Отчет по Internet

[Julia Vilt]

Первая часть: https://transfer.sh/UHXAR/1.txt

Проверено: https://transfer.sh/uG6BA/a.txt

Телеконференции; NNTP

1.

Зарегистрировались на eternal-september.org, получили пароль на
электронную почту. Настроили
пользовательский агент ALPINE. Подключились к русскоязычной
телеконференции relcom.test
для обмена сообщениями.

Отправили три сообщения и получили два ответа на них.

отправляем отчет в конфиренцию relcom.comp.os.unix.


Система доменных имен DNS
4.


vitya@urbok:~$ dig +dnssec lists.debian.org +sigchase
+trusted-key=/usr/share/dns/root.key

Первый набор

;; RRset to chase:
lists.debian.org. 3599 IN A 82.195.75.100


;; RRSIG of the RRset to chase:
lists.debian.org. 3599 IN RRSIG A 8 3 3600 20200120025446
20191211020857 38844 debian.org.
Lb3Iux+CZGvyj1dwL/wrOja8JYGrM6aNJAidrCEzdvj3RH9Ii2ArJH3p
/fVlOLu5uXkqs62ZN+Qx3Hz3vKosBtmZgVFqEcQ8bSPT9ffdR+yGj6yg
jFOMpHDCyrgR+yTz6UNSxbnlWiE/zUdE8Lwg92cDXai6fx/nnI10xKWZ
1fp23dR7utpaCDsAUH3RbDbRKhAalKqVL8Soy8MELVMkPbsI3m2/Ntlk
ETAqE+Truk/pQ9p8t1rnUVIBLTwrROcU



Launch a query to find a RRset of type DNSKEY for zone: debian.org.


2 набор

;; DNSKEYset that signs the RRset to chase:
debian.org. 28369 IN DNSKEY 256 3 8
AwEAAbkSypbqgPqYAMQCY7e9jmKqCu01+KNI7HXndr4g01sHvPCCh2WD
jWvn5afTr0g4lNVsTS0hrnktRE3WbnzUe5zO/nRswZ9xvOeohaOjaBJy
EmM/Wj4ppaLelkeGbwJJVTpzfl2YKJwKpYM3EjDnkJ9X31K6Zo5xlu8x
kWEMgS/MkTMlxC4gUZZAdb2SplkhlxtmRDIcx5UGYQmS9QhECc4Z3s5J
pWYHvP4zSar4WMotPha0vIpRA5PmPMSbdUBVaw==
debian.org. 28369 IN DNSKEY 257 3 8
AwEAAbjbvE/dVrYi8pkkyLRHfp6ZdPVYcgn5SmJ2uRRxMXWvNnslWcPQ
ZRXJHcA5KZuT9d4Ob+OZhoGpC47ovrNJ+VWYFPuaKUJeV+49EmVCJVw1
VbAvnltTsyMliZokUM3KtQpX4GxaBfq+Z0X33YRtpn/a9NgBnfJQUfdg
7z0mH/0vZXUSsplUpTE6PUT58+s5ylgrDRfnodLITvC7mm3i/uATV+Sn
n9bgUaed6Pt6mAgSwrZywowQYYKhYH9NeTTEvb6efr9FCVTd08mkTVha
V/53B8fAgRX8BA2oEiKiTx+CdNgT+esQnFnpUAGpGNA0/e7RDr1g4RS3 PRz2QvCABiU=


;; RRSIG of the DNSKEYset that signs the RRset to chase:
debian.org. 28369 IN RRSIG DNSKEY 8 2 28800
20200119075324 20191210073142 21832 debian.org.
lHXm3nLpUDi/5Z2RTEOEY9m6o3SjiS3orXXRSGcWrDverv0degXAPTS+
XPwhuC3rdbreGOUvescibUaknCOalh9+v44/LgOkjZw7zFQ3eUMu/kxJ
mRe9p4cdnRRfmihTSoK/JqcMbL35QVDf5+4F8bFSN081pFOXfuIqSUzZ
LgnoBGVtENtpP63Jw1CTsZhjFSKkAVOZFGNB05jwv3Des5b2PXokzfsA
nX1wjbEPB2PvFHd8N3CFKIBV3mD3W+XFYVh4IEJVEpVsUMMnxnEMkZ3v
LV/Dj39dmq3hs0pR1mVTsGrBi4wHx079BQMVnYrBm2p6LkElz4YsbFaJ qpI7gA==
debian.org. 28369 IN RRSIG DNSKEY 8 2 28800
20200119075324 20191210073142 38844 debian.org.
bbtUCuf8nWfGLHgoTqt7t/rvWpcK1/LJiKI5ir5DaMqaUPyeML0Je/bo
dbkonq9LfAL+jjREEmBu31fA2g1goQ49rWKalrlcj0H/P9KdabxZHa9g
aXmHwBHTuuKW41pSzCjAEvvrtLAJoToiY0RYvVBsla679DTfUtuzP887
+Io4nFk6KliRqI3nGrtwY4M3Cu9FFTjDJK3oaPQKy5M4m+iqdsbi31ZW
X6l6P7uBIOe77T9qWvzR508Ho/bGhcLZ



Launch a query to find a RRset of type DS for zone: debian.org.


3 набор

;; DSset of the DNSKEYset
debian.org. 78758 IN DS 21832 8 2
1AC7588E67D227316EFFCC6FCDB7178B7B8502C20894986D178F9F90 5CE8EF1E


;; RRSIG of the DSset of the DNSKEYset
debian.org. 78758 IN RRSIG DS 7 2 86400
20200109152812 20191219142812 41987 org.
RZqGUs4RCFUfXaTKOB6vKQmdZA88YivFrlIlplUw9QGxPyytn3tNjZv4
WZK54U70IXrs2Vf/hYCeefuhoyxq4GuGICvPafduQIQKwUMxHTq0raTw
YlwG3KEEl2gqtczVLO4fPWOCzUDfx8Afo92t3DW/YoAjcWE8vNuFgesO 2Bk=




;; WE HAVE MATERIAL, WE NOW DO VALIDATION
;; VERIFYING A RRset for lists.debian.org. with DNSKEY:38844: success
;; OK We found DNSKEY (or more) to validate the RRset
;; Now, we are going to validate this DNSKEY by the DS
;; OK a DS valids a DNSKEY in the RRset
;; Now verify that this DNSKEY validates the DNSKEY RRset
;; VERIFYING DNSKEY RRset for debian.org. with DNSKEY:21832: success
;; OK this DNSKEY (validated by the DS) validates the RRset of the
DNSKEYs, thus the DNSKEY validates the RRset
;; Now, we want to validate the DS : recursive call


Launch a query to find a RRset of type DNSKEY for zone: org.


4 набор

;; DNSKEYset that signs the RRset to chase:
org. 323 IN DNSKEY 257 3 7
AwEAAZTjbIO5kIpxWUtyXc8avsKyHIIZ+LjC2Dv8naO+Tz6X2fqzDC1b
dq7HlZwtkaqTkMVVJ+8gE9FIreGJ4c8G1GdbjQgbP1OyYIG7OHTc4hv5
T2NlyWr6k6QFz98Q4zwFIGTFVvwBhmrMDYsOTtXakK6QwHovA1+83BsU
ACxlidpwB0hQacbD6x+I2RCDzYuTzj64Jv0/9XsX6AYV3ebcgn4hL1jI
R2eJYyXlrAoWxdzxcW//5yeL5RVWuhRxejmnSVnCuxkfS4AQ485KH2tp
dbWcCopLJZs6tw8q3jWcpTGzdh/v3xdYfNpQNcPImFlxAun3BtORPA2r 8ti6MNoJEHU=
org. 323 IN DNSKEY 256 3 7
AwEAAeK2PuNW4qgCGWwIBWetsRnKTUlo6MuHmaF1nTEjqyy1xTLwkWzX
iZn9hxTSwWeabkrZWENOIb5dnZVIDo1gkOi0YfF5F4RSkfA9ziYLI/xd
Ppo8zngaxI2dvbawJCR1FO4H5gvW5ZgrlCc3jW6vBjBke+f7GVPIn2M/ VcQ7SD8z
org. 323 IN DNSKEY 256 3 7
AwEAAckRQFGzYbS2OQXpXbXyQqxq+hQ6duZa7HRI9RWfzyKh+cQHSYl2
1tqYKEvc6+9UFqf/iWnM8w2M4kQdd/hF8FdWfp7gPLzX7KYcdzR7Vgzf
pQA184R+GR3T/S4wJggIi97xBO+dptwp40sTyg9ItA1adGVSs+hjRW3C uKvobENn
org. 323 IN DNSKEY 257 3 7
AwEAAcMnWBKLuvG/LwnPVykcmpvnntwxfshHlHRhlY0F3oz8AMcuF8gw
9McCw+BoC2YxWaiTpNPuxjSNhUlBtcJmcdkz3/r7PIn0oDf14ept1Y9p
dPh8SbIBIWx50ZPfVRlj8oQXv2Y6yKiQik7bi3MT37zMRU2kw2oy3cgr
sGAzGN4s/C6SFYon5N1Q2O4hGDbeOq538kATOy0GFELjuauV9guX/431
msYu4Rgb5lLuQ3Mx5FSIxXpI/RaAn2mhM4nEZ/5IeRPKZVGydcuLBS8G
ZlxW4qbb8MgRZ8bwMg0pqWRHmhirGmJIt3UuzvN1pSFBfX7ysI9PPhSn wXCNDXk0kk0=


;; RRSIG of the DNSKEYset that signs the RRset to chase:
org. 323 IN RRSIG DNSKEY 7 1 900
20200109152812 20191219142812 9795 org.
RqVrPvtnBaPe4gzGRqz8iaIzsksW2JtDtLN/L3beQ6usg/io3F0AF+gW
q/mneS5WTo4svQEvWbAa8cQ4wfkuEfPGLnolFz5w5APQBX/vP254w+Zb
OYa6wUwZ3yKLgLhr9FKxXUDStRxS2F28aW/O+Nx3UASZ15M9vooD0xQz
zjE81McGDpTM9AYItgMXf8eg+KpXohENJHj9967CWkAcCcOG/RjAG+C0
jfqDxvffTU45ql9iFKzlR9+039RiBgpYkza7Mog+EcD8T7n3oI3OjjOf
bJBDg1cVc/1x6waCHZqU0TroBBhssgENg9Z/uIvdFJradVSwgIIBvBbi gNv8uw==
org. 323 IN RRSIG DNSKEY 7 1 900
20200109152812 20191219142812 17883 org.
TNVCq4tThj0YpOZMANipdXUpYPQuOB3BrIdGIPTitEZZtPaelADiqJF6
bIiTqwjOT286Yfsm1gcZyeQskkr9z6DqtS4ODOYShDH+HZxMcD1SLIvY
AFWuC4t3GIM6HNZsDtN1dRXiQc/9GFh83zy1NqBHksPMjQYWZQqp5RGh
4dNVpousLoRUqiHNWmb0TL51a2Ef2Og0rvHSlHMwY/HQz/Lo3Oabj8bk
ONRiIYdpAvBj+uhNFxSxFc+tnDYLS8x3BLqR92k4qZfgxy+KITkPL/9d
6TuoCVc4PSsCiNo2QaX9JB++6PMDJDTEq3tFo365mZu3mflVNVfn0Jn4 bqvd7A==
org. 323 IN RRSIG DNSKEY 7 1 900
20200109152812 20191219142812 41987 org.
dVqADXoKQS+JUc5jCRF6qkngOWC+z08eHt0ficnStXFiVrXxN7qlnhtZ
pwF7Kc7wX4U42gQXUjP+npxDzbjzPTEEP/G9yDIOez/uYfRlfvzgXHzL
J3rVp6lFmpSL6TKzyRvB65LoqYK824kYwdO7WTrZrAwTIOKqECq9Zr4F OYI=



Launch a query to find a RRset of type DS for zone: org.


5 набор

;; DSset of the DNSKEYset
org. 86347 IN DS 9795 7 1
364DFAB3DAF254CAB477B5675B10766DDAA24982
org. 86347 IN DS 9795 7 2
3922B31B6F3A4EA92B19EB7B52120F031FD8E05FF0B03BAFCF9F891B FE7FF8E5


;; RRSIG of the DSset of the DNSKEYset
org. 86347 IN RRSIG DS 8 1 86400
20200103050000 20191221040000 22545 .
oK3TPx9cWcz1xaRWLuoCnghbxRFVo0lu4coCMvTSL+29AwzjriG2kq9K
jTtbA00ynST1dOVzFonNBlOp1U7cuw2EfFsntA749AiZnde072OMsOBZ
vI5BmtimUFTEmh/3DEVF4X2ZPjo/1iOWwAGqBip24OdhBBMGcWfeC0Dp
hpQF66d9p2vTA8PyVPxbakLsiXVSri6evPG8xKC7bgtygQ6NDr0iMgHm
UsnWn1uSuYkqmDM9rvA34z7vnOjPPIpukzDISx8MvEpThlcCZCOUnODo
UL4jim1SVexISbjGOvIFkSEDaCvj6PjlpfTJcMxqOb3bSVcyi9B1OeSP vuZkZw==




;; WE HAVE MATERIAL, WE NOW DO VALIDATION
;; VERIFYING DS RRset for debian.org. with DNSKEY:41987: success
;; OK We found DNSKEY (or more) to validate the RRset
;; Now, we are going to validate this DNSKEY by the DS
;; OK a DS valids a DNSKEY in the RRset
;; Now verify that this DNSKEY validates the DNSKEY RRset
;; VERIFYING DNSKEY RRset for org. with DNSKEY:9795: success
;; OK this DNSKEY (validated by the DS) validates the RRset of the
DNSKEYs, thus the DNSKEY validates the RRset
;; Now, we want to validate the DS : recursive call


Launch a query to find a RRset of type DNSKEY for zone: .


6 набор


;; DNSKEYset that signs the RRset to chase:
. 161249 IN DNSKEY 256 3 8
AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcH
iPOs+fy0OFVCBwoKa1s9qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkW
bBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuWns5vipFGWWpyPyoz
QXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJ
w6JNEnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL
2Yy3VIE2QGpRU6Px4ydH5sXxZ2wSMgqNNga4kjnfM1msBqk3EI48RvTT kuV0yb1eFuU=
. 161249 IN DNSKEY 257 3 8
AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3
+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kv
ArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF
0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+e
oZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfd
RUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwN R1AkUTV74bU=
. 161249 IN DNSKEY 256 3 8
AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc
59XjhuAPZ4WrT09z6YPL+vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYm
XAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUIE+ZymGtSEhIuGQdX
rEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJ
CrIpfkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb
+W3Jg+m/5xQRQJzJ/qXgDh1+aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I 5QymeSkJJzc=


;; RRSIG of the DNSKEYset that signs the RRset to chase:
. 161249 IN RRSIG DNSKEY 8 0 172800
20200110000000 20191220000000 20326 .
nMeaAcKFkNBOStaZT9lh2WrNzCFd7qqSVPk4ZHrWc7ysPrwsOUjVrxst
xbyD/5On9DavIH4M0WL1pb1pSP7CDoKEFQZ8jDrnEVGDnVVPJQvMbFTm
8OcxjJ3wejUsDu6Hp/6Xi4gF3U2AFjxomF/pLTX99/KYxNj4kRzYHu9s
8h7AkW0BB6hhYTPKUY008kZ4w5jn7EGZAm6apNgZV0sVcL3vjAXQve66
R8k9qiH2klEb9hz5DK6ykvmIihWdy+FQYd7xrLLjp3Xlkh2IFvCW8MyC
8MQBT0ihCVnCOI81eYG4BhvpQNFDhxO3d0+MyjQm4ixhrsij93xba/dd xIql7g==



Launch a query to find a RRset of type DS for zone: .
;; NO ANSWERS: no more

;; WARNING There is no DS for the zone: .



;; WE HAVE MATERIAL, WE NOW DO VALIDATION
;; VERIFYING DS RRset for org. with DNSKEY:22545: success
;; OK We found DNSKEY (or more) to validate the RRset
;; Ok, find a Trusted Key in the DNSKEY RRset: 20326
;; VERIFYING DNSKEY RRset for . with DNSKEY:20326: success

;; Ok this DNSKEY is a Trusted Key, DNSSEC validation is ok: SUCCESS

Наборы записей выше проверены успешно


vitya@urbok:~$ dig +dnssec sources.debian.org +sigchase
+trusted-key=/usr/share/dns/root.key

7 набор

;; RRset to chase:
sources.debian.org. 3584 IN CNAME sor.debian.org.


;; RRSIG of the RRset to chase:
sources.debian.org. 3584 IN RRSIG CNAME 8 3 3600
20200129110133 20191220105238 38844 debian.org.
SybiwkX3ipi3TzuA4H+lEtC8fz83qye711z8q0pIxEIXdlAOebcT6KV1
CqEiqDWqrV5M4XEFj9n2CnN6a1M/D6UWXslJZlVGf5nmNm6mlgMAXjlJ
NdJH/XKq0Ce3UgnRf4fIB7Lken7hvnixZVulyb6wQpWmFpVpNQScQRTt
DVhnM1L4Xp7hJGivODF+HoRlnkd9cKMi0/csROfKBF9wZ0vEFj6oiRW8
QyhjOmuWFTZFiET9NhvPYqyxJrL0236x



Launch a query to find a RRset of type DNSKEY for zone: debian.org.

Повтор

;; DNSKEYset that signs the RRset to chase:
debian.org. 28336 IN DNSKEY 257 3 8
AwEAAbjbvE/dVrYi8pkkyLRHfp6ZdPVYcgn5SmJ2uRRxMXWvNnslWcPQ
ZRXJHcA5KZuT9d4Ob+OZhoGpC47ovrNJ+VWYFPuaKUJeV+49EmVCJVw1
VbAvnltTsyMliZokUM3KtQpX4GxaBfq+Z0X33YRtpn/a9NgBnfJQUfdg
7z0mH/0vZXUSsplUpTE6PUT58+s5ylgrDRfnodLITvC7mm3i/uATV+Sn
n9bgUaed6Pt6mAgSwrZywowQYYKhYH9NeTTEvb6efr9FCVTd08mkTVha
V/53B8fAgRX8BA2oEiKiTx+CdNgT+esQnFnpUAGpGNA0/e7RDr1g4RS3 PRz2QvCABiU=
debian.org. 28336 IN DNSKEY 256 3 8
AwEAAbkSypbqgPqYAMQCY7e9jmKqCu01+KNI7HXndr4g01sHvPCCh2WD
jWvn5afTr0g4lNVsTS0hrnktRE3WbnzUe5zO/nRswZ9xvOeohaOjaBJy
EmM/Wj4ppaLelkeGbwJJVTpzfl2YKJwKpYM3EjDnkJ9X31K6Zo5xlu8x
kWEMgS/MkTMlxC4gUZZAdb2SplkhlxtmRDIcx5UGYQmS9QhECc4Z3s5J
pWYHvP4zSar4WMotPha0vIpRA5PmPMSbdUBVaw==


;; RRSIG of the DNSKEYset that signs the RRset to chase:
debian.org. 28336 IN RRSIG DNSKEY 8 2 28800
20200119075324 20191210073142 21832 debian.org.
lHXm3nLpUDi/5Z2RTEOEY9m6o3SjiS3orXXRSGcWrDverv0degXAPTS+
XPwhuC3rdbreGOUvescibUaknCOalh9+v44/LgOkjZw7zFQ3eUMu/kxJ
mRe9p4cdnRRfmihTSoK/JqcMbL35QVDf5+4F8bFSN081pFOXfuIqSUzZ
LgnoBGVtENtpP63Jw1CTsZhjFSKkAVOZFGNB05jwv3Des5b2PXokzfsA
nX1wjbEPB2PvFHd8N3CFKIBV3mD3W+XFYVh4IEJVEpVsUMMnxnEMkZ3v
LV/Dj39dmq3hs0pR1mVTsGrBi4wHx079BQMVnYrBm2p6LkElz4YsbFaJ qpI7gA==
debian.org. 28336 IN RRSIG DNSKEY 8 2 28800
20200119075324 20191210073142 38844 debian.org.
bbtUCuf8nWfGLHgoTqt7t/rvWpcK1/LJiKI5ir5DaMqaUPyeML0Je/bo
dbkonq9LfAL+jjREEmBu31fA2g1goQ49rWKalrlcj0H/P9KdabxZHa9g
aXmHwBHTuuKW41pSzCjAEvvrtLAJoToiY0RYvVBsla679DTfUtuzP887
+Io4nFk6KliRqI3nGrtwY4M3Cu9FFTjDJK3oaPQKy5M4m+iqdsbi31ZW
X6l6P7uBIOe77T9qWvzR508Ho/bGhcLZ



Launch a query to find a RRset of type DS for zone: debian.org.


повтор


;; DSset of the DNSKEYset
debian.org. 78725 IN DS 21832 8 2
1AC7588E67D227316EFFCC6FCDB7178B7B8502C20894986D178F9F90 5CE8EF1E


;; RRSIG of the DSset of the DNSKEYset
debian.org. 78725 IN RRSIG DS 7 2 86400
20200109152812 20191219142812 41987 org.
RZqGUs4RCFUfXaTKOB6vKQmdZA88YivFrlIlplUw9QGxPyytn3tNjZv4
WZK54U70IXrs2Vf/hYCeefuhoyxq4GuGICvPafduQIQKwUMxHTq0raTw
YlwG3KEEl2gqtczVLO4fPWOCzUDfx8Afo92t3DW/YoAjcWE8vNuFgesO 2Bk=




;; WE HAVE MATERIAL, WE NOW DO VALIDATION
;; VERIFYING CNAME RRset for sources.debian.org. with DNSKEY:38844:
success
;; OK We found DNSKEY (or more) to validate the RRset
;; Now, we are going to validate this DNSKEY by the DS
;; OK a DS valids a DNSKEY in the RRset
;; Now verify that this DNSKEY validates the DNSKEY RRset
;; VERIFYING DNSKEY RRset for debian.org. with DNSKEY:21832: success
;; OK this DNSKEY (validated by the DS) validates the RRset of the
DNSKEYs, thus the DNSKEY validates the RRset
;; Now, we want to validate the DS : recursive call


Launch a query to find a RRset of type DNSKEY for zone: org.


повтор

;; DNSKEYset that signs the RRset to chase:
org. 290 IN DNSKEY 257 3 7
AwEAAcMnWBKLuvG/LwnPVykcmpvnntwxfshHlHRhlY0F3oz8AMcuF8gw
9McCw+BoC2YxWaiTpNPuxjSNhUlBtcJmcdkz3/r7PIn0oDf14ept1Y9p
dPh8SbIBIWx50ZPfVRlj8oQXv2Y6yKiQik7bi3MT37zMRU2kw2oy3cgr
sGAzGN4s/C6SFYon5N1Q2O4hGDbeOq538kATOy0GFELjuauV9guX/431
msYu4Rgb5lLuQ3Mx5FSIxXpI/RaAn2mhM4nEZ/5IeRPKZVGydcuLBS8G
ZlxW4qbb8MgRZ8bwMg0pqWRHmhirGmJIt3UuzvN1pSFBfX7ysI9PPhSn wXCNDXk0kk0=
org. 290 IN DNSKEY 256 3 7
AwEAAeK2PuNW4qgCGWwIBWetsRnKTUlo6MuHmaF1nTEjqyy1xTLwkWzX
iZn9hxTSwWeabkrZWENOIb5dnZVIDo1gkOi0YfF5F4RSkfA9ziYLI/xd
Ppo8zngaxI2dvbawJCR1FO4H5gvW5ZgrlCc3jW6vBjBke+f7GVPIn2M/ VcQ7SD8z
org. 290 IN DNSKEY 257 3 7
AwEAAZTjbIO5kIpxWUtyXc8avsKyHIIZ+LjC2Dv8naO+Tz6X2fqzDC1b
dq7HlZwtkaqTkMVVJ+8gE9FIreGJ4c8G1GdbjQgbP1OyYIG7OHTc4hv5
T2NlyWr6k6QFz98Q4zwFIGTFVvwBhmrMDYsOTtXakK6QwHovA1+83BsU
ACxlidpwB0hQacbD6x+I2RCDzYuTzj64Jv0/9XsX6AYV3ebcgn4hL1jI
R2eJYyXlrAoWxdzxcW//5yeL5RVWuhRxejmnSVnCuxkfS4AQ485KH2tp
dbWcCopLJZs6tw8q3jWcpTGzdh/v3xdYfNpQNcPImFlxAun3BtORPA2r 8ti6MNoJEHU=
org. 290 IN DNSKEY 256 3 7
AwEAAckRQFGzYbS2OQXpXbXyQqxq+hQ6duZa7HRI9RWfzyKh+cQHSYl2
1tqYKEvc6+9UFqf/iWnM8w2M4kQdd/hF8FdWfp7gPLzX7KYcdzR7Vgzf
pQA184R+GR3T/S4wJggIi97xBO+dptwp40sTyg9ItA1adGVSs+hjRW3C uKvobENn


;; RRSIG of the DNSKEYset that signs the RRset to chase:
org. 290 IN RRSIG DNSKEY 7 1 900
20200109152812 20191219142812 9795 org.
RqVrPvtnBaPe4gzGRqz8iaIzsksW2JtDtLN/L3beQ6usg/io3F0AF+gW
q/mneS5WTo4svQEvWbAa8cQ4wfkuEfPGLnolFz5w5APQBX/vP254w+Zb
OYa6wUwZ3yKLgLhr9FKxXUDStRxS2F28aW/O+Nx3UASZ15M9vooD0xQz
zjE81McGDpTM9AYItgMXf8eg+KpXohENJHj9967CWkAcCcOG/RjAG+C0
jfqDxvffTU45ql9iFKzlR9+039RiBgpYkza7Mog+EcD8T7n3oI3OjjOf
bJBDg1cVc/1x6waCHZqU0TroBBhssgENg9Z/uIvdFJradVSwgIIBvBbi gNv8uw==
org. 290 IN RRSIG DNSKEY 7 1 900
20200109152812 20191219142812 17883 org.
TNVCq4tThj0YpOZMANipdXUpYPQuOB3BrIdGIPTitEZZtPaelADiqJF6
bIiTqwjOT286Yfsm1gcZyeQskkr9z6DqtS4ODOYShDH+HZxMcD1SLIvY
AFWuC4t3GIM6HNZsDtN1dRXiQc/9GFh83zy1NqBHksPMjQYWZQqp5RGh
4dNVpousLoRUqiHNWmb0TL51a2Ef2Og0rvHSlHMwY/HQz/Lo3Oabj8bk
ONRiIYdpAvBj+uhNFxSxFc+tnDYLS8x3BLqR92k4qZfgxy+KITkPL/9d
6TuoCVc4PSsCiNo2QaX9JB++6PMDJDTEq3tFo365mZu3mflVNVfn0Jn4 bqvd7A==
org. 290 IN RRSIG DNSKEY 7 1 900
20200109152812 20191219142812 41987 org.
dVqADXoKQS+JUc5jCRF6qkngOWC+z08eHt0ficnStXFiVrXxN7qlnhtZ
pwF7Kc7wX4U42gQXUjP+npxDzbjzPTEEP/G9yDIOez/uYfRlfvzgXHzL
J3rVp6lFmpSL6TKzyRvB65LoqYK824kYwdO7WTrZrAwTIOKqECq9Zr4F OYI=



Launch a query to find a RRset of type DS for zone: org.


повтор


;; DSset of the DNSKEYset
org. 86314 IN DS 9795 7 2
3922B31B6F3A4EA92B19EB7B52120F031FD8E05FF0B03BAFCF9F891B FE7FF8E5
org. 86314 IN DS 9795 7 1
364DFAB3DAF254CAB477B5675B10766DDAA24982


;; RRSIG of the DSset of the DNSKEYset
org. 86314 IN RRSIG DS 8 1 86400
20200103050000 20191221040000 22545 .
oK3TPx9cWcz1xaRWLuoCnghbxRFVo0lu4coCMvTSL+29AwzjriG2kq9K
jTtbA00ynST1dOVzFonNBlOp1U7cuw2EfFsntA749AiZnde072OMsOBZ
vI5BmtimUFTEmh/3DEVF4X2ZPjo/1iOWwAGqBip24OdhBBMGcWfeC0Dp
hpQF66d9p2vTA8PyVPxbakLsiXVSri6evPG8xKC7bgtygQ6NDr0iMgHm
UsnWn1uSuYkqmDM9rvA34z7vnOjPPIpukzDISx8MvEpThlcCZCOUnODo
UL4jim1SVexISbjGOvIFkSEDaCvj6PjlpfTJcMxqOb3bSVcyi9B1OeSP vuZkZw==




;; WE HAVE MATERIAL, WE NOW DO VALIDATION
;; VERIFYING DS RRset for debian.org. with DNSKEY:41987: success
;; OK We found DNSKEY (or more) to validate the RRset
;; Now, we are going to validate this DNSKEY by the DS
;; OK a DS valids a DNSKEY in the RRset
;; Now verify that this DNSKEY validates the DNSKEY RRset
;; VERIFYING DNSKEY RRset for org. with DNSKEY:9795: success
;; OK this DNSKEY (validated by the DS) validates the RRset of the
DNSKEYs, thus the DNSKEY validates the RRset
;; Now, we want to validate the DS : recursive call


Launch a query to find a RRset of type DNSKEY for zone: .

Повтор


;; DNSKEYset that signs the RRset to chase:
. 161216 IN DNSKEY 257 3 8
AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3
+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kv
ArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF
0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+e
oZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfd
RUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwN R1AkUTV74bU=
. 161216 IN DNSKEY 256 3 8
AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc
59XjhuAPZ4WrT09z6YPL+vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYm
XAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUIE+ZymGtSEhIuGQdX
rEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJ
CrIpfkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb
+W3Jg+m/5xQRQJzJ/qXgDh1+aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I 5QymeSkJJzc=
. 161216 IN DNSKEY 256 3 8
AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcH
iPOs+fy0OFVCBwoKa1s9qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkW
bBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuWns5vipFGWWpyPyoz
QXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJ
w6JNEnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL
2Yy3VIE2QGpRU6Px4ydH5sXxZ2wSMgqNNga4kjnfM1msBqk3EI48RvTT kuV0yb1eFuU=


;; RRSIG of the DNSKEYset that signs the RRset to chase:
. 161216 IN RRSIG DNSKEY 8 0 172800
20200110000000 20191220000000 20326 .
nMeaAcKFkNBOStaZT9lh2WrNzCFd7qqSVPk4ZHrWc7ysPrwsOUjVrxst
xbyD/5On9DavIH4M0WL1pb1pSP7CDoKEFQZ8jDrnEVGDnVVPJQvMbFTm
8OcxjJ3wejUsDu6Hp/6Xi4gF3U2AFjxomF/pLTX99/KYxNj4kRzYHu9s
8h7AkW0BB6hhYTPKUY008kZ4w5jn7EGZAm6apNgZV0sVcL3vjAXQve66
R8k9qiH2klEb9hz5DK6ykvmIihWdy+FQYd7xrLLjp3Xlkh2IFvCW8MyC
8MQBT0ihCVnCOI81eYG4BhvpQNFDhxO3d0+MyjQm4ixhrsij93xba/dd xIql7g==



Launch a query to find a RRset of type DS for zone: .
;; NO ANSWERS: no more

;; WARNING There is no DS for the zone: .



;; WE HAVE MATERIAL, WE NOW DO VALIDATION
;; VERIFYING DS RRset for org. with DNSKEY:22545: success
;; OK We found DNSKEY (or more) to validate the RRset
;; Ok, find a Trusted Key in the DNSKEY RRset: 20326
;; VERIFYING DNSKEY RRset for . with DNSKEY:20326: success

;; Ok this DNSKEY is a Trusted Key, DNSSEC validation is ok: SUCCESS

vitya@urbok:~$ ^C
vitya@urbok:~$

Наборы записей выше проверены успешно

[Ivan Shmakov]

>>>>> On 2019-12-21 18:48:45 +0700, Julia Vilt wrote:

> Первая часть: https://transfer.sh/UHXAR/1.txt

> Проверено: https://transfer.sh/uG6BA/a.txt

Итог: +7.7 (internet.) :vilty

> Телеконференции; NNTP

> 1.

> Зарегистрировались на eternal-september.org, получили пароль на

> электронную почту. Настроили пользовательский агент Alpine.

> Подключились к русскоязычной телеконференции relcom.test для обмена
> сообщениями.

> Отправили три сообщения и получили два ответа на них.

Не очень здорово, что ответы отправлены тем же человеком, что
и два исходных сообщения. Неплохо было бы и коротко описать
процесс настройки Alpine. Во From: не следовало указывать
существующий, но определенно не обслуживающий почту домен
(лучше: no.mail.invalid.)

, или же nomail.afraid.org

+1.2*/1 #nntp.test

+1.2*/1 #nntp.reg

> Отправляем отчет в конференцию relcom.comp.os.unix.

Опять-таки, можно было упомянуть, что это за конференция?

+1.2*/1 #report.nntp

> Система доменных имен DNS

> 4.

> $ dig +dnssec lists.debian.org +sigchase \
> +trusted-key=/usr/share/dns/root.key

> Первый набор.

> ;; RRset to chase:
> lists.debian.org. 3599 IN A 82.195.75.100

[…]

> ;; VERIFYING DNSKEY RRset for . with DNSKEY:20326: success

> ;; Ok this DNSKEY is a Trusted Key, DNSSEC validation is ok: SUCCESS

> Наборы записей выше проверены успешно

> $ dig +dnssec sources.debian.org +sigchase \
> +trusted-key=/usr/share/dns/root.key

> 7 набор

> ;; RRset to chase:
> sources.debian.org. 3584 IN CNAME sor.debian.org.

[…]

> ;; Ok this DNSKEY is a Trusted Key, DNSSEC validation is ok: SUCCESS

> $

> Наборы записей выше проверены успешно.

С учетом того, что записи для org. и . повторяют, по
необходимости, предыдущие результаты, я не склонен принимать
результат выше как работу выполненную в двойном объеме. Тем
более, что пояснений явно недостаточно.

+2.5/2 #dns.sigc.

Итог: +6.1 (internet.)

Результаты за семестр: 2.375 (домашняя), 2.633 (лабораторные;
23.00/105), 2.501 (общая.)

--
FSF associate member #7257 http://am-1.org/~ivan/