Conversation

Upcoming DNSSEC key rollover – how to check your Turris Omnia's knot resolver:

– connect to your Turris Omnia using SSH
– enter '# cat /etc/root.keys | grep "KeyTag:20326"'

If you see the key, no further action is required. All modern resolvers follow the process defined in RFC 5011 to update their root keys automatically.

See also:

https://www.icann.org/dns-resolvers-updating-latest-trust-anchor

#turris #omnia #knot #dnssec #key #rollover #dns #security #infosec #cybersecurity