Re: [Sks-devel] Not in pool on status page

[Kristian Fiskerstrand]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 11/19/2013 04:48 PM, Kristian Fiskerstrand wrote:
> On 11/19/2013 04:26 PM, Kristian Fiskerstrand wrote:
>> On 11/19/2013 03:10 PM, Todd Lyons wrote:
>>> On Tue, Nov 19, 2013 at 10:43:30AM +0100, Webmaster wrote:
> 
>>>> I'm wondering why my keyserver (keyserver.linuxpro.nl) is
>>>> not in a pool on http://sks-keyservers.net/status/ but is
>>>> listed under "not in pool".  The server should be reachable
>>>> on ipv4 81.23.226.83 and ipv6 thru a sixxs tunnel. any
>>>> clues?
> 
>>> You need to configure your webserver to answer for all possible
>>>  host headers that are going to ask for keys.  Review the 
>>> recommended configuration settings for your nginx reverse
>>> proxy at
>>> https://bitbucket.org/skskeyserver/sks-keyserver/wiki/Peering
> 
> 
>> In addition, make sure that the keyserver is available from the 
>> external environment on the default HKP port of 11371.
> 
> 
> 
> Also I notice that I'm having issues resolving the domain name 
> keyserver.linuxpro.nl from my server. Make sure the keyservers are 
> properly set up (or is there any DNSSEC configuration that might
> stop the request?)

Following up on this, please verify your lookaside settings. I notice
that if I disable dnssec-lookaside auto; I get a valid response.

- -- 
- ----------------------------
Kristian Fiskerstrand
Blog: http://blog.sumptuouscapital.com
Twitter: @krifisk
- ----------------------------
Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
- ----------------------------
Acta est fabula
So ends the story
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=j+ld
-----END PGP SIGNATURE-----