Re: [Sks-devel] Not in pool on status page

[Kristian Fiskerstrand]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 11/19/2013 04:26 PM, Kristian Fiskerstrand wrote:
> On 11/19/2013 03:10 PM, Todd Lyons wrote:
>> On Tue, Nov 19, 2013 at 10:43:30AM +0100, Webmaster wrote:
> 
>>> I'm wondering why my keyserver (keyserver.linuxpro.nl) is not
>>> in a pool on http://sks-keyservers.net/status/ but is listed
>>> under "not in pool".  The server should be reachable on ipv4 
>>> 81.23.226.83 and ipv6 thru a sixxs tunnel. any clues?
> 
>> You need to configure your webserver to answer for all possible 
>> host headers that are going to ask for keys.  Review the 
>> recommended configuration settings for your nginx reverse proxy
>> at https://bitbucket.org/skskeyserver/sks-keyserver/wiki/Peering
> 
> 
> In addition, make sure that the keyserver is available from the 
> external environment on the default HKP port of 11371.
> 
> 

Also I notice that I'm having issues resolving the domain name
keyserver.linuxpro.nl from my server. Make sure the keyservers are
properly set up (or is there any DNSSEC configuration that might stop
the request?)

alpha kristianf # dig keyserver.linuxpro.nl @127.0.0.1

; <<>> DiG 9.9.3-P2 <<>> keyserver.linuxpro.nl @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 26821
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;keyserver.linuxpro.nl.         IN      A

;; Query time: 4996 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Nov 19 16:35:11 CET 2013
;; MSG SIZE  rcvd: 50


...

linuxpro.nl.            7200    IN      NS      ns5.linuxpro.nl.
linuxpro.nl.            7200    IN      NS      ns1.linuxpro.nl.
linuxpro.nl.            7200    IN      NS      ns3.linuxpro.nl.
sk4e8fj94u78smusb40o1n0oltbblu2r.nl. 900 IN NSEC3 1 1 5
F10E9F7EA83FC8F3 SK4F38CQ0ATIEI8MH3RGD0P5I4II6QAN NS SOA TXT RRSIG
DNSKEY NSEC3PARAM
sk4e8fj94u78smusb40o1n0oltbblu2r.nl. 900 IN RRSIG NSEC3 8 2 900
20131129072435 20131114211003 54171 nl.
Kc9aZQUqYxA95vFTQOkTXdHBpHGM6NOmJP64iIxDYBmSkNJXBYhpmZbr
b0dZucd/tPkCn2lTdg0UMv3iENvuUpt8Kf2yQujaoMfCLaH09uvY2xmB
ObsB1RBf0cwfbUUSI821uQjgrrIrjBHyeUBeP0DZ0vTTmWrn+vQk0ETb p6E=
pifi941j96fqbh2pmjjd4n87du1t2lt2.nl. 900 IN NSEC3 1 1 5
F10E9F7EA83FC8F3 PIFJDS2QDCUV77U0TTKV7EU2KQQG594P NS DS RRSIG
pifi941j96fqbh2pmjjd4n87du1t2lt2.nl. 900 IN RRSIG NSEC3 8 2 900
20131129124217 20131114231503 54171 nl.
TJpggrSHT7jTgu2zMLOhkc+MZqOWF1UbOVs5VGjqFCKJjvOzRBG93fDF
WSWLZlrKZF5ZjpSJagMGb+uVQieJBa4uMTfh4HcVy6cTRnwW3XAkoRXb
woMWAcrLoiPxkoY/GPC0YM2/8FJ5z75OfX99IxeZ4RAu2xmx6JS7T2Wz 2qo=
dig: couldn't get address for 'ns5.linuxpro.nl': no more


- -- 
- ----------------------------
Kristian Fiskerstrand
Blog: http://blog.sumptuouscapital.com
Twitter: @krifisk
- ----------------------------
Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
- ----------------------------
Acta est fabula
So ends the story
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQIcBAEBCgAGBQJSi4g1AAoJEAt/i2Dj7frjeQQQAIo6vmgyIPUx47MHDKzyvMrf
BXh1OV4REm9vGas9YO7xpHmVKf9KKAi4PkHGzlpiFi73AajC61w5geAKmcZF5r6C
w6u4KOrt2ZomK6ByVStw2qfKw+RW7Az0G8Zj5glHKc355Fciu5o116BKew3R5AoH
08BDEHOHGWLUhcVKPZIRAs3wCK/YSejzBUUuvnwAIpxqL7ZSW+Qk4O7qBCGPNhwq
74fdgD0Uj1Tt63XlJjJDMQAXF2cF0Zh8Ei/L5w8rMWIA+ATYNW5S3W32qTExew2n
Hd2ro+5lqbud8hj86fsYU8GHUb3rdkucXTY1TOn3S7vZp2mLaNb6vBbFKh/rpT4L
ILIjIOBacwoHZB//8gUsv39MqOFrEwGolTvvg5KHcG/AFWwQPu+RHAxOHKtyxsg/
R6d2mKO7/IxuODIT+bvuEtvrdTO+CJ+1LMDz5q1v9AjH0sLkFdzS0ja9t0Q+ENM+
WvS18bv+BkmVWetUXQkdRBtBvyZ71zixkzsxVnV6oiLsC91sFlx07Kxb+L+jOiA3
XzipdKA1/lPaP6OYrMZmwKCC55dxtyhemsR1QtHnHFOm4MwwBBblW/P+51xPA/KD
ibA9L2DhWlKuciLzfsZCw+fM8ZANI4v2/TyArAuBu3i3RZfy2Jhf+gY/sI0hUwAN
gQwYBeoj/7SK6SH6tylF
=skUv
-----END PGP SIGNATURE-----