye that pkg
> now doesn't work anymore.
> Pkg is trying to access http://pkgmir.geo.freebsd.org/ to download de
> repository catalogue.
> 
> Unfortunately it seems freebsd.org is signed with DNSSEC, but
> geo.freebsd.org isn't which leads to a DNSSEC error, broken chain of trust.
> For a diagram look here:
> https://dnsviz.net/d/pkgmir.geo.freebsd.org/dnssec/
> 
> Does anyone here have a contact to the maintainers of the freebsd.org DNS
> zone?
> 

https://www.freebsd.org/administration/#t-dnsadm