Closed Bug 872885 Opened 11 years ago Closed 11 years ago

regenerate mozilla.org key signing key (KSK)

Categories

(mozilla.org Graveyard :: Server Operations, task)

Product:
mozilla.org Graveyard
Component:
Server Operations
Platform:
x86
macOS
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: Atoll, Unassigned)

References

Details

This bug is filed to document that this event occurred tonight for documentation purposes only.
The KSK for mozilla.org was regenerated around 5pm -0700 at MarkMonitor. We published a dual-signed (old and new KSK) zone around 6pm -0700, and then published a zone signed only by the new KSK at 6:30pm -0700. Between 5pm and 6:30pm, certain validating resolvers (Comcast) encountered sporadic issues resolving; bug 872818 is tracking that event, and bug 872884 is tracking improvements to our process for ZSK/KSK rollover to prevent future outages.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
Blocks: 872818
Group: infra
Product: mozilla.org → mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.