From 6fb711fed018a04030ffae4976030b7079c9a489 Mon Sep 17 00:00:00 2001 From: Andrey Brusnik Date: Tue, 11 Aug 2026 18:56:44 +0200 Subject: [PATCH] unbound: add DNSSEC KSK-2024 and remove KSK-2010 Remove the revoked KSK-2010 [1] trust anchor. Add KSK-2024 [2] ahead of the root zone KSK rollover on October 11, 2026. [1] https://www.icann.org/en/blogs/details/icann-is-revoking-the-old-key-signing-key-this-week-7-1-2019-en [2] https://www.icann.org/resources/pages/ksk-rollover-en Signed-off-by: Andrey Brusnik Signed-off-by: Josef Schlehofer [reworded commit subject and commit description] --- net/unbound/Makefile | 2 +- net/unbound/files/root.key | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/net/unbound/Makefile b/net/unbound/Makefile index 3d77ad7ffc..be5ecf1f67 100644 --- a/net/unbound/Makefile +++ b/net/unbound/Makefile @@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk PKG_NAME:=unbound PKG_VERSION:=1.26.1 -PKG_RELEASE:=1 +PKG_RELEASE:=2 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz PKG_SOURCE_URL:=https://nlnetlabs.nl/downloads/unbound diff --git a/net/unbound/files/root.key b/net/unbound/files/root.key index 2de0b62460..1d7d2f0936 100644 --- a/net/unbound/files/root.key +++ b/net/unbound/files/root.key @@ -1,3 +1,3 @@ -. IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5 . IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D +. IN DS 38696 8 2 683D2D0ACB8C9B712A1948B27F741219298D0A450D612C483AF444A4C0FB2B16