André Keller | 1 May 01:42 2016

IPv6 status monitoring broken?

Hi all,

seems IPv6 status monitoring is currently broken. Only five servers list
IPv6 as working on https://sks-keyservers.net/status/. I've tested some
others (f.e. key.ip6.li, keys.communityrack.org) manually and they seem
to work fine over IPv6.

Anybody has a clue whats wrong?

Regards

André

_______________________________________________
Sks-devel mailing list
Sks-devel <at> nongnu.org
https://lists.nongnu.org/mailman/listinfo/sks-devel
Kiss Gabor (Bitman | 28 Apr 16:22 2016
Picon

keys.gnupg.net anomaly

I found requests for https://keys.gnupg.net/ in my Apache logs
on keys.niif.hu. Of course they were unsuccessful because
my HTTP daemon is not set up to provide this virtual site.

In the DNS we can see this:
keys.gnupg.net          CNAME   pool.sks-keyservers.net

Phil Pennock writes on http://sks.spodhuis.org/:
| End-users should use a pool definition, such as keys.gnupg.net which will
| alias into an operational pool.

So this seems to be a well known situation but I don't believe
it would be a wise thing.
Google is full of complaints about "unreachable" or "non functional"
keys.gnupg.net. The reason is above.

What do you think, folks?

Gabor

Kiss Gabor (Bitman | 27 Apr 13:46 2016
Picon

I provide keydump again

Dear folks,

I can offer weekly keydump again at http://keys.niif.hu/keydump/.
It will be generated every Monday.

Regards

Gabor
--

-- 
The Meaning of Life of Brian

Kiss Gabor (Bitman | 27 Apr 11:09 2016
Picon

Empty dump

Dear Carles,

Have you noticed, that https://pgp.key-server.io/sks-dump/
provides no data to download?

Regards

Gabor

Pete Stephenson | 26 Apr 23:12 2016

Running SKS keyserver on dynamic DNS

Hi all,

I already run one SKS keyserver, and am thinking of running a second.
The caveat is that the public IP address of the second system
periodically changes. When it does, the DNS name pointing to that
system is updated automatically (typically within a few seconds).

How happily could SKS exist in such an environment?

I have two particular concerns:

1. The instructions at
<https://bitbucket.org/skskeyserver/sks-keyserver/wiki/Peering> state
that "You should explicitly set all public addresses used...". How can
I effectively do this if the public address changes on occasion? How
would things work if I instead listed the internal IPv4 address of the
server (it's located behind a NAT router) and the public IPv6 address
for the server in the sksconf file?

2. How often would peers query DNS for updates to one's IP address? I
don't mind brief loss-of-sync events when the IP address changes, but
it'd be ideal if peers could adapt to updated IP addresses quickly.

Cheers!
-Pete

--

-- 
Pete Stephenson

(Continue reading)

Nick Bebout | 15 Apr 17:27 2016

keys.fedoraproject.org

Anyone that wants to peer with keys.fedoraproject.org, please add us to your membership file and send me the line to put in our membership file.

keys.fedoraproject.org 11370 # sysadmin-keys-members <at> fedoraproject.org (Nick Bebout)
<div><div dir="ltr">Anyone that wants to peer with <a href="http://keys.fedoraproject.org">keys.fedoraproject.org</a>, please add us to your membership file and send me the line to put in our membership file.<br><br><a href="http://keys.fedoraproject.org">keys.fedoraproject.org</a> 11370 # <a href="mailto:sysadmin-keys-members@...">sysadmin-keys-members <at> fedoraproject.org</a> (Nick Bebout)</div></div>
Nick Bebout | 15 Apr 17:26 2016
Picon

Peers for keys.fedoraproject.org

Anyone that wants to peer with keys.fedoraproject.org, please add us to your membership file and send me the line to put in our membership file.

<div><div dir="ltr">Anyone that wants to peer with <a href="http://keys.fedoraproject.org">keys.fedoraproject.org</a>, please add us to your membership file and send me the line to put in our membership file.<div><br></div>
<div>
<a href="http://keys.fedoraproject.org">keys.fedoraproject.org</a> 11370 # <a href="mailto:sysadmin-keys-members@...">sysadmin-keys-members@...</a> (Nick Bebout)</div>
</div></div>
Klaus-Uwe Mitterer | 13 Apr 00:34 2016

Seeking peers for keys.klaus-uwe.me

Hi,

I finally found the time to get a new SKS keyserver installation running
at keys.klaus-uwe.me.

The server has both IPv4 and IPv6 connectivity and a bandwidth of 1
Gbps. I imported a current key dump from keyserver.mattrude.org and
currently have 4,246,409 keys in the database.

I am now looking for peers. Please add my peering line to your
membership file and drop me a note so I can add your server as well.

keys.klaus-uwe.me 11370 # Klaus-Uwe Mitterer <info@...> 0x15DF1681

All the best
-- 
Klaus-Uwe Mitterer

Email: info@...
Mobile: +43 660 6340166

*** DISCLAIMER ***
This document is only intended for the person to whom it is addressed.
If you have received it, it was obviously addressed to you. Therefore,
you are free to read it, even if I didn't mean to send it to you.
However, if the contents of this email sound gibberish to you, you were
probably not the intended recipient - or you're just a mindless cretin.
If either is the case, you should immediately delete yourself and
destroy your computer. After doing this, please contact me immediately.
Well, obviously you can't use your computer for this, as you have
destroyed it. Also, you deleted yourself. Sorry, I digress...

I am under no circumstances liable for the transmission of information
contained in this communication, except if I am its sender (check that
in the headers of this email - if the "From:" field contains both my
name and email address and any of the "Received:" fields contains my
mail server, I probably am the sender), in which case I am probably
liable as I wrote it.

In case I didn't send this email to you, I sincerely apologize. Let me
invite you on a meat pie someday, maybe?

In case of non-receipt of this email, I do not take any responsibility,
because it means that either you or your email provider or both use a
Microsoft Windows operating system. You know how glitchy that is, right?
Nor will I accept any liability, tacit or implied, for any damage you
may or may not incur as a result of receiving, or not, as the case may
be, from time to time, notwithstanding all liabilities implied or
otherwise and... erm... you know... whatever the case may be... IT
WASN'T ME. YOU'RE MEAN.

Hi,

I finally found the time to get a new SKS keyserver installation running
at keys.klaus-uwe.me.

The server has both IPv4 and IPv6 connectivity and a bandwidth of 1
Gbps. I imported a current key dump from keyserver.mattrude.org and
currently have 4,246,409 keys in the database.

I am now looking for peers. Please add my peering line to your
membership file and drop me a note so I can add your server as well.

keys.klaus-uwe.me 11370 # Klaus-Uwe Mitterer <info@...> 0x15DF1681

All the best
-- 
Klaus-Uwe Mitterer

Email: info@...
Mobile: +43 660 6340166

*** DISCLAIMER ***
This document is only intended for the person to whom it is addressed.
If you have received it, it was obviously addressed to you. Therefore,
you are free to read it, even if I didn't mean to send it to you.
However, if the contents of this email sound gibberish to you, you were
probably not the intended recipient - or you're just a mindless cretin.
If either is the case, you should immediately delete yourself and
destroy your computer. After doing this, please contact me immediately.
Well, obviously you can't use your computer for this, as you have
destroyed it. Also, you deleted yourself. Sorry, I digress...

I am under no circumstances liable for the transmission of information
contained in this communication, except if I am its sender (check that
in the headers of this email - if the "From:" field contains both my
name and email address and any of the "Received:" fields contains my
mail server, I probably am the sender), in which case I am probably
liable as I wrote it.

In case I didn't send this email to you, I sincerely apologize. Let me
invite you on a meat pie someday, maybe?

In case of non-receipt of this email, I do not take any responsibility,
because it means that either you or your email provider or both use a
Microsoft Windows operating system. You know how glitchy that is, right?
Nor will I accept any liability, tacit or implied, for any damage you
may or may not incur as a result of receiving, or not, as the case may
be, from time to time, notwithstanding all liabilities implied or
otherwise and... erm... you know... whatever the case may be... IT
WASN'T ME. YOU'RE MEAN.

Stefan Huber | 10 Apr 19:56 2016
Picon

Seeking peers for gpg.stusta.de

Hi all,

I am looking for peers for a new SKS keyserver installation.

The server is running SKS 1.1.5 on a virutal machine with 1GBit uplink
and IPv6 connectivity.

The loaded keydump is from
https://keyserver.mattrude.com/dump/current/ dated yesterday
(2016-04-09) and thus the server has 4243729 keys loaded.

gpg.stusta.de 11370 # Stefan Huber <stefan.huber@...>
0x3B78A32D98BAD5B0

The server is run by the StuStaNet e.V., a student association with the
purpose of student help, thus maintaining a server network of over 50
Servers for over 2500 Students at the Studentenstadt Freimann [0] and
students and internet users everywhere.

[0] https://stusta.de

live long and prosper,
-- 
Stefan Huber / SuHu
stefan.huber@...
StuStaNet e.V. Admin

PS: This e-mail is cryptographically signed. This signature is the
attachment of this e-mail that is probably shown to you as a
signature.asc textfile. The signature means that you can safely assume
that the mail is really sent by me. For signing and encryption I use the
GnuPG program.
If you are interested in (secure) e-mail encryption and signature, just
write me and I can explain you, what you can or need to do. If you don't
care abour privacy, you just can ignore this and the signature.asc
attachment of this message.
If you already use GnuPG, drop me your key sometime!

Hi all,

I am looking for peers for a new SKS keyserver installation.

The server is running SKS 1.1.5 on a virutal machine with 1GBit uplink
and IPv6 connectivity.

The loaded keydump is from
https://keyserver.mattrude.com/dump/current/ dated yesterday
(2016-04-09) and thus the server has 4243729 keys loaded.

gpg.stusta.de 11370 # Stefan Huber <stefan.huber@...>
0x3B78A32D98BAD5B0

The server is run by the StuStaNet e.V., a student association with the
purpose of student help, thus maintaining a server network of over 50
Servers for over 2500 Students at the Studentenstadt Freimann [0] and
students and internet users everywhere.

[0] https://stusta.de

live long and prosper,
--

-- 
Stefan Huber / SuHu
stefan.huber@...
StuStaNet e.V. Admin

PS: This e-mail is cryptographically signed. This signature is the
attachment of this e-mail that is probably shown to you as a
signature.asc textfile. The signature means that you can safely assume
that the mail is really sent by me. For signing and encryption I use the
GnuPG program.
If you are interested in (secure) e-mail encryption and signature, just
write me and I can explain you, what you can or need to do. If you don't
care abour privacy, you just can ignore this and the signature.asc
attachment of this message.
If you already use GnuPG, drop me your key sometime!

Marco Nenciarini | 6 Apr 16:20 2016
Picon
Gravatar

Decommissioning keyserver.linux.it

Hi,

I have just received notice that the hardware that runs
keyserver.linux.it will be decommissioned the 8 Apr 2016 (in two days).

I'm seeking for another place to move the keyserver and the weekly
keydump, but for now both services will be shut down until further notice.

Sorry for the inconvenient.

Ciao,
Marco

-- 
Marco Nenciarini - mnencia@...
7C23 B804 3E65 D298 0A21  B6E2 589F 03F0 1BA5 5038

Hi,

I have just received notice that the hardware that runs
keyserver.linux.it will be decommissioned the 8 Apr 2016 (in two days).

I'm seeking for another place to move the keyserver and the weekly
keydump, but for now both services will be shut down until further notice.

Sorry for the inconvenient.

Ciao,
Marco

--

-- 
Marco Nenciarini - mnencia@...
7C23 B804 3E65 D298 0A21  B6E2 589F 03F0 1BA5 5038

Marco Nenciarini | 6 Apr 15:53 2016
Picon
Gravatar

Decommissioning keyserver.linux.it

Hi,

I have just received notice that the hardware that runs
keyserver.linux.it will be decommissioned the 8 Apr 2016 (in two days).

I'm seeking for another place to move the keyserver and the weekly
keydump, but for now both services will be shut down until further notice.

Sorry for the inconvenient.

Ciao,
Marco

-- 
Marco Nenciarini - mnencia@...
7C23 B804 3E65 D298 0A21  B6E2 589F 03F0 1BA5 5038

Hi,

I have just received notice that the hardware that runs
keyserver.linux.it will be decommissioned the 8 Apr 2016 (in two days).

I'm seeking for another place to move the keyserver and the weekly
keydump, but for now both services will be shut down until further notice.

Sorry for the inconvenient.

Ciao,
Marco

--

-- 
Marco Nenciarini - mnencia@...
7C23 B804 3E65 D298 0A21  B6E2 589F 03F0 1BA5 5038


Gmane