search

tuapuikia / asuswrt-phantom

Asuswrt phantom with custom patch including (openvpn scramble, add missing tcp congestion and etc)
https://asuswrt.over9000.wtf/firmware/
Other
9 stars 7 forks source link

please update root-zone trust-anchors in services.c #7

Closed RoyArends closed 6 years ago

RoyArends commented 6 years ago

Users of your software that enable DNSSEC will not be able to validate DNS after October the 11th 2018.

Your repository at tuapuikia/asuswrt-phantom contains a “services.c” file without the new DNSSEC trust-anchors (line 1302)

ifdef RTCONFIG_DNSSEC

if (nvram_match("dnssec_enable", "1")) {
    fprintf(fp, "trust-anchor=.,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5\n"
                "dnssec\n");

This should read:

ifdef RTCONFIG_DNSSEC

if (nvram_match("dnssec_enable", "1")) {
    fprintf(fp, "trust-anchor=.,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5\n"
                "trust-anchor=.,20326,8,2,E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D\n"
                "dnssec\n");

More information can be found at: https://www.icann.org/resources/pages/ksk-rollover

Please don’t hesitate to get in touch.

Warmly,

Roy Arends ICANN

tuapuikia commented 6 years ago

Please use the latest image https://github.com/tuapuikia/asuswrt-merlin.ng