Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add new IANA trust anchor #1135

Merged
merged 1 commit into from
Sep 2, 2024
Merged

Conversation

Keelan10
Copy link
Contributor

New TA is available and is expected to start signing in 2026:
https://data.iana.org/root-anchors/root-anchors.xml

Collaborators: Sarvesh Dindyal (ryndia@cyberstorm.mu) and Jagveer Loky (jagveer@cyberstorm.mu).

Signed-off-by: Keelan Cannoo <keelan.cannoo@cyberstorm.mu>
Copy link
Member

@wcawijngaards wcawijngaards left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is an unused example file. But good to also keep updated. The actual 'shipped' trust anchor in unbound-anchor was already updated.

The anchor looks to be correct. This update can be useful.

@wcawijngaards wcawijngaards merged commit 9f09c36 into NLnetLabs:master Sep 2, 2024
1 check passed
wcawijngaards added a commit that referenced this pull request Sep 2, 2024
- Merge #1135: Add new IANA trust anchor.
@wcawijngaards
Copy link
Member

Thank you for the improvement to the example! It is good to keep the trust anchors nicely up to date, the change is merged to the code repository.

jedisct1 added a commit to jedisct1/unbound that referenced this pull request Sep 23, 2024
* nlnet/master: (33 commits)
  - Fix doxygen warnings by commenting out CLANG_ASSISTED_PARSING,   CLANG_ADD_INC_PATHS, CLANG_OPTIONS and CLANG_DATABASE_PATH; they were   already disabled.
  - Fix dns64 with prefetch that the prefetch is stored in cache.
  - Add redis-command-timeout: 20 and redis-connect-timeout: 200,   that can set the timeout separately for commands and the   connection set up to the redis server. If they are not   specified, the redis-timeout value is used.
  Changelog comment for NLnetLabs#1140. - Merge NLnetLabs#1140: Fix spelling mistake in comments.
  Fix spelling mistake in comments (NLnetLabs#1140)
  - Fix and add comments in testdata/val_negcache_ttl.rpl.
  - Add unit test for ttl limit for aggressive nsec.
  - Fix to limit NSEC and NSEC3 TTL when aggressive nsec is   enabled (RFC9077).
  - Fix comment to not trigger doxygen unknown command.
  - Fix alloc-size and calloc-transposed-args compiler warnings.
  - Fix config file read for dnstap-sample-rate.
  Changelog note for NLnetLabs#1135 - Merge NLnetLabs#1135: Add new IANA trust anchor.
  Add new IANA trust anchor (NLnetLabs#1135)
  - Fix for NLnetLabs#1132, comment about adjusted copy of reference check.
  Changelog note for NLnetLabs#1132 and fix for NLnetLabs#1132. - Merge NLnetLabs#1132: b.root renumbering. - Fix for NLnetLabs#1132, adjusted unit test for change in the test file.
  b.root renumbering (NLnetLabs#1132)
  - Fix to print port number in logs for auth zone transfer activities.
  - Unit test for auth zone transfer TLS, and TLS failure.
  - Fix that stub-zone and forward-zone clauses do not exhaust memory   for long content.
  - Fix that when rpz is applied the message does not get picked up by   the validator. That stops validation failures for the message.
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants