fedora-infrastructure

Clone
Source Code
GIT

#11410 DNSSEC delegation records should stop using SHA-1
Opened 9 months ago by pemensik. Modified 2 months ago

Open
Close issue as:
Duplicate Fixed Initiative Worthy Insufficient data Invalid Spam Upstream Will Not/Can Not fix Fixed with Explanation

NOTE

If your issue is for security or deals with sensitive info please
mark it as private using the checkbox below.

Describe what you would like us to do:

Remove DS algorithm 1 records but keep algorithm 2 records on:
- getfedora.org
- fedorainfracloud.org

If there are more domains still using them, consider removing them as well.

Because those domains are on ECDSAP384SHA384, I doubt there is any validating server able to validate that domain and not longer understanding DS algorithm 2 at the same time.

Fix IPv6 glue addresses, check errors and warnings at:
- https://dnsviz.net/d/getfedora.org/dnssec/
- https://dnsviz.net/d/fedoraproject.org/dnssec/
- https://dnsviz.net/d/fedorainfracloud.org/dnssec/
- https://dnsviz.net/d/fedorapeople.org/dnssec/

When do you need this to be done by? (YYYY/MM/DD)

No hurry, before end of year 2023 would be enough.

Note: fedorapeople.org does not have MX record. If it is not supposed to handle emails, could it say it explicitly by fedorapeople.org. IN MX 0 .?
- check warnings at https://dnsviz.net/d/fedorapeople.org/dnssec/

Metadata Update from @phsmoura:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: low-gain, low-trouble, ops
9 months ago

Would you be interested in making a patch? ;)

https://infrastructure.fedoraproject.org/infra/dns.git/ is the git repo...

Otherwise we can get to it when we can. :)

This also affects ci.fedoraproject.org

[backlog refinement]
@nb wanted to work on this one

Here's a patch to do this. Let me know if I missed anything. I can't actually commit to this though.
- Leo

diff --git a/fedoraproject.org.template b/fedoraproject.org.template
index 4d64f9df..3efa7394 100644
--- a/fedoraproject.org.template
+++ b/fedoraproject.org.template
@@ -923,32 +923,22 @@ fedoraproject.org. IN DNSKEY 256 3 14 04ZsDOgyzs3kJsJ4jEY3MYufkCOWm1OI8N4M+dlBOB
 fedoraproject.org. IN DNSKEY 257 3 14 7ttmhus8JD56ybsvMVZVsXa3U2R+2+WmOPIP7BU6t2LicosMZ2Ju3pfv ijsa5LvBvVCB4xVtLSqEdLSvW4vJPLSAB2uyJwHPJMezh0SzGmVCImLU 6qDxsxjHqtZ76/Sf

 ;
-aws.fedoraproject.org. IN DS 48328 14 1 A2357AD34EFCB66A2D290AAA777D9FF73E518E30
 aws.fedoraproject.org. IN DS 48328 14 2 276EEC07199E01A1ED067FCB06ABA52B57220BC7CBF50BAECA3FA7F5 F62C81D9
 ;
-ci.fedoraproject.org.  IN DS 60772 14 1 005EEDAA115412455E04A44E9B3F304150075D1C
 ci.fedoraproject.org.  IN DS 60772 14 2 7ED8653653BBF3A3ACCEE6FB8ADD1C583CDDE1459F8D019F0208823D 904F1E55
 ;
-vpn.fedoraproject.org. IN DS 3343 5 1 4AA9CC367FE2029FAFF776CDF86CC0E61C73A354
 vpn.fedoraproject.org. IN DS 3343 5 2 5A8620CBF4D179145512C6D6F8C9BE73A9A40F470A66BEF726157129B78B4BBC
-vpn.fedoraproject.org. IN DS 47809 14 1 B78A3B2F78C5611520CBF2D4A89C0DF61CAC1109
 vpn.fedoraproject.org. IN DS 47809 14 2 3626B2FB76BCDD253BD0C88054E214FAE04633CB16C618AE125AB0E4132A8CE5
 ;
-rdu-cc.fedoraproject.org. IN DS 32250 14 1 18D9AA0288A5F93027A75E9297FA7F38E03A1D7C
 rdu-cc.fedoraproject.org. IN DS 32250 14 2 8B5E9A92737827E319D57F20FED255A7880CDCE6625DD798CA2F8241A4BEACBC
 ;
-cloud.fedoraproject.org. IN DS 52156 5 1 9008354552A02AAAF8CEF3D748B6CD57E56A4D0F
 cloud.fedoraproject.org. IN DS 52156 5 2 2369C5F6F3C770DB8B6BA28A155198D8880864E0BAE18BDDFE688CD738361771
-cloud.fedoraproject.org. IN DS 17553 14 1 BB8BB85DE991E80596352DF73ACB8302D0D450F0
 cloud.fedoraproject.org. IN DS 17553 14 2 A10F8A3B254EC88B66843BE8B19F1AC0DE8AAEA3DDCCB1123A6634E2668F1E28


 {% if region == "IAD2" %}
-iad2.fedoraproject.org. IN DS 45812 14 1 12A608927DE1D2E04757F8A9B5E06E0DF2FBDB00
 iad2.fedoraproject.org. IN DS 45812 14 2 7E295F8CCB93B79BFD0B23C208ACEAD46D5EDA4BF43400ED9C627FD1 955735C6
-phx2.fedoraproject.org. IN DS 57969 10 1 31CA499A521B0FD47BCC8B0EC56B1FD71CA264A2
 phx2.fedoraproject.org. IN DS 57969 10 2 8DD0B1998DCF36F905B7AA70FA4117C73D30A774D8B9CC72BA067F027B72D047
-phx2.fedoraproject.org. IN DS 39764 14 1 B16E0599B890320A8BE1F7694337C3131DC68FBC
 phx2.fedoraproject.org. IN DS 39764 14 2 607E065EE144408A02BB2448B1925342A4074516E88C49FAB2C0354832619B4B
 {% endif %}

@@ -1012,7 +1002,6 @@ _openpgpkey.fedoraproject.org. IN NS ns02.fedoraproject.org.
 _openpgpkey.fedoraproject.org. IN NS ns05.fedoraproject.org.
 _openpgpkey.fedoraproject.org. IN NS ns-iad01.fedoraproject.org.
 _openpgpkey.fedoraproject.org. IN NS ns-iad02.fedoraproject.org.
-_openpgpkey.fedoraproject.org. IN DS 60652 8 1 2E120433F0231E2B016AE1BD30E64B3DD655E2EF
 _openpgpkey.fedoraproject.org. IN DS 60652 8 2 FF52866653B2553A6BCE45AC8058E33DBE4589DEF3892FB81622F070976F76E2

 ; CAA records
Edited 5 months ago by leo

So, yeah, this is part of it... but I actually tried this a while back. The problem is that dnssec-signzone still wants to sign things ith the old sha1 key. Just removing it from zone files doesn't remove the key from the ones it thinks it needs to use. Some other tool in bind-dnssec-utils must drop the sha1 key from being considered, but I have have 0 cycles to look into it. ;)

So, if you want to dig around in there and find out how to retire an old key, that + the patch above I think will do it.

Also, @nb said he was going to work on this, so he might know more?

If a dnssec-policy statement is modified and the server restarted or reconfigured, named attempts to change the policy smoothly from the old one to the new. For example, if the key algorithm is changed, then a new key is generated with the new algorithm, and the old algorithm is retired when the existing key’s lifetime ends.

Looks like this is coming from a dnssec-policy in BIND, and if we changed it and restarted named it would be fixed?
Maybe adding dnssec-policy default to named.conf would fix this issue.
We can also use dnssec-policy custom and set our own options.
Source: https://bind9.readthedocs.io/en/v9.18.14/chapter5.html
Edited 5 months ago by leo

ok. I have done fedoraproject.org, getfedora.org and fedorainfracloud.org. There's a gigantic pile of them in other domains. :(

Patch to remove DNSSEC records without DS records:

diff --git a/do-domains b/do-domains
index 42186585..bde58a1a 100755
--- a/do-domains
+++ b/do-domains
@@ -5,7 +5,7 @@ region_zones="fedoraproject.org cloud.fedoraproject.org getfedora.org pagure.io"
 # templated zones are jst templated zones
 template_zones=""
 # signed zones are the zones we sign for dnssec
-signed_zones="168.192.in-addr.arpa phx2.fedoraproject.org 389tcp.org fedoracommunity.org fedoralinux.com fedoralinux.net fedoralinux.org fedorapeople.org fedoraproject.com fedoraproject.net fedoraproject.org.uk fedora.us k12linux.org nspluginwrapper.org port389.org projectofedora.org smolts.org vpn.fedoraproject.org fedora.com.my fedora.my fedoraproject.com.my fedoraproject.su fedoraproject.co.uk fedoramagazine.org _openpgpkey.fedoraproject.org fedorainfracloud.org aws.fedoraproject.org ci.fedoraproject.org fedorahosted.org iad2.fedoraproject.org rdu-cc.fedoraproject.org"
+signed_zones="fedorapeople.org vpn.fedoraproject.org fedoraproject.co.uk fedoramagazine.org _openpgpkey.fedoraproject.org fedorainfracloud.org aws.fedoraproject.org ci.fedoraproject.org iad2.fedoraproject.org rdu-cc.fedoraproject.org"
 AREA="IAD2 NA EU APAC AFR SA DEFAULT"


diff --git a/master/389tcp.org b/master/389tcp.org
index 9f376407..d6b51edc 100644
--- a/master/389tcp.org
+++ b/master/389tcp.org
@@ -3,7 +3,7 @@ $TTL 86400
 @      IN      SOA     ns-iad01.fedoraproject.org. hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                       2020110400 ; Serial
+                       2024020500 ; Serial
                        3600      ; Refresh
                        600      ; Retry
                        1000000    ; Expire
@@ -25,16 +25,4 @@ $TTL 86400

 *      IN      CNAME   wildcard.fedoraproject.org.

-389tcp.org. IN DNSKEY 257 3 5 AwEAAdI16nEXem85nnHvfY98/y7WsuFAAKe+sn5QjsF10Norys4u/HNa /96it0Rfcva3lPwD6H4IP7PdfFgGj9osShor8gDsW9IoJ+IXVPFlNh/h 4ykAs481GnO3fmdvmaOVUL8DSX1q5D3hwY3roI9DK56OWDsjhlyfEaUu VWVfAW0k7oyRlDJnWu2rXVcUm/d/cdFzHkXhVHHUCtW2p95cjDdgaReP Xk6nnajRWkLH2C84lfjKvC47fpEzHNOrobRfhyyCPUly5/GjIF8+NWWM 3xxxB3jdjwBQ6l+mgGp7kQMbQGv+83vNJTXFaPzIZbI8qolECKQJhHxn kvMaSMeMLwM=
-389tcp.org. IN DNSKEY 256 3 5 AwEAAZ7EGu5xtpUgNEyFckNSItz/809y/2wmYCTPA4t320OItkb65jqG IsUruJWUA3D3JJzMEDFyO5e9O13caTc3B0OzPqvKASayWhhNhBGtkJnf tEr9sOwlAMJ4foUXW1oBhF6t/Ou6Da79bil8VhDRuW3XLdX9C6VWvRoW 5giaCbVh

-; This is a zone-signing key, keyid 26175, for 389tcp.org.
-; Created: 20201104201041 (Wed Nov  4 20:10:41 2020)
-; Publish: 20201104201041 (Wed Nov  4 20:10:41 2020)
-; Activate: 20201104201041 (Wed Nov  4 20:10:41 2020)
-389tcp.org. IN DNSKEY 256 3 14 UUkd8r2w/5Kl8fTAJUzhn1NiUE24aGidSLDbR6+pb4m+rr/zGwvvZd+4 tIwGHI5H935JtI0VWDtwfEe882c/cST8peQPKbs4nLLq4y59UXfe7O8v VPZJ8EvkY2lzOZyH
-; This is a key-signing key, keyid 64266, for 389tcp.org.
-; Created: 20201104201041 (Wed Nov  4 20:10:41 2020)
-; Publish: 20201104201041 (Wed Nov  4 20:10:41 2020)
-; Activate: 20201104201041 (Wed Nov  4 20:10:41 2020)
-389tcp.org. IN DNSKEY 257 3 14 uWeAAFkGkSH88YUIhC1VXILYACC5XQtmFCvSJ01r3DJJCF+w9JOTLfDY 7NVcEx+zU8Sk+4NpQIof89AilSxW+C16gS2QLMrRJ0Wk29zS9FBSVWjb b7if37ZpVVzz1YwM
diff --git a/master/fedora.com.my b/master/fedora.com.my
index d4e958fe..d09d1123 100644
--- a/master/fedora.com.my
+++ b/master/fedora.com.my
@@ -3,7 +3,7 @@ $TTL 86400
 @      IN      SOA     ns-iad01.fedoraproject.org. hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2023062701 ; Serial
+                               2024020500 ; Serial
                                3600      ; Refresh
                                600      ; Retry
                                1000000    ; Expire
@@ -13,16 +13,4 @@ $TTL 86400
         IN      NS      ns-iad01.fedoraproject.org.
         IN      NS      ns-iad02.fedoraproject.org.

-fedora.com.my. IN DNSKEY 257 3 5 AwEAAdPO6qr19oPED4zzTeX9VoyU9uY4V6b0pFf6Hn8eZFTTjigfM37/ ZkhU7OLhVHv9je8eNbgB1EnlP+w2nfjjY+BFJMBGIDwp7XmxILPrjXxh 91Hd6jZgaIL1v5E4ZvpTcdlke2Me9RJbfEO274ohfVXYWU/+/S1xiRbn aov7KB0cLa0AVEeH9FP98CA6IJonKn6fURmwBv2KjsGm2g9VB+8H5KWJ izgWFCY8qZULaV3wkIkeca8lKbNKxioDeOqtPm5Ygicp6HTM3yhoB1vL R2JSE701NF3q3tQujZ6zzWZpzM7cNJcXfpYgV+Jl8fOIuOKIAU7eMn2u 0mQUlqIilXs=
-fedora.com.my. IN DNSKEY 256 3 5 AwEAAciZoT3/dKGT+0GXWVZkJRtiaKohnC3jjdXXUhm+EZJ0o2UbMM+O gPJs0Y9RItp/2etjzUB6fUorr4cGekb7OhEoOqq38KE+2I576+E4d0Gi fkkSUIiqS43FRaJKMi8Gno8+Gy4z7WiixLTAKsHnJQC+KEYOTVec4fNe yz6n4GjZ

-; This is a zone-signing key, keyid 7148, for fedora.com.my.
-; Created: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Publish: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Activate: 20201104203017 (Wed Nov  4 20:30:17 2020)
-fedora.com.my. IN DNSKEY 256 3 14 AuxNNR/RGdAMrJR8gXP9lzs2LfGC0ap+yE8LS1pF5eKCIv7NwLKOHwoi Yg5TlH+0Ph+zKvZcDz6RlGbv+SFMUcUrvEox4YlecYFn+DskGU2wll0E gCcg1dACAbxT10DF
-; This is a key-signing key, keyid 15976, for fedora.com.my.
-; Created: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Publish: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Activate: 20201104203017 (Wed Nov  4 20:30:17 2020)
-fedora.com.my. IN DNSKEY 257 3 14 /OwYMM0uqBtykMWWi4Q/E3qMh8Rai2yfP78l+vMaSzHKjLWq4EoOVGXb ANVYzhHPFOwvKmXlqOncdiyHpXi6GxK/IRJOnc0b68uo76fTXoYc5sa3 sTpRQSM3sDDFA9rv
diff --git a/master/fedora.my b/master/fedora.my
index 150b990e..f491a462 100644
--- a/master/fedora.my
+++ b/master/fedora.my
@@ -3,7 +3,7 @@ $TTL 86400
 @      IN      SOA     ns-iad01.fedoraproject.org. hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2023062700 ; Serial
+                               2024020500 ; Serial
                                3600      ; Refresh
                                600      ; Retry
                                1000000    ; Expire
@@ -13,16 +13,4 @@ $TTL 86400
         IN      NS      ns-iad01.fedoraproject.org.
         IN      NS      ns-iad02.fedoraproject.org.

-fedora.my. IN DNSKEY 256 3 5 AwEAAdo1QQllkhyCvbhCIxsZ7BcRTlg5cZo1hjWfMS1rCtaR2YXzrhie 3jPdFimCYVx/x8SErc/x274vCwvycLG7uz5WFpSGkJoJGFNdPt91vLTy fU3jSEK65xQESYHVk8wZaG/M98THfufq9VaEGEQzNEiKLe6iTTB7Psvo KrSL8uwZ
-fedora.my. IN DNSKEY 257 3 5 AwEAAbOJiGh/qnCvY+BB5g/4aD10gRbP4nkpuIcVR90pS6yqZipQlqht J5tAQTLwxVfM6Kt6+x7ak1h1sYDFg2irYLrIJT6G0dUdWUNfRNVvsBf5 ApSqfU+48THu76BH2PL6W9vBSscDwZ36G3+9wDYrRGGROoI6lFsrhN/S hxrqBoZDogaz7OOME1I9e0z5W2Z2KqvuNfQC3ysKVvopF+tLcpPq4O0L PPDf3pQ9jSxD7kakJfU8h5WH9F2u0xEF1r18270bZbXZ2RRmd1aouND6 yrMahF/ZEF4XrScv+hO6B5l3KNA9izptCzMXgsAZ5RpNmraE1eo2tklW Pcq8C7xAsQs=

-; This is a key-signing key, keyid 12131, for fedora.my.
-; Created: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Publish: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Activate: 20201104203017 (Wed Nov  4 20:30:17 2020)
-fedora.my. IN DNSKEY 257 3 14 6+3hXdMj1BjiAwDIUMLnRl2UqXzEtGuUuStaPl0CsQW/tht0TKTCzkul VNVP7SkQQBtDBmUiAKkmsSM8bp3Sv5V7rAg9VugisIqm92/tfR48fsSI LG9VYLf8HX87KIvW
-; This is a zone-signing key, keyid 58028, for fedora.my.
-; Created: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Publish: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Activate: 20201104203017 (Wed Nov  4 20:30:17 2020)
-fedora.my. IN DNSKEY 256 3 14 AngR4k94yeZ7+u6GahYPC7KRDhAW8xGa0/uxCAXGp/mMkF6Lhfv634wn oVR4wGU7l5dMKCERvpcG10cS6BwpU2NnRPkPrFYedtqjbXctJHlDpLm6 JcAHjypOX4kXvYbB
diff --git a/master/fedora.us b/master/fedora.us
index cc0f6e2f..2839f366 100644
--- a/master/fedora.us
+++ b/master/fedora.us
@@ -3,7 +3,7 @@ $TTL 86400
 @      IN      SOA     ns-iad01.fedoraproject.org. hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2023062700 ; Serial
+                               2024020500 ; Serial
                                3600      ; Refresh
                                600      ; Retry
                                1000000    ; Expire
@@ -13,15 +13,3 @@ $TTL 86400
         IN      NS      ns-iad01.fedoraproject.org.
         IN      NS      ns-iad02.fedoraproject.org.

-fedora.us. IN DNSKEY 256 3 5 AwEAAemN1a31saE2KOPp3IGyVpKdq8aoKecplJuan17ESZ+vdz8d5Lrm RW/xCUKsLVUvViSkCBzmI+gTcFzw/UJCmv/JLa9fJiLiRg89exAroGmP +6aLNssv6czDC3xsymWl0u0ZLIXiWZOqTcK8lZWI2sgy2OkMEpo9JQoo Qs89wDoH
-fedora.us. IN DNSKEY 257 3 5 AwEAAeeEtZveQ+2Azwhm1diAKCGnm8BH1Ahdwgi5rPn9ApwgLYQbh4aB 1S8MuH559IG0NMiayGGRfPHNa//Fa95L5UD37OISk/ZLq4jDAWHRnHH3 13oqRgNIAmswGidatLHuMhlokkyU/R/T3KngzOv4rCbBk6XBQawbPtPL 9w83f7A+B+vw2AMpYzP1jcrH34Pa6WMhAqtzxeHuTj0q51tRLcros8jd V1GyNraVX7FA+zj2SVQ+mPgPslDDFFnA2/nicOMBmYp400r0O7/ZMsv4 91Xgu/ZeIuWiOcSWfxfNngcyPXzz61il+wQ2NSOhvSScJQFfphr3HkE7 mzMtYneXlrs=
-; This is a key-signing key, keyid 9821, for fedora.us.
-; Created: 20201104192726 (Wed Nov  4 19:27:26 2020)
-; Publish: 20201104192726 (Wed Nov  4 19:27:26 2020)
-; Activate: 20201104192726 (Wed Nov  4 19:27:26 2020)
-fedora.us. IN DNSKEY 257 3 14 nGXPiPk/4LHb2W8sICDMMX9VXo9cphZMEOzMC6hTrnHmkokqFNM6ZD8X EzbqhIV54D8BCxwL4WpxDiDu4HAZ3bsQ4ETvqyH2Ai2LjU5B5/0QjpUs TCL8C4EzO+CxS2b7
-; This is a zone-signing key, keyid 61040, for fedora.us.
-; Created: 20201104192726 (Wed Nov  4 19:27:26 2020)
-; Publish: 20201104192726 (Wed Nov  4 19:27:26 2020)
-; Activate: 20201104192726 (Wed Nov  4 19:27:26 2020)
-fedora.us. IN DNSKEY 256 3 14 iPEuySWIrWgf9vL9zLIJw2ksc9l7CoVJK0L4911r7S91W3AwhktC1cOo q3Q+FkdvS0fey6C3g9RcfN+jJY2WeeYDV41ZH1AkWgqdefTE4SXGdpju vWzplCqoqMWHySom
diff --git a/master/fedoracommunity.org b/master/fedoracommunity.org
index b80f2d86..e7120cb8 100644
--- a/master/fedoracommunity.org
+++ b/master/fedoracommunity.org
@@ -3,7 +3,7 @@ $TTL 86400
 @    IN    SOA    ns-iad01.fedoraproject.org. hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                2022051900 ; Serial
+                2024020500 ; Serial
                 3600       ; Refresh
                 600        ; Retry
                 1000000    ; Expire
@@ -54,16 +54,4 @@ vn      IN      A       45.122.221.196
 www.uk IN      CNAME   wildcard.fedoraproject.org.
 zh      IN      CNAME   fzug.github.io.

-fedoracommunity.org. IN DNSKEY 256 3 5 AwEAAdZnonaxQb0YLvd7aZbPFb7J2aP0gzW0uiaCJPDS4K8uUYpSG5O9 BxzNgX1SlWeWjH+glrO0rYxn9EFhU2yXWMzqIXNp04xtE6lOlnQ1Kqtj LYqhVpyYozch96DryxfCyebJu71AxlVAhViEP2ZGeiPpC5u5iJJTa30D 1VBPqaOX
-fedoracommunity.org. IN DNSKEY 257 3 5 AwEAAcfpt/HpANhs6WAeUasEV6Fv4UQm4jyVknBpoaZA9zPc3re+jdW9 mY0wcG7x6cbUaA6gb5pLXfyeXJSnn0b+I31siztirFlpcTKn9QEf+TaT EPmtxtRFUBT5N+zxRGJAPHcpnb4N5fkBxknThw8KuQZQoe0y2qR0ztaG pS4yTnQZsX7GhMqcONIJOEBa3BZNXdGSE0NoQ4TEk/DQcbdYValYZJz2 hDADuLxDmO+CRqAGjju4oFv32295E5DsAaVAS963sF8V5yK1Py7Ahl5x jR2T9ZWdZFGNq9sUK8vZlJDF6Dgb0+A4mnDEdWUx0nOKsEkN4gsJhn0M nNOUGMuFn6s=

-; This is a zone-signing key, keyid 18495, for fedoracommunity.org.
-; Created: 20201104201246 (Wed Nov  4 20:12:46 2020)
-; Publish: 20201104201246 (Wed Nov  4 20:12:46 2020)
-; Activate: 20201104201246 (Wed Nov  4 20:12:46 2020)
-fedoracommunity.org. IN DNSKEY 256 3 14 JeAszkgDd3xSbDTH78VJ5UFBhTRP7aYYha6wW3Qq7/bSvPQJkQyR8Hg8 P/IQHHe3O+OKciV7bOQwEC1rLi/i8HNlHHQNPyLyXN4OMH2rCyhdoVUo Nt7rmt4NDtWKbijl
-; This is a key-signing key, keyid 44424, for fedoracommunity.org.
-; Created: 20201104201246 (Wed Nov  4 20:12:46 2020)
-; Publish: 20201104201246 (Wed Nov  4 20:12:46 2020)
-; Activate: 20201104201246 (Wed Nov  4 20:12:46 2020)
-fedoracommunity.org. IN DNSKEY 257 3 14 y8+qJzBCPIHoACdq4dljwYLhcflv/eL1z0hICmUEhhC7WEvS1ctAFFci UUFT9JI1aEc3/zRFFVqr7nkhIuBRHIUy/moY3yGvPLOZaudZrouYQyPY 7xee72nYsslqDf30
diff --git a/master/fedoralinux.com b/master/fedoralinux.com
index 183647af..b1d2702b 100644
--- a/master/fedoralinux.com
+++ b/master/fedoralinux.com
@@ -3,7 +3,7 @@ $TTL 86400
 @      IN      SOA     ns-iad01.fedoraproject.org. hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2023062700 ; Serial
+                               2024020500 ; Serial
                                3600      ; Refresh
                                600      ; Retry
                                1000000    ; Expire
@@ -13,16 +13,4 @@ $TTL 86400
         IN      NS      ns-iad01.fedoraproject.org.
         IN      NS      ns-iad02.fedoraproject.org.

-fedoralinux.com. IN DNSKEY 256 3 5 AwEAAeIpNN7qNiNpuMy9w/YIvAOM1A7kRlawPT+XVfKagcA4Utv3Au3P 5onhBeOhC8ZBqCc46NYmWnFh8obNKCI3uKdMVj9vj98A8R5qf4GUXYrW GG8NcOddL6UTT84I9jQyzMbJnEVhaI7MFTwgS0H0JQL6m0mBiL+BX2+y m3oHP2m/
-fedoralinux.com. IN DNSKEY 257 3 5 AwEAAbiqrzNH9LS+xPxBud+2mp7vyGrnwax+Ol4GGWfSlhAsD4Rx+NF8 vWgEeByI70/itZchAVcZygUe7mSSDN0dfaC97PWQGxZSd+VBrMFKplAc 5yohuCzdQdFXQEAcekKs8nfM6LlkyLaThjvV3pwkGBEOG1Dgl7UucW/w 2Rnd6Avm9MRKc+69oviLCYnMMCGaGVPCG8U9JDCChvHgO3ZZatYzUCun U+QzCtjOX4tQC88g700qs4ov1HXmBt/PmJ7GyyFUKZvO+f6xswUgQ2Nt FHCcKI812hMCmbly4V1ow+gRFgdTCoJqCIOJBVbR8RHtrC4T3UDsl1Tt 53FBP0liZqc=

-; This is a zone-signing key, keyid 21072, for fedoralinux.com.
-; Created: 20201104201437 (Wed Nov  4 20:14:37 2020)
-; Publish: 20201104201437 (Wed Nov  4 20:14:37 2020)
-; Activate: 20201104201437 (Wed Nov  4 20:14:37 2020)
-fedoralinux.com. IN DNSKEY 256 3 14 Bc5EiuSDr50Ns7Ris3pxRPfjpHwNZs5osTTpr7cvFallnp3hkuuOGbOb 38DKR2A6NiG+lAPBUGDuv/iE7UBUiQRcs5YhVchmjk804KdtyxczAHGg qz/t4S5TXjvWCNz+
-; This is a key-signing key, keyid 54770, for fedoralinux.com.
-; Created: 20201104201437 (Wed Nov  4 20:14:37 2020)
-; Publish: 20201104201437 (Wed Nov  4 20:14:37 2020)
-; Activate: 20201104201437 (Wed Nov  4 20:14:37 2020)
-fedoralinux.com. IN DNSKEY 257 3 14 3SfE4yyX2v9ZEDPa5zRvWXoJQXr0vsnaKOw7k6r0GVkcstLkzB9HZ6P8 50MrKFg5n8IMPptkOtW2rDI3pJ0Z0gKFxxj9f40hUZGWeObbmeR/y0FS um32bd70PDcC8xlt
diff --git a/master/fedoralinux.net b/master/fedoralinux.net
index 3fff56a7..b1d2702b 100644
--- a/master/fedoralinux.net
+++ b/master/fedoralinux.net
@@ -3,7 +3,7 @@ $TTL 86400
 @      IN      SOA     ns-iad01.fedoraproject.org. hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2023062700 ; Serial
+                               2024020500 ; Serial
                                3600      ; Refresh
                                600      ; Retry
                                1000000    ; Expire
@@ -13,16 +13,4 @@ $TTL 86400
         IN      NS      ns-iad01.fedoraproject.org.
         IN      NS      ns-iad02.fedoraproject.org.

-fedoralinux.net. IN DNSKEY 256 3 5 AwEAAcd/zct8CJdrfJKLBV8g/HH2e1jILj06Pu8Sj4t8t41yn1DOJqoZ 8kwHxk1RuIgzEhezJ8ZrRIdE1RnLTHZaFkM63Xe/Rga3iIdUy5vllQlh MhVJVqYLvSZsM0phLYUmr+9/ENlQGPU2A5dqhKuQAH7wtUDTqH7cAZ4E w3IxuxnD
-fedoralinux.net. IN DNSKEY 257 3 5 AwEAAcCeoRPTvghjrEH7jBQXqKt3SKMKJFG5uCOOUgMmOO3yNQpyM7x+ xRQf0u3DC3bo8+K/bXQqqu9seHe6OVAdyVPgdiSQ26tdKJAMppXa8B5D /qdEMA3AQF+SjUAvr4Shey7KPF8Frm+ieNKh5JY1rgr4p5kEDHguoCvF mh18Mq8eLr7saVmGgHJI5qBWpptkyWbH3rgzKJzs4NehevtyGr5eMRt+ 2Fkp5T4GAagf3i6t5zuwSrSnUgms8BDoKuhuOMPpoz0VInbFAPqdkGuC En3kdWztP0VmVdcrJwVHMkx8jSAF5JGYgWp60DRVGZDyL2Fe25eYT9Nc 6Jw+CD8U/ws=

-; This is a key-signing key, keyid 16728, for fedoralinux.net.
-; Created: 20201104201722 (Wed Nov  4 20:17:22 2020)
-; Publish: 20201104201722 (Wed Nov  4 20:17:22 2020)
-; Activate: 20201104201722 (Wed Nov  4 20:17:22 2020)
-fedoralinux.net. IN DNSKEY 257 3 14 m1Ob+taxz9DFIIFDOriYWxzJun/2ip1n3D/uQKiCjtBqlww3RlUegeGj DbZXvcaXMrUB5/Q3i6xtohot698FQJmDoOH9zIK9uwrYjSCeQglXjCFR Okt/FCGkq1dO+sLJ
-; This is a zone-signing key, keyid 43148, for fedoralinux.net.
-; Created: 20201104201722 (Wed Nov  4 20:17:22 2020)
-; Publish: 20201104201722 (Wed Nov  4 20:17:22 2020)
-; Activate: 20201104201722 (Wed Nov  4 20:17:22 2020)
-fedoralinux.net. IN DNSKEY 256 3 14 jEUnGMPVI7e/QIe9I1H5zB/WcOgQQYDocl9o1zmLMRJc0cRv1VPaIem5 21xLOQDQ0F8Mm7iihsmWD1z221ESt7NTZEvcLdZhktggLl3FplPyR3Kz jjGQo+Gzj9LLyRv/
diff --git a/master/fedoraproject.com b/master/fedoraproject.com
index 0b0a91f3..2839f366 100644
--- a/master/fedoraproject.com
+++ b/master/fedoraproject.com
@@ -3,7 +3,7 @@ $TTL 86400
 @      IN      SOA     ns-iad01.fedoraproject.org. hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2023062700 ; Serial
+                               2024020500 ; Serial
                                3600      ; Refresh
                                600      ; Retry
                                1000000    ; Expire
@@ -13,16 +13,3 @@ $TTL 86400
         IN      NS      ns-iad01.fedoraproject.org.
         IN      NS      ns-iad02.fedoraproject.org.

-fedoraproject.com. IN DNSKEY 257 3 5 AwEAAbnyrRHT0PgLepNwjQXk8kMxjuQMUsqHW0pkl2+ryj9MGhUftluJ kAO/aJebTCkZXO7Uc8ZHU02QiccRaAuykb+4ZxrKPgHiN72QzUzormWP /MEC7YcUfdbaDrQjgxJMgZjmRW6ykscuvKQWNkAJeU6mH/o1s1asVCbQ d3vil8cMuXq0D+1X0SY1uE9A2QEXBPTVTzJps9gfxYEjhWAVPLkDBGLc niijBJoFcZJ5MAqyY+eMDkoDBWiNtIYZ+XG7nx/XrnzebH84xdEXzIqx WtMT+wV1N4gLHOBmiA2FZT+OOpvFXNmiVJspVkL7uqzIvR4c40s3fbOM kQx1ikMwNBE=
-fedoraproject.com. IN DNSKEY 256 3 5 AwEAAb2A8G5Xgjhu42CwrSyO3pn3e2vg0PAw9PGzH+u1q0ECckUErB4b tgFyyEP5UylfXWgkr7NDUkMyCWlIXOkHe6Sq/vq5PLoWpoemygKmUfko dRagTFfFIDOUCfIzP4mnTtD+x9Uds34PYfrfWcwwLBwSZnAzulj1AaPY HrD+wRjd
-
-; This is a zone-signing key, keyid 9360, for fedoraproject.com.
-; Created: 20201104202246 (Wed Nov  4 20:22:46 2020)
-; Publish: 20201104202246 (Wed Nov  4 20:22:46 2020)
-; Activate: 20201104202246 (Wed Nov  4 20:22:46 2020)
-fedoraproject.com. IN DNSKEY 256 3 14 WIdKufMug1bqqg4MBP+Vj1My0T4s/kXRS8GbBcK6yTjwKByUWpzuEQfK Lz7JbX4daVv+aJ7kzIEI//0od9IAmRSfs3NQkAsWI1zx92vIBsfclqB/ uN3yTPg3pg8zFZ6D
-; This is a key-signing key, keyid 44591, for fedoraproject.com.
-; Created: 20201104202246 (Wed Nov  4 20:22:46 2020)
-; Publish: 20201104202246 (Wed Nov  4 20:22:46 2020)
-; Activate: 20201104202246 (Wed Nov  4 20:22:46 2020)
-fedoraproject.com. IN DNSKEY 257 3 14 NRqYf0VyX6mtNcmsE1FOsB7FkThlc8tN3PGUJMaCxps3xNhkCuR1l60p 4S5bx+tOxm2iJWb2vHxjR66vihwS1H991z9snKxfm2MLf7hY7WLBjETf 24Uhux13bktK/kfM
diff --git a/master/fedoraproject.com.my b/master/fedoraproject.com.my
index 561a5894..819d84cc 100644
--- a/master/fedoraproject.com.my
+++ b/master/fedoraproject.com.my
@@ -3,7 +3,7 @@ $TTL 86400
 @      IN      SOA     ns-iad01.fedoraproject.org. hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                 2023062700 ; Serial
+                               2024020500 ; Serial
                                3600      ; Refresh
                                600      ; Retry
                                1000000    ; Expire
@@ -13,16 +13,4 @@ $TTL 86400
         IN      NS      ns-iad01.fedoraproject.org.
         IN      NS      ns-iad02.fedoraproject.org.

-fedoraproject.com.my. IN DNSKEY 257 3 5 AwEAAegZEXTIpnAa9ffbibspht+GjnaE0pP5QQC9eEGJVKiTd/2423J/ qbGDPS6i7KXA+2MXkDBjiP/HM2hBADPB65sjiGRvAPIQoGTIu0RD4Pm4 isjmdHQDQt8QRGTxCR0HXTGmDAQAsWLfSz1ImnxkHgDLV0JYH2Ixmo2f DcbqmGIK5nSVO+EFeOuJvu/FCv9/Qk930ghWLUQhUkMM19nQcYtttaQY 5naSKcmO0fqlF9JoaalQJ2O7tQBekCfhwOp9Y71I+D45p+GySb56wJdg 5Rw5fPmE5lzMy/+riFHWwagTekpF8Dbk2gmy6FsnNDAx6og/EHtgaBOV HWXz+owunyU=
-fedoraproject.com.my. IN DNSKEY 256 3 5 AwEAActtzv4RVIJEym1a5HRewnZsVPbeauwK42WL0eeCeklcuZ4/RiDs vT7zd1VwbzWZv72xrmaAMxkpdXhWi0R1gOf/eJ97L2W/P5nDyAu3rC3+ b9AjVy4GYLpwkTjk0rkRLXGO6ReW/pvSwSdBQnpMiqf3xDi1cnPACcxy 8pteCWH/

-; This is a key-signing key, keyid 48663, for fedoraproject.com.my.
-; Created: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Publish: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Activate: 20201104203017 (Wed Nov  4 20:30:17 2020)
-fedoraproject.com.my. IN DNSKEY 257 3 14 +o+3T2bsqxjZgmpzw3BgVgvGJ78m/asP3XE9jWkuZZ1DFsdIWB00D3Tj ytRqTWpy9e+4VxJWS+GtbNqd4shJxKnLWpe74k1DKtZ9ZnXEe2Fl4tRa SRIsILdqjl3dlrk0
-; This is a zone-signing key, keyid 54063, for fedoraproject.com.my.
-; Created: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Publish: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Activate: 20201104203017 (Wed Nov  4 20:30:17 2020)
-fedoraproject.com.my. IN DNSKEY 256 3 14 cv/bVttjSpp3ROBHAxpkO2KX4b39++YABPdMmpKzs6T8lAjuHVN3ZlpT T0WXlw5N794DmEX7iLtI/dNOsCrWdtsJgDeqA6kXzoOSd+Lm7qulBOEA v8Y97Q1pcURAB2mB
diff --git a/master/fedoraproject.net b/master/fedoraproject.net
index bd266e11..2839f366 100644
--- a/master/fedoraproject.net
+++ b/master/fedoraproject.net
@@ -3,7 +3,7 @@ $TTL 86400
 @      IN      SOA     ns-iad01.fedoraproject.org. hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2023062700 ; Serial
+                               2024020500 ; Serial
                                3600      ; Refresh
                                600      ; Retry
                                1000000    ; Expire
@@ -13,16 +13,3 @@ $TTL 86400
         IN      NS      ns-iad01.fedoraproject.org.
         IN      NS      ns-iad02.fedoraproject.org.

-fedoraproject.net. IN DNSKEY 256 3 5 AwEAAbrEqeMr3c5+8frWa//Orw+5Z+KNmdC45CSlfzhb4QpXwJ4gHru+ t1fQFug73dlmJ+Jy1Jcc9udyMGoK3jnpdpgLZXFAMNJo7Fxk92ZDs78u IIRMyUPv6v1jlHMeOP4dR8pJ5iUMrpBGlCrKoOBUIeaBD/dJVPHO1ZhR LTwTthNZ
-fedoraproject.net. IN DNSKEY 257 3 5 AwEAAa+yLpBvKBZtGC+FHsyXd8PKpLfZVQ3zNTUMpB4sCVJXPVhpC2wM bLEu1uJY3aHgNW8WQyfX6XtaD7HP0YAWR8E5HafiUmr7HFZKKzAZkQQu w6mzKxTWRUJyXncwClRcFuqbdD+5NYFrnZ9H7jQt88URiTrD9xXv4cBV dnoJ/d1EbnIJSwvwR2aiirxvvbitRmbVclMLcmbsqjU/AhR2HLadYhak QgRTgtFxXjEhOSkfkVNJIzSoPdVEnTJqNY8UwcxKKDbLYzhMyYD/2AI6 QyyJGnnaziu5ZOnEr/DeTF9e8XgoszQklT9VtADQowqmyIjt/fjppX99 PhsD+Ll0+QM=
-
-; This is a key-signing key, keyid 21889, for fedoraproject.net.
-; Created: 20201104202149 (Wed Nov  4 20:21:49 2020)
-; Publish: 20201104202149 (Wed Nov  4 20:21:49 2020)
-; Activate: 20201104202149 (Wed Nov  4 20:21:49 2020)
-fedoraproject.net. IN DNSKEY 257 3 14 sP0ysYR6ZNERVLbwE7gjj/pseAFrif7Ksn367PD5L9XJwJ6R3W5uWFCf 7OV07FzPpkEDnmZTZUcZxLjlTC2LhR+zqyKk9R8gfVscTaHiKkmxUR6U JJ3YzDTJoKaCGd0j
-; This is a zone-signing key, keyid 46233, for fedoraproject.net.
-; Created: 20201104202149 (Wed Nov  4 20:21:49 2020)
-; Publish: 20201104202149 (Wed Nov  4 20:21:49 2020)
-; Activate: 20201104202149 (Wed Nov  4 20:21:49 2020)
-fedoraproject.net. IN DNSKEY 256 3 14 AF+eyDHGrdy4v5G56S+rI3YoRppux0sTWb7nJsebmzP03lD2/Z76WJBN XbNJV7zu9bHtD6ckvdTailhFF895Kg3RXcEE+yON8JdGkkK15dZp0uwZ hDCi6lzvb2xHqnYq
diff --git a/master/fedoraproject.org.uk b/master/fedoraproject.org.uk
index 19cf0e50..b1d2702b 100644
--- a/master/fedoraproject.org.uk
+++ b/master/fedoraproject.org.uk
@@ -3,7 +3,7 @@ $TTL 86400
 @      IN      SOA     ns-iad01.fedoraproject.org. hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2023062700 ; Serial
+                               2024020500 ; Serial
                                3600      ; Refresh
                                600      ; Retry
                                1000000    ; Expire
@@ -13,16 +13,4 @@ $TTL 86400
         IN      NS      ns-iad01.fedoraproject.org.
         IN      NS      ns-iad02.fedoraproject.org.

-fedoraproject.org.uk. IN DNSKEY 257 3 5 AwEAAZk7m7VHVxypg6mJ7Dib9JYQv4ikaQYBQWJi4pLbPMzjFsShWu7x F8v1Y4WbSUEzI6oeVqpM5VSoSVq9FodXVSjgoQZ4bdJ0/zWK2gqCFf7L 2xyPHIFTCRaNR8/XCL1+DFn0kkn5rj5Tu035Bkc2yj2nDzkRAOP2iL2R gSFyeTeratYjIv33fcEEJgR5J5JKMr3jnCgHdEWsKhrbOjRJ5nTJfuAe ixzMElzAHdoBlQ8aB3vsXLlQ5J3a3kxU4G1D2sVFkS0Wp967X+lsQNVs PS5AoU3FcSPqhuxxEcLL2dHlO3rC0Qa5SAcQSAIm3uT5OqmTqMpHaYAA wW99PPKtadk=
-fedoraproject.org.uk. IN DNSKEY 256 3 5 AwEAAcpBLkw9ifFQnM+cbRYlPKXmRds/kInW6+p/sIVBsQjF2FRxrfbc MnYBBrXnz5ZNaroiVLKIv+YXG0B7igUXiOMEsmkMRX9S98ARTLxi6m4/ Z/6REqjAy30pHpRwATOHeLVadqIYI7WUpRfGVpF9aw5ONyuPyoH0ElG9 UsmNa4Kp

-; This is a zone-signing key, keyid 47123, for fedoraproject.org.uk.
-; Created: 20201104202409 (Wed Nov  4 20:24:09 2020)
-; Publish: 20201104202409 (Wed Nov  4 20:24:09 2020)
-; Activate: 20201104202409 (Wed Nov  4 20:24:09 2020)
-fedoraproject.org.uk. IN DNSKEY 256 3 14 4EayQunfW3Krc0rVn0DXESFhMjzkEQw3bmlSKyeH6U7qPL8ZAlYjcQLL +dZEgQFK1bT5F7JvwuJNyMEZ1P+qCWp1ZDmmMUVn28O2tXiHBB+1uvp3 /f3o4DpE+Phz428N
-; This is a key-signing key, keyid 31914, for fedoraproject.org.uk.
-; Created: 20201104202409 (Wed Nov  4 20:24:09 2020)
-; Publish: 20201104202409 (Wed Nov  4 20:24:09 2020)
-; Activate: 20201104202409 (Wed Nov  4 20:24:09 2020)
-fedoraproject.org.uk. IN DNSKEY 257 3 14 xY8RP0MMU/tbbXZ12YFl/kDTYzXV3G742jz3RA2hftJYkC5Ov2w9WF3R QcvgZnhxCH3754E7I/JhJZX4Tnhcu1Bdwnj/6AwezqBCifJtBI+bIlqE 57LtAxL7xDP5ASj/
diff --git a/master/fedoraproject.su b/master/fedoraproject.su
index 7924605b..cf61cc43 100644
--- a/master/fedoraproject.su
+++ b/master/fedoraproject.su
@@ -3,7 +3,7 @@ $TTL 86400
 @      IN      SOA     ns-iad01.fedoraproject.org. hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                2023062700 ; Serial
+                               2024020500 ; Serial
                                3600    ; Refresh
                                600     ; Retry
                                1000000    ; Expire
@@ -13,16 +13,4 @@ $TTL 86400
         IN      NS      ns-iad01.fedoraproject.org.
         IN      NS      ns-iad02.fedoraproject.org.

-fedoraproject.su. IN DNSKEY 257 3 5 AwEAAdDta2A/jS/8vOn5XUVrike+0Pl9g6Vhv0WaNFWCSP2w3NZw06ky 5U0ZcmHwVwX6a/z7JWtfbHOMkwKM42hwiiMtohtUfp5yKwR6J38i82P0 dRXK0q7HwYo9YUZR9TncWHkoeiP682PMU8SkVIHMA3HAg8TfvnkjEFBD 4r9yt8Sd9aXy9LfyJce7q+YQsIQ0+51U2oNcZVYnFguDDoCYymCAvKDs aGKKk8q3loOzqRWHmtHEsv+OqKPgn/QZb5oDq9a/Eu4Cy2lEnuyGPwWy ep8xiwwRCJo8c54ms8UMAhNa+0JxUpUvUG9+ZLi5e1df8WswRB6w74VG gf0q4J+3naU=
-fedoraproject.su. IN DNSKEY 256 3 5 AwEAAeIZBqc5VUZN6RKzZG/E3vnGvVNf6MYgtErImc2s0Wk8kBvRdayC NMN6UEK7sQuObC7p7S6fvVr0PXhD4gmfP8+ru2rtqVVAMLKVKEKsHVxT CpWRUjbdZ6TZwdkaju1xXsQzZ3NJB08Q9hnnFKd+wF3tl51tgPQLQ85p hbKDYlMp

-; This is a zone-signing key, keyid 4157, for fedoraproject.su.
-; Created: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Publish: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Activate: 20201104203017 (Wed Nov  4 20:30:17 2020)
-fedoraproject.su. IN DNSKEY 256 3 14 EzPS2VspIt6ncFIp7Jm4HWIcNYwbY1lImDPeEhtK5zG3mNn0xPCMz61B qAgaOxgypnYO/zHzFXGZKN4vKmuLMpCGPvVpe0LMPmR8/KV7bDLjLrgg zIAflFsEXux+vub2
-; This is a key-signing key, keyid 64621, for fedoraproject.su.
-; Created: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Publish: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Activate: 20201104203017 (Wed Nov  4 20:30:17 2020)
-fedoraproject.su. IN DNSKEY 257 3 14 ZC2yknkdBbd1R8pCC5xY/68Vg9cQgJp33FNUeou0/EklGGTXzRzv72bh WCgM2t1q1W5b3/d5YGbc91Gt6Hnjs4JP90a1G8AjSx5tZTRRpQpimJDd 039ZJumyL9DkeBTZ
diff --git a/master/k12linux.org b/master/k12linux.org
index 6604e854..96126d70 100644
--- a/master/k12linux.org
+++ b/master/k12linux.org
@@ -3,7 +3,7 @@ $TTL 86400
 @    IN    SOA    ns-iad01.fedoraproject.org. hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                2020110400 ; Serial
+                2024020500 ; Serial
                 3600      ; Refresh
                 600      ; Retry
                 1000000    ; Expire
@@ -17,16 +17,4 @@ $TTL 86400

 www             IN    CNAME k12linux.org.

-k12linux.org. IN DNSKEY 256 3 5 AwEAAdoloJ8DnooJCUJKK57e5Biq79zmPMcdKnGsPUUb5/2W6hoeRa3B TXuTvnKh9lhswGQc9UBqan2f9xGheAQQGxtVsMUcvI8nfmlE9NZGk7VH 9d6SWasvgSfzPjk9+kcROQ60Vr6lU/v6lZonpo7kmV0r40PcGhZ/xr3q vpQKk7T9
-k12linux.org. IN DNSKEY 257 3 5 AwEAAa754g3hJ8ZU2+21T2v9wiPKd3A8G0zu8dbnnk4ERfbh0wcivBfs nuPhhsvIWN+5Q0vcm4a1tkVbaaYJFIRzFbKh8E22reAzL7AmBOb50US9 TZNd/KqlXUHlBmzzPOIMGZ2DNzt+TR3K5DfxkqFWsSb78+Y3sZBCqMHV 8WPkP99AHH/WI9d1hO/Nj72Zj0Dzlkmd6MsoAEB+KlrB5S4pwPN+xZJh SzoFkdVko614l/NvhOj+nM2WSwhNB91nBtmWJxqamr2RFG3EmHdTRwqo ii+8B2EshQleVLfvFo5/DG+rh/rbde04tf5inyanx3j4+/y3Cf4XpBhZ ZxmlfQ7Qzxs=

-; This is a zone-signing key, keyid 24703, for k12linux.org.
-; Created: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Publish: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Activate: 20201104203017 (Wed Nov  4 20:30:17 2020)
-k12linux.org. IN DNSKEY 256 3 14 fmNbR1TuM7EJfulGjNU8pOheMK/2wFqNO/YKEsQGADCn5RPsCKv6sgBh 4WdzjEduHBBad+LGQoIp3ImhBKmI+5oO0baAfPn8jOVQ9QFveyJuJFi5 pzZ97br6jMYGLBXM
-; This is a key-signing key, keyid 54276, for k12linux.org.
-; Created: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Publish: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Activate: 20201104203017 (Wed Nov  4 20:30:17 2020)
-k12linux.org. IN DNSKEY 257 3 14 kIFfjhoIP9cYxNEa3K3x/JBTNrdPMrVIWNHHRyd1MaVaFdY7wa/5MPA8 dBhpbv6JcajZX98nLZPFonGAGekKgFlXGFhqKvS4dzyvsSJel4RRt6Lr +alux6UhUQFygqbW
diff --git a/master/nspluginwrapper.org b/master/nspluginwrapper.org
index e10d072a..20d90a11 100644
--- a/master/nspluginwrapper.org
+++ b/master/nspluginwrapper.org
@@ -3,7 +3,7 @@ $TTL 86400
 @    IN    SOA    ns-iad01.fedoraproject.org. hostmaster.fedoraproject.org. (
 ; Make SURE to update the serial # when changes are made. Format is YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                2020110400 ; Serial
+                2024020500 ; Serial
                 3600      ; Refresh
                 600      ; Retry
                 1000000    ; Expire
@@ -18,16 +18,4 @@ $TTL 86400
 www IN    A    18.181.0.46


-nspluginwrapper.org. IN DNSKEY 256 3 5 AwEAAavBQAdZgIWSkK7kAPmJn2GKSrfUdwDdzLae9E4iqtquYi1IcVht hRJUNcKbUGX1EZNhLv23plbiZgyKW3EGQexwMdL7DnIVw+TzNbdfnxNQ c/L9LOU4fmasI8EnwAjq3DClWEUGgA8GA/JBwwNg0h1R0U54FgGDgPsy hbeb28yP
-nspluginwrapper.org. IN DNSKEY 257 3 5 AwEAAb4vy9Ly5L+cScrbUZoPXvyi52Fz7eod7f8kk1yIHYNEcZohRAwu N00GfBmzOX/An8S+QRtHaUduC/X5ARZy5AzE/vmZw/4gT7v8srhoHqkb goqP8fyoQy81hb9E99sKDyRNBVj82s+SZPV3aqBQN2u15W6pXgxIKgGd D5bRrtvG4gsxK7KooKDNEqmO4BPP2706o1KIMt0dPf7qT/5D7bkQjiS4 3IHGO7QkWY73JUCwBI0ZpFzbwVIRSjpiJVDnUYH7ol6x6Uu4mxVY1CIL RGk62w6BKzbc+kn3zVvaT5KBnEfciIOzUIAY/RBV4MFF6sAw3s5/0Hnt WOnjeKichHU=

-; This is a key-signing key, keyid 57614, for nspluginwrapper.org.
-; Created: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Publish: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Activate: 20201104203017 (Wed Nov  4 20:30:17 2020)
-nspluginwrapper.org. IN DNSKEY 257 3 14 QyTZMGGm7g79ZlLxHO41eeirKUx7sOWBVqtDJjgSROCV0uMtSBuaR8ZF 5AXpHkSh377sbt8SxTxTjmAqMYgJsgvjoDiUlY7vL6RhDqALtm3ERine 39krZBBjNQbW2uTz
-; This is a zone-signing key, keyid 63705, for nspluginwrapper.org.
-; Created: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Publish: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Activate: 20201104203017 (Wed Nov  4 20:30:17 2020)
-nspluginwrapper.org. IN DNSKEY 256 3 14 rQhxaaSWHrVkBbMt3r95ERdr6ZAD7TDAc6tAuEnJgaR6Weq/3T211UNq MrABMtaM9SEeXUBazxMWlefnCaVvqMDpRY2YyYCo7EI1EqsL1OPSz4Ak h6PRBaAwK3kubKbv
diff --git a/master/phx2.fedoraproject.org b/master/phx2.fedoraproject.org
index 3e9e2eed..e86885e8 100644
--- a/master/phx2.fedoraproject.org
+++ b/master/phx2.fedoraproject.org
@@ -4,7 +4,7 @@ $TTL 3600
 ; Make SURE to update the serial # when changes are made. Format is
 ; YYYYMMDDNN (NN is just a counter to handle multiple changes in one
 ; day).
-                2020110400 ; Serial
+                2024020500 ; Serial
                 3600       ; Refresh
                 600        ; Retry
                 1000000    ; Expire
@@ -27,18 +27,3 @@ koji02                  IN      A       10.3.169.105
 kojipkgs01              IN      A       10.3.169.106
 kojipkgs02              IN      A       10.3.169.107

-
-; DNSSEC keys
-phx2.fedoraproject.org. IN DNSKEY 256 3 10 AwEAAbI2viNSDnyqo7atgWYA6dh3ITYnxNwVFMApFeHP4pjaUHmKtl0a 5wzV++M2+mSmEWIagSM0Mll8lNKTv7M6QKe0p0tM4AVMaSIxGUHNBOPC ayIz/D/WS1Z+xE9O8hqHIkHQ47TM3ma3u3+M/zaDmxGWn86qayJD8m6K 6CJVRC07
-phx2.fedoraproject.org. IN DNSKEY 257 3 10 AwEAAcz6odFP+aHGbVn0qL9AP0n05kEMp4qbCrv/GgP0kpH9vqFC7JXN cqrqTzfTf/27FAtNzSu1HJdgKgWR6+O4hPDe0A77TLDnX9hs7qk+JBeL xkwUFvG6Zk93aWe4IKMvkVtLq8JnohhLx4+tp93MH65apgFCMxY0xyV3 7j7zBcKk2BMvNX11FuZedxJ/DcSo9Qvb7Ep+/kZlDf0eSevTZ8dMmdm7 KgLH30bue3JWU0w25+DIQUT1SCJFZO1+rwN7U/H9a+SCmhBJFyje2d+J FaQDKu2f3F1LXrlOqt2lnJjIISfIktZKaysg0R/Zy0q+DGj0h0i+gly9 REJyfKQjYjU=
-
-; This is a zone-signing key, keyid 29194, for phx2.fedoraproject.org.
-; Created: 20201104200158 (Wed Nov  4 20:01:58 2020)
-; Publish: 20201104200158 (Wed Nov  4 20:01:58 2020)
-; Activate: 20201104200158 (Wed Nov  4 20:01:58 2020)
-phx2.fedoraproject.org. IN DNSKEY 256 3 14 hWrh73rxnrOa3I8iEGgsGrk2+RQMQxgQJAxfDb3VDJPYjU76UJCrszZn HriOk0CqiMo7Dykn8yjS8lANoqtT/AJdcHFXUNqQzkA60NxLqFvvrp6B ZAEYrdpMm8ecjtB0
-; This is a key-signing key, keyid 39764, for phx2.fedoraproject.org.
-; Created: 20201104200158 (Wed Nov  4 20:01:58 2020)
-; Publish: 20201104200158 (Wed Nov  4 20:01:58 2020)
-; Activate: 20201104200158 (Wed Nov  4 20:01:58 2020)
-phx2.fedoraproject.org. IN DNSKEY 257 3 14 pyUjtiP5AAzudVssbDkhR6S1vKxOOZkVYeANBKOV4JmVFhQrpjrpCfBB 4kZ/zASh0Hv9viY3/nii60zoFyboPGk8/p9HWY5QBYD1Uozfyxad1r+q TvrTGBgUnjeqkLMd
diff --git a/master/port389.org b/master/port389.org
index 57ed20ad..049d84cb 100644
--- a/master/port389.org
+++ b/master/port389.org
@@ -3,7 +3,7 @@ $TTL 86400
 @      IN      SOA     ns-iad01.fedoraproject.org. hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2023053001 ; Serial
+                               2024020500 ; Serial
                                3600       ; Refresh
                                600        ; Retry
                                1000000    ; Expire
@@ -24,16 +24,4 @@ _github-pages-challenge-389ds IN TXT "4928fb87a6a28a05cbad6e49b2a26b"

 www     IN      CNAME          389ds.github.io.

-port389.org. IN DNSKEY 256 3 5 AwEAAcWef+LISnBRXXZqkASEaJdO0M7dPduQAU7BTMFJkfloWbExMxn5 TV2AMU8P5gMkDgtWkA8BlIBQ8KP52npbSETCWWGfZEeVdHbra/plBlBU pHshmAYOgXPsBXUiSbsvJtjuDCyJAkju7qiULfBfXifZH4RoJfFodjOF GLz6KJ/T
-port389.org. IN DNSKEY 257 3 5 AwEAAbfOqmTR6dR0RaNT3L8GnGL6zPW3b5GrseJ2pL1TbdqVtTuMpfJk n7FGq1vOQ0qzfgPw4gJRV4DJ/8W0rMlopqCR+DXgAlX3YOWzLvWb1njP GV+FsMATYa0iHZdZLku6VYhac8ht2BQCyVsh2P/IhCUpd/Z00fwl+Y3/ G9pS6KmwbU+tZhgeh3PwkJsm07cG9QLaMCsvDG36nJCkpn4R4muT+VT+ MN/56imhNB0qq+/0PYCUitqMqt4lQIYOwiR5Y0xjr0WF+vqvbAy3kq0/ 1a6qlQJOYFrPgwukhlRNJhdNGAdSDB/QtnsYi7H9qN6xgvZGEUEsk84F VIFqaX6f++k=

-; This is a zone-signing key, keyid 17346, for port389.org.
-; Created: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Publish: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Activate: 20201104203017 (Wed Nov  4 20:30:17 2020)
-port389.org. IN DNSKEY 256 3 14 BRSzQh3i0PiYoMO5rdrMMqTBrINjzgTeF8TdyGcJ010zM0d+3MtDNSXG a9GvlRr8JmcphpBKIvRIqUIVr6ZFTkpulhMDo69N4CVEi3OUtR0GCmS/ qNJx8N1uhrgKtok5
-; This is a key-signing key, keyid 44397, for port389.org.
-; Created: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Publish: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Activate: 20201104203017 (Wed Nov  4 20:30:17 2020)
-port389.org. IN DNSKEY 257 3 14 6a2VMFdSLgwOdkQtXvsmuu1Vp4DYR5oXCVOiQpYokWLUIlfEhuvbyJJK JqReF/Ars19hz1ho4nlUkpCoSGZLWFR21OKsr1oOHowZDo8jzT9iSdns 1nwN0Qi4gMtlR8A1
diff --git a/master/projectofedora.org b/master/projectofedora.org
index 5ed539b6..ae587b82 100644
--- a/master/projectofedora.org
+++ b/master/projectofedora.org
@@ -3,7 +3,7 @@ $TTL 86400
 @    IN    SOA    ns-iad01.fedoraproject.org. hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                2023062700 ; Serial
+                2024020500 ; Serial
                 3600      ; Refresh
                 600      ; Retry
                 1000000    ; Expire
@@ -13,16 +13,4 @@ $TTL 86400
     IN    NS    ns-iad01.fedoraproject.org.
     IN    NS    ns-iad02.fedoraproject.org.

-projectofedora.org. IN DNSKEY 257 3 5 AwEAAfoPiLQ+Z0Cu3V5SV4iNn4qkI0Wif0g9OBdBrhweHtjTjYCrwYHH hjOZr6puu1oFS4fRnzyXs6S+XJibN42dopdDHnrK7qOkmbaltikDAYxB ksuuY9+taDkzAzrR2fHEnWWIl6GNnp+PlWqKvC/5FbIrn3S6kaV4glua CeHvP+MuLqmQ7kNFwgJ49+CjHK69CJyPShsBN2kWJclwi8j9uiMnizCs e1EC3+MMLzn15ttMwit082P2VNxW5MjsqZCcsyO8QJTygv3KuiMcPB0h 3dwJsb45h7L0OzM9sotbK0oHVTZwH/3iaoERxNKa5QXHEC4pja8l+qYG sMYcsygUstM=
-projectofedora.org. IN DNSKEY 256 3 5 AwEAAdBMe36XuOlkdvOvJMxT84Jm6nVw4BHRdDrSaqJZKBlP7pUmT41L Oluzuy6cln8yTCzQAuZjUA+vaMcVaQ9SZ7S4OiGIvE5JNbLlnCVmJJdA KVW9lVDzEozUgXP+O2zNyDQGEP5gj/zBeKYRjbvD+AOzgN0R6TTiKnrF 9UNKaSRl

-; This is a key-signing key, keyid 2992, for projectofedora.org.
-; Created: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Publish: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Activate: 20201104203017 (Wed Nov  4 20:30:17 2020)
-projectofedora.org. IN DNSKEY 257 3 14 9Cj1uVKJYmnI9M/wdhIWB62o369w0QnxxMB+VdT02+4QyRBP9vCeXwzB LzMdvOm7Hgr2ar/+wfbJT9RJvhvasAn3sQSNqWyyTEMSRlPbO1FBNKXk VqFRcLjRgPOb9Xke
-; This is a zone-signing key, keyid 35586, for projectofedora.org.
-; Created: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Publish: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Activate: 20201104203017 (Wed Nov  4 20:30:17 2020)
-projectofedora.org. IN DNSKEY 256 3 14 Q+Hhn4vtoKkflZVQCx/0HE1sRohx5hG78oufeAO3ebGlk9/TCTCmi/x0 bcnJi78MKPfdKnxnOQNdxOiFB4fkUdxwfA1NhjJjJmwIe25Rl+sd9JuP IRRmo4rcOiqccJPO
diff --git a/master/smolts.org b/master/smolts.org
index 52c8928d..f8cc29af 100644
--- a/master/smolts.org
+++ b/master/smolts.org
@@ -3,7 +3,7 @@ $TTL 86400
 @    IN    SOA    ns-iad01.fedoraproject.org. hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                2020110400 ; Serial
+                2024020500 ; Serial
                 3600       ; Refresh
                 600        ; Retry
                 1000000    ; Expire
@@ -15,16 +15,4 @@ $TTL 86400
     IN    NS    ns-iad02.fedoraproject.org.

         IN      A       38.145.60.20
-smolts.org. IN DNSKEY 257 3 5 AwEAAbRxBJQwiO+QRBgpbNUJiB6wO5niET0BAJuouCBaZrf2g6uO2taq ygprMaiPXhrUC7afVaPBW8Q/X5yEMxX8q+fHDXhFlI0K6CLHGPSQCkEt yGWF2xvYT1pdaZvEGIxtUjn+xJQ2cXYSyFFwenM2VF7jDwnVJsflovu7 ynJ7t27Hu/ZNTRhE2MKCRIc3YeP3Dm/9i6HDlEPUhL1ou0ddsO6NJxyI YrKVQNWH2CFfS+rj1xqf2mngIvoftU1HRenNR+pITSLA8xHlpyWcvKDV 1F9w6uG35cOQZtL3z2tSeDz0qT0NgjWwuwAo93jr+5eFTGiw9wpjgQ9g KtH7VWmYSs0=
-smolts.org. IN DNSKEY 256 3 5 AwEAAexCIU9sMJz8qkAsLNvloamTHJ28ZxBGh/dpTJPSNxAGWqhsGLfs fOa2wOvzfW/qLkhGhfZFoJQ/i/tpCn1zLgTCum09ndGzvuOYsH7xp6vg acjD8Bh52JofmERac/f6Dp0pHZeqdpMWByP785uGMuoXZ5om/VRWNkF8 kt7nrOML

-; This is a zone-signing key, keyid 50713, for smolts.org.
-; Created: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Publish: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Activate: 20201104203017 (Wed Nov  4 20:30:17 2020)
-smolts.org. IN DNSKEY 256 3 14 Le9W6WBnse6Evr9JQtlOATRxBawCHS3JEZt+oGJiqQZy3V4KdOWYnOMh jvfMgJVnFsK7Ffeg9ppkRlZMBb+G1IsWJA1jjCY9r0ostsaeJBSYWuI0 UfvrL+LJmRt4b+r7
-; This is a key-signing key, keyid 61606, for smolts.org.
-; Created: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Publish: 20201104203017 (Wed Nov  4 20:30:17 2020)
-; Activate: 20201104203017 (Wed Nov  4 20:30:17 2020)
-smolts.org. IN DNSKEY 257 3 14 o4UkLcJQcZWNYwsSy4aVSAZnrbsi762bZFCfhuu+b44SEhw2rRMa78YJ zm/0jbPRNzLExEQsvc15ub4yXMNWZbm1APShZcAKJkM5mOp289OFW3X1 p4lFME14MsfSC2Mn

Login to comment on this ticket.

Metadata
None

low-trouble low-gain ops

None
None
Waiting on Assignee
Boards 1
ops Status: Backlog
Powered by Pagure 5.13.3
Documentation • File an Issue • About • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.