regenerate mozilla.org key signing key (KSK)

RESOLVED FIXED

Status

mozilla.org Graveyard
Server Operations
RESOLVED FIXED
4 years ago
3 years ago

People

(Reporter: atoll, Unassigned)

Tracking

Details

(Reporter)

Description

4 years ago
This bug is filed to document that this event occurred tonight for documentation purposes only.
(Reporter)

Comment 1

4 years ago
The KSK for mozilla.org was regenerated around 5pm -0700 at MarkMonitor. We published a dual-signed (old and new KSK) zone around 6pm -0700, and then published a zone signed only by the new KSK at 6:30pm -0700. Between 5pm and 6:30pm, certain validating resolvers (Comcast) encountered sporadic issues resolving; bug 872818 is tracking that event, and bug 872884 is tracking improvements to our process for ZSK/KSK rollover to prevent future outages.
Status: NEW → RESOLVED
Last Resolved: 4 years ago
Resolution: --- → FIXED
(Reporter)

Updated

4 years ago
Blocks: 872818
Group: infra
Product: mozilla.org → mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.