Fwd: PATCH: Add DNSKEY records to prepare for DNSSEC signing of zones Add dnssec-enable to named.conf

[Nick Bebout]

ns1|2 are not frozen in pre-release freeze, but I'd like to get +1's for
this anyway, since I'm touching named.conf and all of the zonefiles.

This is adding the DNSKEY records to all of the zonefiles in preparation
for puppet automatically signing the zonefiles when they are changed. 
> From my testing and research on my dns servers for my domain, it does
not break anything having the DNSKEY records, nor does dnssec-enable. 
Those just make it allow the zones to be signed (the client is the one
that validates them).

> From 516a908a2effd2e389b18f5b3cb0e8a24d1c14f3 Mon Sep 17 00:00:00 2001
From: Nick Bebout <nb(a)fedoraproject.org&gt;
Date: Sat, 3 Oct 2009 00:27:12 -0500
Subject: [PATCH] Add DNSKEY records to prepare for DNSSEC signing of
zones
 Add dnssec-enable to named.conf

---
 modules/bind/files/master/168.192.in-addr.arpa     |    5 ++++-
 modules/bind/files/master/178.132.209.in-addr.arpa |    5 ++++-
 modules/bind/files/master/255.17.172.in-addr.arpa  |    5 ++++-
 modules/bind/files/master/389tcp.org               |    5 ++++-
 modules/bind/files/master/fedora.sk                |    5 ++++-
 modules/bind/files/master/fedora.us                |    5 ++++-
 modules/bind/files/master/fedoracommunity.org      |    5 ++++-
 modules/bind/files/master/fedorahosted.org         |    5 ++++-
 modules/bind/files/master/fedoralinux.com          |    5 ++++-
 modules/bind/files/master/fedoralinux.net          |    5 ++++-
 modules/bind/files/master/fedoralinux.org          |    5 ++++-
 modules/bind/files/master/fedorapeople.org         |    4 +++-
 modules/bind/files/master/fedoraproject.com        |    5 ++++-
 modules/bind/files/master/fedoraproject.net        |    5 ++++-
 modules/bind/files/master/fedoraproject.org        |    5 ++++-
 modules/bind/files/master/fedoraproject.org.uk     |    5 ++++-
 modules/bind/files/master/fedoraproject.sk         |    5 ++++-
 modules/bind/files/master/k12linux.org             |    4 +++-
 modules/bind/files/master/nspluginwrapper.org      |    4 +++-
 modules/bind/files/master/port389.org              |    5 ++++-
 modules/bind/files/master/projectofedora.org       |    5 ++++-
 modules/bind/files/master/smolts.org               |    5 ++++-
 modules/bind/files/master/vpn.fedoraproject.org    |    5 ++++-
 modules/bind/files/named.conf                      |    1 +
 modules/bind/manifests/init.pp                     |    8 ++++++++
 25 files changed, 98 insertions(+), 23 deletions(-)

diff --git a/modules/bind/files/master/168.192.in-addr.arpa
b/modules/bind/files/master/168.192.in-addr.arpa
index 7716135..9a56ac2 100644
--- a/modules/bind/files/master/168.192.in-addr.arpa
+++ b/modules/bind/files/master/168.192.in-addr.arpa
@@ -2,7 +2,7 @@ $TTL 86400
 @    IN    SOA    168.192.in-addr.arpa. hostmaster.fedoraproject.org. 
 (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                2009090301 ; Serial
+                2009100201 ; Serial
                 28800      ; Refresh
                 14400      ; Retry
                 1000000    ; Expire
@@ -51,3 +51,6 @@ $TTL 86400
 51.1    IN      PTR     cstore2.vpn.fedoraproject.org.
 60.1    IN      PTR     value1.vpn.fedoraproject.org.
 61.1    IN      PTR     value2.vpn.fedoraproject.org.
+
+168.192.in-addr.arpa. IN DNSKEY 257 3 5
AwEAAbGPq27lKjxBxZO2KhW/wp1ZWQzaJFvgrtpnwhn55yc4IN9d6X5a
2Y4tIpG+5N6GFiQ/Se8RcSnqxDxjMHL594Sw6Fv9uYTEzZutGOCxMsDL
FiL9voIzx7xl3wW/pk0vK/zifclz6SGXRm4S1iI9VH/OkABLrsHY8VvM
MbJWqU0Bswoz1J47OdlBFB3aJcU5pzw+hh7K1csV/e8xx6wg1EfDTN6O
/SXYgnpreWXGIeEvFG7rdLO+Xp0qdf1YenfckdysavmcPltS3ZktklgD
xboemv2pT4R9wfvh1awbIZDZ8oVDcupvfo/q3vE+Uavv8tpFrU+0eRP2 +CQ7tdvbLnE=
+168.192.in-addr.arpa. IN DNSKEY 256 3 5
AwEAAbRvlLvzoYET6QLLTpiy0NHWwz4Cj17wQM4m5qxwQ/8F7k4YX5Af
jiBkTKm2vTDGTYSh1TGKmPerKeUau+avwNaP+Dlg9jGJvD4xNL20VY13
UlHuQVupNxn3XntXXvKco99gTKaRmL+0pBJDXW4vmYVFJhkY88B1My9u S0Upo5RX
diff --git a/modules/bind/files/master/178.132.209.in-addr.arpa
b/modules/bind/files/master/178.132.209.in-addr.arpa
index d445e32..f2f3836 100644
--- a/modules/bind/files/master/178.132.209.in-addr.arpa
+++ b/modules/bind/files/master/178.132.209.in-addr.arpa
@@ -2,7 +2,7 @@ $TTL 86400
 @       IN      SOA     178.132.209.in-addr.arpa.
 hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                                2009040901 ; Serial
+                                2009100201 ; Serial
                                 28800      ; Refresh
                                 14400      ; Retry
                                 1000000    ; Expire
@@ -19,3 +19,6 @@ $TTL 86400
 
 ; capp servers
 29      IN      PTR     capp1.fedoraproject.org.
+
+178.132.209.in-addr.arpa. IN DNSKEY 256 3 5
AwEAAar62LvsTxowKc9XoCD5OcjmkuaTNZBt+6Pwv38d56hNcTCsYpux
KMcb8Aa3q49qr5ZyuX56hAxdUf1WtwdVjKLv7omslxr6oJJZBuqkjTur
MEXZzdNZdCiM3EH/Td644OcTdGqLAbAOlG7PLWKzhclyiixvI0RWFo8C ukSmjaHf
+178.132.209.in-addr.arpa. IN DNSKEY 257 3 5
AwEAAbCy8DjTb5O1qzr7ZQCl3++xLDl37c60PI6UZsKOwzyAXbuEcLRL
qKrfBBSH9KweUntpGkwg3e0NjTHR82xpJ532gSJi5yRFK+gpiYSWUHpr
RaAc/mZjV2LKCnBJFL/fLK1WvF7dynya2lE2Etnsrr2sM/PRz7WgOerI
f1Swc64lu5wWXYhffH4VtarSp8e0+DBpABrEJ9TGiXpOC4isBYfOsq6o
h7laCDMV+Q91aubzouive7A+nY1VIEeBDmA6F1e3hECohDC1ehVSs4MH
Yafrl8WKprBRhY8QDvwK5Sjbsiw7fQamCjC4nJZnok0Bks1LA7sf0o8v cbtSHYJmtCk=
diff --git a/modules/bind/files/master/255.17.172.in-addr.arpa
b/modules/bind/files/master/255.17.172.in-addr.arpa
index c9414ce..2480671 100644
--- a/modules/bind/files/master/255.17.172.in-addr.arpa
+++ b/modules/bind/files/master/255.17.172.in-addr.arpa
@@ -2,7 +2,7 @@ $TTL 86400
 @       IN      SOA     255.17.172.in-addr.arpa.
 hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                                2009041302 ; Serial
+                                2009100201 ; Serial
                                 28800      ; Refresh
                                 14400      ; Retry
                                 1000000    ; Expire
@@ -19,3 +19,6 @@ $TTL 86400
 
 ; capp servers
 29  IN  PTR capp1.fedoraproject.org.
+
+255.17.172.in-addr.arpa. IN DNSKEY 257 3 5
AwEAAZrcAR/+QDX2vLOLdH6qaqKuKZaiJFmvEDPADTiEV4qBkxC2w3b3
4LV50jPPj1mDFGAfXPKJeUFHojSZoKYlwO5OsGK4b+IJs2k5UlKPArqg
E8y4OUrm7lU8RI4GK6XOqAJhN2Nq0jSHvZ1Ig9RdQ08SerTQECVsQkH1
3X634lmQwm6E69upQrWoRDQsvUSbvKl9ehZgGBmciw5ZAZ/7wDPR1BS8
1kpnvVjddQ0OYNDJmi6sSs2GD0G/Kd+zJsnnZN6AVcFHUBrFIqufX9fM
uRsDXyDO9DtDd07xXD+LjiXENQJF5Y/4r4oEZyo8zT237kd9Jy2W6dCP Uc7BIe10HGc=
+255.17.172.in-addr.arpa. IN DNSKEY 256 3 5
AwEAAc3ZblDTandJoMcpWgA0KtOYoBIL+VExXi2+a0qZqOtJTDi2AasX
uueMxotup8+zKGeuiGxgQytc2A2vaZYwJP/20Imi7qEdEAwpB3OyASi7
VF3U0qKP2hfvhuIlGrAgfrKJnQQkh+IESnCLJPNYRnYId5g8roS0Zzt3 r5wwpfBn
diff --git a/modules/bind/files/master/389tcp.org
b/modules/bind/files/master/389tcp.org
index 8bcc6bb..fa887b2 100644
--- a/modules/bind/files/master/389tcp.org
+++ b/modules/bind/files/master/389tcp.org
@@ -2,7 +2,7 @@ $TTL 86400
 @       IN      SOA     ns1.fedoraproject.org.
 hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2009082801 ; Serial
+                               2009100201 ; Serial
 				28800      ; Refresh
 				14400      ; Retry
 				1000000    ; Expire
@@ -19,3 +19,6 @@ $TTL 86400
 
 
 *       IN      CNAME   wildcard.fedoraproject.org.
+
+389tcp.org. IN DNSKEY 257 3 5
AwEAAdI16nEXem85nnHvfY98/y7WsuFAAKe+sn5QjsF10Norys4u/HNa
/96it0Rfcva3lPwD6H4IP7PdfFgGj9osShor8gDsW9IoJ+IXVPFlNh/h
4ykAs481GnO3fmdvmaOVUL8DSX1q5D3hwY3roI9DK56OWDsjhlyfEaUu
VWVfAW0k7oyRlDJnWu2rXVcUm/d/cdFzHkXhVHHUCtW2p95cjDdgaReP
Xk6nnajRWkLH2C84lfjKvC47fpEzHNOrobRfhyyCPUly5/GjIF8+NWWM
3xxxB3jdjwBQ6l+mgGp7kQMbQGv+83vNJTXFaPzIZbI8qolECKQJhHxn kvMaSMeMLwM=
+389tcp.org. IN DNSKEY 256 3 5
AwEAAZ7EGu5xtpUgNEyFckNSItz/809y/2wmYCTPA4t320OItkb65jqG
IsUruJWUA3D3JJzMEDFyO5e9O13caTc3B0OzPqvKASayWhhNhBGtkJnf
tEr9sOwlAMJ4foUXW1oBhF6t/Ou6Da79bil8VhDRuW3XLdX9C6VWvRoW 5giaCbVh
diff --git a/modules/bind/files/master/fedora.sk
b/modules/bind/files/master/fedora.sk
index 82fd682..bf20c63 100644
--- a/modules/bind/files/master/fedora.sk
+++ b/modules/bind/files/master/fedora.sk
@@ -2,7 +2,7 @@ $TTL 86400
 @       IN      SOA     ns1.fedoraproject.org.
 hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2009082800 ; Serial
+                               2009100201 ; Serial
 				28800      ; Refresh
 				14400      ; Retry
 				1000000    ; Expire
@@ -20,3 +20,6 @@ $TTL 86400
 
 *       IN      CNAME   wildcard.fedoraproject.org.
 ftp     IN      CNAME   ftp.upjs.sk.
+
+fedora.sk. IN DNSKEY 256 3 5
AwEAAcIZ7xRZPGYIjIAFewkAUQ6584yKa+Dk+qm/K20juM75apKRRLxq
KgPpKXan3PFWkCutdxGdd6p2W6XAOiaU5EQ6o0DCWAE4wCe+nwCn62QL
y0qJ8AVko1QtClY/gJjLBEDZIDQdg8sUdDSzaqwsGVMco6onGCoW9MmE wOD6/noF
+fedora.sk. IN DNSKEY 257 3 5
AwEAAfFH/JrN1L0jsW4Ax5RWYjkIBkJYS4mX1VvOt7QFg1+UtjcfLFHQ
auLv89TZOnIn12yMqWqMiFQBRnPAQrttLMy6dSOeTOUoE4TZsZZDtoqV
NB6TnCqbBKCnjsKNSfnVFdDNsm0dZyz51rBXnRNjkMBfnxsnA9ZMYxCF
jOnj3Cky+3HO47LaVZvG5BS6AHmdKfEEnDJf1cb0C1YkfsSJp3QwVy3P
dboxepwDc+V06drQaFwZcmuBRcarapqwTb2bP+s9cUd7r/TbItvLI08M
Xh6K4gjMQqLrjvX8a0dzHOV4XE2d426sJCpI32dSGOo4yHs083kWSMjL XBaIpdqmHl8=
diff --git a/modules/bind/files/master/fedora.us
b/modules/bind/files/master/fedora.us
index 1df3433..611d1e4 100644
--- a/modules/bind/files/master/fedora.us
+++ b/modules/bind/files/master/fedora.us
@@ -2,7 +2,7 @@ $TTL 86400
 @       IN      SOA     ns1.fedoraproject.org.
 hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2009091200 ; Serial
+                               2009100201 ; Serial
 				28800      ; Refresh
 				14400      ; Retry
 				1000000    ; Expire
@@ -18,3 +18,6 @@ $TTL 86400
         IN      AAAA    2610:28:200:1::fed0:2
 
 *       IN      CNAME   wildcard.fedoraproject.org.
+
+fedora.us. IN DNSKEY 256 3 5
AwEAAemN1a31saE2KOPp3IGyVpKdq8aoKecplJuan17ESZ+vdz8d5Lrm
RW/xCUKsLVUvViSkCBzmI+gTcFzw/UJCmv/JLa9fJiLiRg89exAroGmP
+6aLNssv6czDC3xsymWl0u0ZLIXiWZOqTcK8lZWI2sgy2OkMEpo9JQoo Qs89wDoH
+fedora.us. IN DNSKEY 257 3 5
AwEAAeeEtZveQ+2Azwhm1diAKCGnm8BH1Ahdwgi5rPn9ApwgLYQbh4aB
1S8MuH559IG0NMiayGGRfPHNa//Fa95L5UD37OISk/ZLq4jDAWHRnHH3
13oqRgNIAmswGidatLHuMhlokkyU/R/T3KngzOv4rCbBk6XBQawbPtPL
9w83f7A+B+vw2AMpYzP1jcrH34Pa6WMhAqtzxeHuTj0q51tRLcros8jd
V1GyNraVX7FA+zj2SVQ+mPgPslDDFFnA2/nicOMBmYp400r0O7/ZMsv4
91Xgu/ZeIuWiOcSWfxfNngcyPXzz61il+wQ2NSOhvSScJQFfphr3HkE7 mzMtYneXlrs=
diff --git a/modules/bind/files/master/fedoracommunity.org
b/modules/bind/files/master/fedoracommunity.org
index 7327962..57fe81e 100644
--- a/modules/bind/files/master/fedoracommunity.org
+++ b/modules/bind/files/master/fedoracommunity.org
@@ -2,7 +2,7 @@ $TTL 86400
 @    IN    SOA    ns1.fedoraproject.org. hostmaster.fedoraproject.org. 
 (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                2009081901 ; Serial
+                2009100201 ; Serial
                 28800      ; Refresh
                 14400      ; Retry
                 1000000    ; Expire
@@ -16,3 +16,6 @@ $TTL 86400
 bd  IN      A       69.65.31.3
 ph  IN      A       65.99.219.23
 www.bd  IN  A       69.65.31.3
+
+fedoracommunity.org. IN DNSKEY 256 3 5
AwEAAdZnonaxQb0YLvd7aZbPFb7J2aP0gzW0uiaCJPDS4K8uUYpSG5O9
BxzNgX1SlWeWjH+glrO0rYxn9EFhU2yXWMzqIXNp04xtE6lOlnQ1Kqtj
LYqhVpyYozch96DryxfCyebJu71AxlVAhViEP2ZGeiPpC5u5iJJTa30D 1VBPqaOX
+fedoracommunity.org. IN DNSKEY 257 3 5
AwEAAcfpt/HpANhs6WAeUasEV6Fv4UQm4jyVknBpoaZA9zPc3re+jdW9
mY0wcG7x6cbUaA6gb5pLXfyeXJSnn0b+I31siztirFlpcTKn9QEf+TaT
EPmtxtRFUBT5N+zxRGJAPHcpnb4N5fkBxknThw8KuQZQoe0y2qR0ztaG
pS4yTnQZsX7GhMqcONIJOEBa3BZNXdGSE0NoQ4TEk/DQcbdYValYZJz2
hDADuLxDmO+CRqAGjju4oFv32295E5DsAaVAS963sF8V5yK1Py7Ahl5x
jR2T9ZWdZFGNq9sUK8vZlJDF6Dgb0+A4mnDEdWUx0nOKsEkN4gsJhn0M nNOUGMuFn6s=
diff --git a/modules/bind/files/master/fedorahosted.org
b/modules/bind/files/master/fedorahosted.org
index 6ea6f27..4c94ea5 100644
--- a/modules/bind/files/master/fedorahosted.org
+++ b/modules/bind/files/master/fedorahosted.org
@@ -2,7 +2,7 @@ $TTL 86400
 @    IN    SOA    ns1.fedoraproject.org. hostmaster.fedoraproject.org. 
 (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                2009012901 ; Serial
+                2009100201 ; Serial
                 28800      ; Refresh
                 14400      ; Retry
                 1000000    ; Expire
@@ -22,3 +22,6 @@ git IN  A       66.135.52.17
 hg  IN  A       66.135.52.17
 svn IN  A       66.135.52.17
 mtn IN  A       66.135.52.17
+
+fedorahosted.org. IN DNSKEY 256 3 5
AwEAAbQA5BcY8HRlrYdjlQ2U+v5FSV+xIwopEyM2pSxYvsjj9pvLDVkP
fU6C4r6DGt0zbJVqmPQMrdCOHJgipq7Yskrf/jV5NGWv7nmf8OIzV7TM
iU8EpLILHeRAoT/ijZT5plNBhAf6B2LR+nLZFqaSET6LxVw5kYnILTBd RO7al6O7
+fedorahosted.org. IN DNSKEY 257 3 5
AwEAAbvOTooFo7dVI49CXozO0peup3OCrwdmMDY06UmZJ1V9BXBuWw+B
FkSWSAj8ALfvABogK2/CIUpKUauBm82EYdQdh0Lx7aJgD6anN8tLcaTW
pwC15TvPMYJkvvnnla7zOQwd1fwNVDzaQ7yS13s+iNVMpe/1fkqtk2yl
qE4Y8ThOYzhouoHmSsDgIyfPNx7ZYZthO8Amd9m4jD1Q+iPVGDco1H8U
zjEXwsHiv1gVAPE3uXpmYcVgfm6TsHZPDINRoF9Nuudgcx7MkD2a28lE
HfP5f3DyRYj60RLXanvn6H10L15pm9EYoMJtA/IncP1s8ZBBY0uL1cRT NXepUIbc8Pc=
diff --git a/modules/bind/files/master/fedoralinux.com
b/modules/bind/files/master/fedoralinux.com
index a3de386..9433e30 100644
--- a/modules/bind/files/master/fedoralinux.com
+++ b/modules/bind/files/master/fedoralinux.com
@@ -2,7 +2,7 @@ $TTL 86400
 @       IN      SOA     ns1.fedoraproject.org.
 hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2009082800 ; Serial
+                               2009100201 ; Serial
 				28800      ; Refresh
 				14400      ; Retry
 				1000000    ; Expire
@@ -19,3 +19,6 @@ $TTL 86400
         IN      AAAA    2610:28:200:1::fed0:2
 
 *       IN      CNAME   wildcard.fedoraproject.org.
+
+fedoralinux.com. IN DNSKEY 256 3 5
AwEAAeIpNN7qNiNpuMy9w/YIvAOM1A7kRlawPT+XVfKagcA4Utv3Au3P
5onhBeOhC8ZBqCc46NYmWnFh8obNKCI3uKdMVj9vj98A8R5qf4GUXYrW
GG8NcOddL6UTT84I9jQyzMbJnEVhaI7MFTwgS0H0JQL6m0mBiL+BX2+y m3oHP2m/
+fedoralinux.com. IN DNSKEY 257 3 5
AwEAAbiqrzNH9LS+xPxBud+2mp7vyGrnwax+Ol4GGWfSlhAsD4Rx+NF8
vWgEeByI70/itZchAVcZygUe7mSSDN0dfaC97PWQGxZSd+VBrMFKplAc
5yohuCzdQdFXQEAcekKs8nfM6LlkyLaThjvV3pwkGBEOG1Dgl7UucW/w
2Rnd6Avm9MRKc+69oviLCYnMMCGaGVPCG8U9JDCChvHgO3ZZatYzUCun
U+QzCtjOX4tQC88g700qs4ov1HXmBt/PmJ7GyyFUKZvO+f6xswUgQ2Nt
FHCcKI812hMCmbly4V1ow+gRFgdTCoJqCIOJBVbR8RHtrC4T3UDsl1Tt 53FBP0liZqc=
diff --git a/modules/bind/files/master/fedoralinux.net
b/modules/bind/files/master/fedoralinux.net
index a3de386..b1e9961 100644
--- a/modules/bind/files/master/fedoralinux.net
+++ b/modules/bind/files/master/fedoralinux.net
@@ -2,7 +2,7 @@ $TTL 86400
 @       IN      SOA     ns1.fedoraproject.org.
 hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2009082800 ; Serial
+                               2009100201 ; Serial
 				28800      ; Refresh
 				14400      ; Retry
 				1000000    ; Expire
@@ -19,3 +19,6 @@ $TTL 86400
         IN      AAAA    2610:28:200:1::fed0:2
 
 *       IN      CNAME   wildcard.fedoraproject.org.
+
+fedoralinux.net. IN DNSKEY 256 3 5
AwEAAcd/zct8CJdrfJKLBV8g/HH2e1jILj06Pu8Sj4t8t41yn1DOJqoZ
8kwHxk1RuIgzEhezJ8ZrRIdE1RnLTHZaFkM63Xe/Rga3iIdUy5vllQlh
MhVJVqYLvSZsM0phLYUmr+9/ENlQGPU2A5dqhKuQAH7wtUDTqH7cAZ4E w3IxuxnD
+fedoralinux.net. IN DNSKEY 257 3 5
AwEAAcCeoRPTvghjrEH7jBQXqKt3SKMKJFG5uCOOUgMmOO3yNQpyM7x+
xRQf0u3DC3bo8+K/bXQqqu9seHe6OVAdyVPgdiSQ26tdKJAMppXa8B5D
/qdEMA3AQF+SjUAvr4Shey7KPF8Frm+ieNKh5JY1rgr4p5kEDHguoCvF
mh18Mq8eLr7saVmGgHJI5qBWpptkyWbH3rgzKJzs4NehevtyGr5eMRt+
2Fkp5T4GAagf3i6t5zuwSrSnUgms8BDoKuhuOMPpoz0VInbFAPqdkGuC
En3kdWztP0VmVdcrJwVHMkx8jSAF5JGYgWp60DRVGZDyL2Fe25eYT9Nc 6Jw+CD8U/ws=
diff --git a/modules/bind/files/master/fedoralinux.org
b/modules/bind/files/master/fedoralinux.org
index a3de386..d525b6f 100644
--- a/modules/bind/files/master/fedoralinux.org
+++ b/modules/bind/files/master/fedoralinux.org
@@ -2,7 +2,7 @@ $TTL 86400
 @       IN      SOA     ns1.fedoraproject.org.
 hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2009082800 ; Serial
+                               2009100201 ; Serial
 				28800      ; Refresh
 				14400      ; Retry
 				1000000    ; Expire
@@ -19,3 +19,6 @@ $TTL 86400
         IN      AAAA    2610:28:200:1::fed0:2
 
 *       IN      CNAME   wildcard.fedoraproject.org.
+
+fedoralinux.org. IN DNSKEY 257 3 5
AwEAAeycnIHnjFQIT+NmlgXqzSTGcey2ks3YPqJXlh/SaXh4wLEHoGs6
C/AfrW/Qt++uhcE9FkwrLtRr91NIlPUcGxbskopqojHJD4TxX9FfpAhZ
vAhU2D8MhdnrueBOEyWgZA1NBn1+69EMlJxmlaTpCl5zXMGl43gyyS+A
rb6yEREbdJvAIN1QCtMZdyx2TtIV1OrvQvFNGxa3YwXSCbJiWRZnQjow
4NOFi2VMv/5TPJ8TQe41GhIHDpDB8mbO8Ot6KebBETBKAHnQTQThW7Xr
y5z8arhmtuhpQs0/ow6pQRw9EsdL+cHnUJz3/H54kHgzEVtyr3x5v+FZ ar65gklyv50=
+fedoralinux.org. IN DNSKEY 256 3 5
AwEAAdo3LfJ10Ml3cFPIEd6pOFNOaVfUYGJjvvz4LuCXjv1QgWn3hJSE
SATcBn8Bz/dRJrsMGCD5ds2JJoDbZ8DrjNklUnMAXVHdrfJQ+NA0BMAj
XjUQJLdInozdqTiFyagU/KRsyHxLSPT0YlQLQTCfzKAoBDWgZPmuKitz lUBkUDRb
diff --git a/modules/bind/files/master/fedorapeople.org
b/modules/bind/files/master/fedorapeople.org
index a08ffda..14c1f4d 100644
--- a/modules/bind/files/master/fedorapeople.org
+++ b/modules/bind/files/master/fedorapeople.org
@@ -1,6 +1,6 @@
 $TTL 3600
 @                               IN              SOA     
 ns1.fedoraproject.org. hostmaster.fedorapeople.org. (
-                                               2009012901 ; Serial
+                                               2009100201 ; Serial
 						8H ; refresh
 						2H ; retry
 						4W ; expire
@@ -11,3 +11,5 @@ $TTL 3600
 @               IN      A       128.197.185.45
 *               IN      A       128.197.185.45
 
+fedorapeople.org. IN DNSKEY 257 3 5
AwEAAdFkBoPoQh5P2UYkb3e6nuNfNGhIcPb+ZUJdwzNzbNtu3fgNCzLY
MgglC+LRXfysfXbuGJPEuIXJaQilonAAp/fwBg8oPyh6ssq7G7ZEXwur
4wdp33LjXV6hXxkAnD3TSfzNHg6Ub1yczRolSFHzzU/V6v1hEnJYOAlZ
+zRvuTB6SAWLBscjqt9Kfs47uPMDm0QIWjszdWjILa05uxFdUCMtjNyB
OlnfFHaKkk1U3mfkOvnXQST0UbpX8sUtJsiWfccVPGiV0lVntWqURhg1
kTq4DKaeJEreEmRPNE43QfFsPp4v7hDyR0vUZyNYgn+mIzCbOgIbDbfU k4GW3OCIRGk=
+fedorapeople.org. IN DNSKEY 256 3 5
AwEAAfc/JaVWt8ywHvVLFw3VPUIs7TPMyjX4H23LgM3Shqrzx3kg3OBV
CyGKuxJLAoPI0tsI8+Fc/Up8x4CIuk+RNHdS8wZk5u/6NnQYbCLpKe94
btr/gplCrnRGa3yKse5T2qgRyUD1vURSOPxsKDPPPOg8LaWfdYqrnRxN gGuhWnqX
diff --git a/modules/bind/files/master/fedoraproject.com
b/modules/bind/files/master/fedoraproject.com
index a3de386..daeed80 100644
--- a/modules/bind/files/master/fedoraproject.com
+++ b/modules/bind/files/master/fedoraproject.com
@@ -2,7 +2,7 @@ $TTL 86400
 @       IN      SOA     ns1.fedoraproject.org.
 hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2009082800 ; Serial
+                               2009100201 ; Serial
 				28800      ; Refresh
 				14400      ; Retry
 				1000000    ; Expire
@@ -19,3 +19,6 @@ $TTL 86400
         IN      AAAA    2610:28:200:1::fed0:2
 
 *       IN      CNAME   wildcard.fedoraproject.org.
+
+fedoraproject.com. IN DNSKEY 257 3 5
AwEAAbnyrRHT0PgLepNwjQXk8kMxjuQMUsqHW0pkl2+ryj9MGhUftluJ
kAO/aJebTCkZXO7Uc8ZHU02QiccRaAuykb+4ZxrKPgHiN72QzUzormWP
/MEC7YcUfdbaDrQjgxJMgZjmRW6ykscuvKQWNkAJeU6mH/o1s1asVCbQ
d3vil8cMuXq0D+1X0SY1uE9A2QEXBPTVTzJps9gfxYEjhWAVPLkDBGLc
niijBJoFcZJ5MAqyY+eMDkoDBWiNtIYZ+XG7nx/XrnzebH84xdEXzIqx
WtMT+wV1N4gLHOBmiA2FZT+OOpvFXNmiVJspVkL7uqzIvR4c40s3fbOM kQx1ikMwNBE=
+fedoraproject.com. IN DNSKEY 256 3 5
AwEAAb2A8G5Xgjhu42CwrSyO3pn3e2vg0PAw9PGzH+u1q0ECckUErB4b
tgFyyEP5UylfXWgkr7NDUkMyCWlIXOkHe6Sq/vq5PLoWpoemygKmUfko
dRagTFfFIDOUCfIzP4mnTtD+x9Uds34PYfrfWcwwLBwSZnAzulj1AaPY HrD+wRjd
diff --git a/modules/bind/files/master/fedoraproject.net
b/modules/bind/files/master/fedoraproject.net
index a3de386..8892aa5 100644
--- a/modules/bind/files/master/fedoraproject.net
+++ b/modules/bind/files/master/fedoraproject.net
@@ -2,7 +2,7 @@ $TTL 86400
 @       IN      SOA     ns1.fedoraproject.org.
 hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2009082800 ; Serial
+                               2009100201 ; Serial
 				28800      ; Refresh
 				14400      ; Retry
 				1000000    ; Expire
@@ -19,3 +19,6 @@ $TTL 86400
         IN      AAAA    2610:28:200:1::fed0:2
 
 *       IN      CNAME   wildcard.fedoraproject.org.
+
+fedoraproject.net. IN DNSKEY 256 3 5
AwEAAbrEqeMr3c5+8frWa//Orw+5Z+KNmdC45CSlfzhb4QpXwJ4gHru+
t1fQFug73dlmJ+Jy1Jcc9udyMGoK3jnpdpgLZXFAMNJo7Fxk92ZDs78u
IIRMyUPv6v1jlHMeOP4dR8pJ5iUMrpBGlCrKoOBUIeaBD/dJVPHO1ZhR LTwTthNZ
+fedoraproject.net. IN DNSKEY 257 3 5
AwEAAa+yLpBvKBZtGC+FHsyXd8PKpLfZVQ3zNTUMpB4sCVJXPVhpC2wM
bLEu1uJY3aHgNW8WQyfX6XtaD7HP0YAWR8E5HafiUmr7HFZKKzAZkQQu
w6mzKxTWRUJyXncwClRcFuqbdD+5NYFrnZ9H7jQt88URiTrD9xXv4cBV
dnoJ/d1EbnIJSwvwR2aiirxvvbitRmbVclMLcmbsqjU/AhR2HLadYhak
QgRTgtFxXjEhOSkfkVNJIzSoPdVEnTJqNY8UwcxKKDbLYzhMyYD/2AI6
QyyJGnnaziu5ZOnEr/DeTF9e8XgoszQklT9VtADQowqmyIjt/fjppX99 PhsD+Ll0+QM=
diff --git a/modules/bind/files/master/fedoraproject.org
b/modules/bind/files/master/fedoraproject.org
index 6ce7597..38b771c 100644
--- a/modules/bind/files/master/fedoraproject.org
+++ b/modules/bind/files/master/fedoraproject.org
@@ -1,6 +1,6 @@
 $TTL 3600
 @                IN        SOA     ns1.fedoraproject.org.       
 hostmaster.fedoraproject.org. (
-                        2009092201 ; Serial
+                        2009100201 ; Serial
                         8H ; refresh
                         2H ; retry
                         4W ; expire
@@ -227,3 +227,6 @@ translate       IN    CNAME admin
 translate.stg   IN    CNAME admin.stg.fedoraproject.org.
 tummy1          IN    A     66.35.62.161
 www             IN    CNAME fedoraproject.org.
+
+fedoraproject.org. IN DNSKEY 256 3 5
AwEAAcCWNQWl5pCI3iOOP2r8nStL60Zjb/2JQLQytamVap0L44z0YWft
u7pu0hx3cnIM1ejQOsEwbg2/10IyC+38cYqJDXbSdFg1zGztOS5xNz7r
9hzSRK5N2jkycdJ/BoByJ4Y+XGpDqfG4I97++8sIzSrw60TmGAKTvM9v iL3ByeCN
+fedoraproject.org. IN DNSKEY 257 3 5
AwEAAdTXJc0joiKGfTvLXi+LXxGpKvPvOoJEst9PR8TCCvXGVp7h3BY3
uXLkjckuT0aopCp2KF8zHgNgpMK03p1fd94pn9JZSuxfqvKsiYH2KvNO
a/655oPj06jRhqAP5grX01Iz4BH411ZhGxIQ1BzZtOr1wAazojMJzLUg
ChRJs8GVt3LU0e6T8z1RQF33Dt9UMHIR5EAsFAqfZ/tsbfJDYktGoZi3
nFlW7A745+ObM1LNXOWq3FcYPVzhH08Q7/7WpxmzM6/ET8VeqWIsvh8E
nZNDNMfJyPbY9B1BOIrFCpE03ALgFMejaBZwmeQaX+D4Duup5xGOmdtC O4GSpM1YH6c=
diff --git a/modules/bind/files/master/fedoraproject.org.uk
b/modules/bind/files/master/fedoraproject.org.uk
index a3de386..56db552 100644
--- a/modules/bind/files/master/fedoraproject.org.uk
+++ b/modules/bind/files/master/fedoraproject.org.uk
@@ -2,7 +2,7 @@ $TTL 86400
 @       IN      SOA     ns1.fedoraproject.org.
 hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2009082800 ; Serial
+                               2009100201 ; Serial
 				28800      ; Refresh
 				14400      ; Retry
 				1000000    ; Expire
@@ -19,3 +19,6 @@ $TTL 86400
         IN      AAAA    2610:28:200:1::fed0:2
 
 *       IN      CNAME   wildcard.fedoraproject.org.
+
+fedoraproject.org.uk. IN DNSKEY 257 3 5
AwEAAZk7m7VHVxypg6mJ7Dib9JYQv4ikaQYBQWJi4pLbPMzjFsShWu7x
F8v1Y4WbSUEzI6oeVqpM5VSoSVq9FodXVSjgoQZ4bdJ0/zWK2gqCFf7L
2xyPHIFTCRaNR8/XCL1+DFn0kkn5rj5Tu035Bkc2yj2nDzkRAOP2iL2R
gSFyeTeratYjIv33fcEEJgR5J5JKMr3jnCgHdEWsKhrbOjRJ5nTJfuAe
ixzMElzAHdoBlQ8aB3vsXLlQ5J3a3kxU4G1D2sVFkS0Wp967X+lsQNVs
PS5AoU3FcSPqhuxxEcLL2dHlO3rC0Qa5SAcQSAIm3uT5OqmTqMpHaYAA wW99PPKtadk=
+fedoraproject.org.uk. IN DNSKEY 256 3 5
AwEAAcpBLkw9ifFQnM+cbRYlPKXmRds/kInW6+p/sIVBsQjF2FRxrfbc
MnYBBrXnz5ZNaroiVLKIv+YXG0B7igUXiOMEsmkMRX9S98ARTLxi6m4/
Z/6REqjAy30pHpRwATOHeLVadqIYI7WUpRfGVpF9aw5ONyuPyoH0ElG9 UsmNa4Kp
diff --git a/modules/bind/files/master/fedoraproject.sk
b/modules/bind/files/master/fedoraproject.sk
index a3de386..c4230ac 100644
--- a/modules/bind/files/master/fedoraproject.sk
+++ b/modules/bind/files/master/fedoraproject.sk
@@ -2,7 +2,7 @@ $TTL 86400
 @       IN      SOA     ns1.fedoraproject.org.
 hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2009082800 ; Serial
+                               2009100201 ; Serial
 				28800      ; Refresh
 				14400      ; Retry
 				1000000    ; Expire
@@ -19,3 +19,6 @@ $TTL 86400
         IN      AAAA    2610:28:200:1::fed0:2
 
 *       IN      CNAME   wildcard.fedoraproject.org.
+
+fedoraproject.sk. IN DNSKEY 257 3 5
AwEAAbAXZmXBZqIaJGceFoeZ6RT6NJDVNUbcFleyJh5EjHblW/b49L6e
xvF1NBB5yqfI4Im/nM13uynfVoIE+iyXJEHY7C2Gl+8wej/Z2I7lz9hm
NAtQNoA8eiOkj0MvonqNPdeMbA5YXesEL1ZncKF60rq24fOx+UhBr/ed
4aMp+bA7LZtG+tuHtJvdwxpropXHIB5nnjCQXv1tF9NyWiRYhNRtOsq+
6sAUyAPc8o/aPHMdi2wMCrd5fNh59SBeadHnpgCMqSZ5ixledangMxww
uBYc3k0BZXJfVmc6zysngQkIAVcGSEoGZQFX2Eep0VJ5mwnqdVgev1Yg kVAdFQLYLx0=
+fedoraproject.sk. IN DNSKEY 256 3 5
AwEAAa4SvPbdLirzNCJDzaTcBG5ubb8PwrtoIHLaJGBk+IxxRY25/awl
WNFLYL8dowaU+9ykcR10cyOsym2o4/GA+UXCGTc9lB7hoCvguytJsfrj
hYV9MUKge0FCBMDKijMLjPaPi/A+l8U2Jb5LpK5sXGus3gUaAKdaexiX R7R5feHF
diff --git a/modules/bind/files/master/k12linux.org
b/modules/bind/files/master/k12linux.org
index 1301bb7..4acb732 100644
--- a/modules/bind/files/master/k12linux.org
+++ b/modules/bind/files/master/k12linux.org
@@ -2,7 +2,7 @@ $TTL 86400
 @    IN    SOA    ns1.fedoraproject.org. hostmaster.fedoraproject.org. 
 (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                2009091300 ; Serial
+                2009100201 ; Serial
                 28800      ; Refresh
                 14400      ; Retry
                 1000000    ; Expire
@@ -18,3 +18,5 @@ $TTL 86400
 
 www             IN    CNAME k12linux.org.
 
+k12linux.org. IN DNSKEY 256 3 5
AwEAAdoloJ8DnooJCUJKK57e5Biq79zmPMcdKnGsPUUb5/2W6hoeRa3B
TXuTvnKh9lhswGQc9UBqan2f9xGheAQQGxtVsMUcvI8nfmlE9NZGk7VH
9d6SWasvgSfzPjk9+kcROQ60Vr6lU/v6lZonpo7kmV0r40PcGhZ/xr3q vpQKk7T9
+k12linux.org. IN DNSKEY 257 3 5
AwEAAa754g3hJ8ZU2+21T2v9wiPKd3A8G0zu8dbnnk4ERfbh0wcivBfs
nuPhhsvIWN+5Q0vcm4a1tkVbaaYJFIRzFbKh8E22reAzL7AmBOb50US9
TZNd/KqlXUHlBmzzPOIMGZ2DNzt+TR3K5DfxkqFWsSb78+Y3sZBCqMHV
8WPkP99AHH/WI9d1hO/Nj72Zj0Dzlkmd6MsoAEB+KlrB5S4pwPN+xZJh
SzoFkdVko614l/NvhOj+nM2WSwhNB91nBtmWJxqamr2RFG3EmHdTRwqo
ii+8B2EshQleVLfvFo5/DG+rh/rbde04tf5inyanx3j4+/y3Cf4XpBhZ ZxmlfQ7Qzxs=
diff --git a/modules/bind/files/master/nspluginwrapper.org
b/modules/bind/files/master/nspluginwrapper.org
index e42239e..f710e6e 100644
--- a/modules/bind/files/master/nspluginwrapper.org
+++ b/modules/bind/files/master/nspluginwrapper.org
@@ -2,7 +2,7 @@ $TTL 86400
 @    IN    SOA    ns1.fedoraproject.org. hostmaster.fedoraproject.org.
 (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                2009091400 ; Serial
+                2009100201 ; Serial
                 28800      ; Refresh
                 14400      ; Retry
                 1000000    ; Expire
@@ -19,3 +19,5 @@ $TTL 86400
 @    60         IN    A    152.46.7.222
 @    60         IN    A    80.239.156.215 
 
+nspluginwrapper.org. IN DNSKEY 256 3 5
AwEAAavBQAdZgIWSkK7kAPmJn2GKSrfUdwDdzLae9E4iqtquYi1IcVht
hRJUNcKbUGX1EZNhLv23plbiZgyKW3EGQexwMdL7DnIVw+TzNbdfnxNQ
c/L9LOU4fmasI8EnwAjq3DClWEUGgA8GA/JBwwNg0h1R0U54FgGDgPsy hbeb28yP
+nspluginwrapper.org. IN DNSKEY 257 3 5
AwEAAb4vy9Ly5L+cScrbUZoPXvyi52Fz7eod7f8kk1yIHYNEcZohRAwu
N00GfBmzOX/An8S+QRtHaUduC/X5ARZy5AzE/vmZw/4gT7v8srhoHqkb
goqP8fyoQy81hb9E99sKDyRNBVj82s+SZPV3aqBQN2u15W6pXgxIKgGd
D5bRrtvG4gsxK7KooKDNEqmO4BPP2706o1KIMt0dPf7qT/5D7bkQjiS4
3IHGO7QkWY73JUCwBI0ZpFzbwVIRSjpiJVDnUYH7ol6x6Uu4mxVY1CIL
RGk62w6BKzbc+kn3zVvaT5KBnEfciIOzUIAY/RBV4MFF6sAw3s5/0Hnt WOnjeKichHU=
diff --git a/modules/bind/files/master/port389.org
b/modules/bind/files/master/port389.org
index 52d34d8..6431d5b 100644
--- a/modules/bind/files/master/port389.org
+++ b/modules/bind/files/master/port389.org
@@ -2,7 +2,7 @@ $TTL 86400
 @       IN      SOA     ns1.fedoraproject.org.
 hostmaster.fedoraproject.org.  (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                               2009082801 ; Serial
+                               2009100201 ; Serial
 				28800      ; Refresh
 				14400      ; Retry
 				1000000    ; Expire
@@ -18,3 +18,6 @@ $TTL 86400
         IN      A       80.239.156.215
 
 *       IN      CNAME   wildcard.fedoraproject.org.
+
+port389.org. IN DNSKEY 256 3 5
AwEAAcWef+LISnBRXXZqkASEaJdO0M7dPduQAU7BTMFJkfloWbExMxn5
TV2AMU8P5gMkDgtWkA8BlIBQ8KP52npbSETCWWGfZEeVdHbra/plBlBU
pHshmAYOgXPsBXUiSbsvJtjuDCyJAkju7qiULfBfXifZH4RoJfFodjOF GLz6KJ/T
+port389.org. IN DNSKEY 257 3 5
AwEAAbfOqmTR6dR0RaNT3L8GnGL6zPW3b5GrseJ2pL1TbdqVtTuMpfJk
n7FGq1vOQ0qzfgPw4gJRV4DJ/8W0rMlopqCR+DXgAlX3YOWzLvWb1njP
GV+FsMATYa0iHZdZLku6VYhac8ht2BQCyVsh2P/IhCUpd/Z00fwl+Y3/
G9pS6KmwbU+tZhgeh3PwkJsm07cG9QLaMCsvDG36nJCkpn4R4muT+VT+
MN/56imhNB0qq+/0PYCUitqMqt4lQIYOwiR5Y0xjr0WF+vqvbAy3kq0/
1a6qlQJOYFrPgwukhlRNJhdNGAdSDB/QtnsYi7H9qN6xgvZGEUEsk84F VIFqaX6f++k=
diff --git a/modules/bind/files/master/projectofedora.org
b/modules/bind/files/master/projectofedora.org
index 719fa85..2e7eedc 100644
--- a/modules/bind/files/master/projectofedora.org
+++ b/modules/bind/files/master/projectofedora.org
@@ -2,7 +2,7 @@ $TTL 86400
 @    IN    SOA    ns1.fedoraproject.org. hostmaster.fedoraproject.org. 
 (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                2009082800 ; Serial
+                2009100201 ; Serial
                 28800      ; Refresh
                 14400      ; Retry
                 1000000    ; Expire
@@ -19,3 +19,6 @@ $TTL 86400
         IN      AAAA    2610:28:200:1::fed0:2
 
 *       IN      CNAME   wildcard.fedoraproject.org.
+
+projectofedora.org. IN DNSKEY 257 3 5
AwEAAfoPiLQ+Z0Cu3V5SV4iNn4qkI0Wif0g9OBdBrhweHtjTjYCrwYHH
hjOZr6puu1oFS4fRnzyXs6S+XJibN42dopdDHnrK7qOkmbaltikDAYxB
ksuuY9+taDkzAzrR2fHEnWWIl6GNnp+PlWqKvC/5FbIrn3S6kaV4glua
CeHvP+MuLqmQ7kNFwgJ49+CjHK69CJyPShsBN2kWJclwi8j9uiMnizCs
e1EC3+MMLzn15ttMwit082P2VNxW5MjsqZCcsyO8QJTygv3KuiMcPB0h
3dwJsb45h7L0OzM9sotbK0oHVTZwH/3iaoERxNKa5QXHEC4pja8l+qYG sMYcsygUstM=
+projectofedora.org. IN DNSKEY 256 3 5
AwEAAdBMe36XuOlkdvOvJMxT84Jm6nVw4BHRdDrSaqJZKBlP7pUmT41L
Oluzuy6cln8yTCzQAuZjUA+vaMcVaQ9SZ7S4OiGIvE5JNbLlnCVmJJdA
KVW9lVDzEozUgXP+O2zNyDQGEP5gj/zBeKYRjbvD+AOzgN0R6TTiKnrF 9UNKaSRl
diff --git a/modules/bind/files/master/smolts.org
b/modules/bind/files/master/smolts.org
index 4e98126..c04166e 100644
--- a/modules/bind/files/master/smolts.org
+++ b/modules/bind/files/master/smolts.org
@@ -2,7 +2,7 @@ $TTL 86400
 @    IN    SOA    ns1.fedoraproject.org. hostmaster.fedoraproject.org. 
 (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                2009082800 ; Serial
+                2009100201 ; Serial
                 28800      ; Refresh
                 14400      ; Retry
                 1000000    ; Expire
@@ -20,3 +20,6 @@ $TTL 86400
 
 stg  IN  A       209.132.176.98
 *    IN    CNAME    smolts.org.
+
+smolts.org. IN DNSKEY 257 3 5
AwEAAbRxBJQwiO+QRBgpbNUJiB6wO5niET0BAJuouCBaZrf2g6uO2taq
ygprMaiPXhrUC7afVaPBW8Q/X5yEMxX8q+fHDXhFlI0K6CLHGPSQCkEt
yGWF2xvYT1pdaZvEGIxtUjn+xJQ2cXYSyFFwenM2VF7jDwnVJsflovu7
ynJ7t27Hu/ZNTRhE2MKCRIc3YeP3Dm/9i6HDlEPUhL1ou0ddsO6NJxyI
YrKVQNWH2CFfS+rj1xqf2mngIvoftU1HRenNR+pITSLA8xHlpyWcvKDV
1F9w6uG35cOQZtL3z2tSeDz0qT0NgjWwuwAo93jr+5eFTGiw9wpjgQ9g KtH7VWmYSs0=
+smolts.org. IN DNSKEY 256 3 5
AwEAAexCIU9sMJz8qkAsLNvloamTHJ28ZxBGh/dpTJPSNxAGWqhsGLfs
fOa2wOvzfW/qLkhGhfZFoJQ/i/tpCn1zLgTCum09ndGzvuOYsH7xp6vg
acjD8Bh52JofmERac/f6Dp0pHZeqdpMWByP785uGMuoXZ5om/VRWNkF8 kt7nrOML
diff --git a/modules/bind/files/master/vpn.fedoraproject.org
b/modules/bind/files/master/vpn.fedoraproject.org
index ba16d83..f7af0a2 100644
--- a/modules/bind/files/master/vpn.fedoraproject.org
+++ b/modules/bind/files/master/vpn.fedoraproject.org
@@ -2,7 +2,7 @@ $TTL 86400
 @    IN    SOA    ns1.fedoraproject.org. hostmaster.fedoraproject.org. 
 (
 ; Make SURE to update the serial # when changes are made. Format is
 YYYYMMDDNN
 ; (NN is just a counter to handle multiple changes in one day).
-                2009090301 ; Serial
+                2009100201 ; Serial
                 28800      ; Refresh
                 14400      ; Retry
                 1000000    ; Expire
@@ -62,3 +62,6 @@ telia1       IN  A   192.168.1.32
 tummy1       IN  A   192.168.1.9
 value1       IN  A   192.168.1.60
 value2       IN  A   192.168.1.61
+
+vpn.fedoraproject.org. IN DNSKEY 257 3 5
AwEAAedS+W2j2j7PkRrGiTYh/en+OeFPGM60NZJInKrWlZ1saIgRx7ca
V/vzREXGCb750OVTAdGcHgXI6RQzWmAh3wirS2OCLEV5M1LsuwbRAZp3
udn5aNARaXp7V037bML9ftNqvCq3N7NPcrkCcVpPuj/U6ZFnLZRsc3SQ
qVv2jJ/3cm+QiCsdzjafOpUl99ksa7fIq+dcKwlYAlgPjAa5E/feFldu
ATgSl/6G3xrf00i6ymZGdI09+xcGQq9jZOOiFwFiHUwZUqDOQHtCKp4g
pKg0AHxl0M0oQfhUEFJc3TDyTsDmqDRjU3Rc+Qgd605ft3nXJgCA1eWC sVGOc6H8Eoc=
+vpn.fedoraproject.org. IN DNSKEY 256 3 5
AwEAAaTFZorwk/gRNUusZLpjo00F9ya5/Hl2caPG9LOCT/40XTvBUdyh
g3JY3/lSCyYSS++EHmKHPwRVcw4VTaY4iu/vdIE0PAPdlP3b+1D1oJBp
58f/r5ZC5Ecn1TfrXvDoxijb6trd7qtyk9fiVukwsfArofdEuoJvyZvj 7pM0L8b/
diff --git a/modules/bind/files/named.conf
b/modules/bind/files/named.conf
index 4de7247..d00e301 100644
--- a/modules/bind/files/named.conf
+++ b/modules/bind/files/named.conf
@@ -28,6 +28,7 @@ options {
         auth-nxdomain yes;
         allow-query { everyone; };
         allow-recursion { me; cloud; };
+       enable-dnssec yes;
         query-source address * port *;
         query-source-v6 address * port *;
         allow-transfer { me; slaves; };
diff --git a/modules/bind/manifests/init.pp
b/modules/bind/manifests/init.pp
index 958a18b..f13bdb1 100644
--- a/modules/bind/manifests/init.pp
+++ b/modules/bind/manifests/init.pp
@@ -66,6 +66,14 @@ class bind::named {
         notify => Service["named"],
     }
 
+    file { "/var/named/chroot/keys":
+        owner   => "root",
+        group   => "root,
+        source  => "puppet:///bind/keys",
+        ensure  => directory,
+        recurse => true,
+    }
+
     file { "/var/named/chroot/master":
         owner   => "root",
         group   => "root",
-- 
1.6.2.5

PATCH: Add DNSKEY records to prepare for DNSSEC signing of zones Add dnssec-enable to named.conf

[Jeffrey Ollie]

On Sun, Oct 4, 2009 at 9:26 PM, Nick Bebout <nb(a)fedoraproject.org&gt; wrote:
>  >From 516a908a2effd2e389b18f5b3cb0e8a24d1c14f3 Mon Sep 17 00:00:00 2001
>  From: Nick Bebout <nb(a)fedoraproject.org&gt;
>  Date: Sat, 3 Oct 2009 00:27:12 -0500
>  Subject: [PATCH] Add DNSKEY records to prepare for DNSSEC signing of
>  zones
>   Add dnssec-enable to named.conf
>  [...]
>  diff --git a/modules/bind/files/named.conf
>  b/modules/bind/files/named.conf
>  index 4de7247..d00e301 100644
>  --- a/modules/bind/files/named.conf
>  +++ b/modules/bind/files/named.conf
>  @@ -28,6 +28,7 @@ options {
>          auth-nxdomain yes;
>          allow-query { everyone; };
>          allow-recursion { me; cloud; };
>  +       enable-dnssec yes;
>          query-source address * port *;
>          query-source-v6 address * port *;
>          allow-transfer { me; slaves; }; 
Typo?

-- 
Jeff Ollie