Your message dated Sat, 22 Feb 2025 18:28:54 +0100
with message-id <[email protected]>
and subject line Re: Bug#1098267: dns-root-data: root.key needs updating
has caused the Debian Bug report #1098267,
regarding dns-root-data: root.key needs updating
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1098267: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098267
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: dns-root-data
Version: 2024041801~deb12u1
Severity: important
X-Debbugs-Cc: [email protected]
Dear Maintainer,
/usr/share/dns/root.key appears to be an old file in need of refresh?
This causes various issues being logged such as:
[taupd ] you need to update package with trust anchors in
"/usr/share/dns/root.key"
As I understand it /usr/share/dns/root.key is provided by dns-root-data
(nothing else comes up on Debian package search that provides that file).
-- System Information:
Debian Release: 12.9
Architecture: amd64 (x86_64)
--- End Message ---
--- Begin Message ---
On Feb 22, Marco d'Itri <[email protected]> wrote:
> > /usr/share/dns/root.key appears to be an old file in need of refresh?
> Instead of speculating, you could verify that its content actually
> matches the KSK in the root zone ("dig . dnskey"). So, apparently not.
But now I see that you have an old version installed.
So, if you are not tracking proposed-updates then it will be fixed with
the next point release (#1092455). The warnings are harmless since the
new KSK will not be used for a long time.
--
ciao,
Marco
signature.asc
Description: PGP signature
--- End Message ---