Discuss mailing list

[Jeff Taylor <shdwdrgn AT sourpuss.net>]

Due to some discussion on IRC today I was looking into adding more 
error-detection to the script that generates the root zones.  While 
testing, I discovered that the zone was failing to build, and in fact 
has not been successfully updated since January 12th...

Since OpenNic has not had any new TLDs created in that time, the only 
thing this should have affected would be if ICANN added any new TLDs.  
However this probably also explains the failures seen by folks who have 
been attempting to test DNSSEC, as the keys for the zones they were 
attempting to test against may have expired within that time period.

The overall failure was caused by a lock file left behind.  I *thought* 
I had fixed all the code to automatically remove any lock files more 
than a few hours old, but I missed the script that generates new key 
files for our root zone.  Everything has been fixed now, patches made to 
the code, and a new root zone successfully generated and sent out.