[ ta ] Root trust anchors bootstrapped over https with pinned certificate.
You may want to verify them manually, as described on:
https://data.iana.org/root-anchors/old/draft-icann-dnssec-trust-anchor.html#sigs
- [ ta ] next refresh for . in 23.912361111111 hours
+ [ ta ] Current root trust anchors are:
+ . 0 IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5
+ . 0 IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D
+ [ ta ] next refresh for . in 24 hours
Alternatively, you can set it in configuration file with ``trust_anchors.file = 'root.keys'``. If the file doesn't exist, it will be automatically populated with root keys validated using root anchors retrieved over HTTPS.
end
local msg = '[ ta ] Root trust anchors bootstrapped over https with pinned certificate.\n'
.. ' You may want to verify them manually, as described on:\n'
- .. ' https://data.iana.org/root-anchors/old/draft-icann-dnssec-trust-anchor.html#sigs'
+ .. ' https://data.iana.org/root-anchors/old/draft-icann-dnssec-trust-anchor.html#sigs\n'
+ .. '[ ta ] Current root trust anchors are:'
+ .. rr
return rr, msg
end