Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 1 May 2021 23:08:29 +0200
From:      <patrick.prugger@uname.at>
To:        <freebsd-pkg@freebsd.org>
Subject:   DNSSEC Errors on geo.freebsd.org
Message-ID:  <0a0c01d73ece$22f1dc60$68d59520$@uname.at>

next in thread | raw e-mail | index | archive | help
Hello everyone!

I just turned on DNSSEC validation on my DNS and it came to my eye that pkg
now doesn't work anymore.
Pkg is trying to access http://pkgmir.geo.freebsd.org/ to download de
repository catalogue.

Unfortunately it seems freebsd.org is signed with DNSSEC, but
geo.freebsd.org isn't which leads to a DNSSEC error, broken chain of trust.
For a diagram look here:
https://dnsviz.net/d/pkgmir.geo.freebsd.org/dnssec/

Does anyone here have a contact to the maintainers of the freebsd.org DNS
zone?

Best regards
Patrick Prugger




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?0a0c01d73ece$22f1dc60$68d59520$>