usfj.mil DNSSEC Outage: 2015-12-23

Updated: December 23, 2015

Overview

This page gives some details on the usfj.mil DNSSEC outage on December 23, 2015. It was the 24th DNSSEC outage of the year for usfj.mil.

Timeline / DNSViz

• 2015-12-23 05:13:37 UTC: first personally observed usfj.mil DNSSEC failure
• 2015-12-23 06:46:12 UTC: expired RRSIGs
• 2015-12-23 07:21:33 UTC: last personally observed usfj.mil DNSSEC failure
• 2015-12-23 14:45:37 UTC: errors and warnings but DNSSEC outage over

Logfile examples

• [1450847617] unbound[27389:0] info: validation failure <usfj.mil. A IN>: signature expired from 215.1.46.29 for key usfj.mil. while building chain of trust
• [1450855293] unbound[27389:0] info: validation failure <usfj.mil. A IN>: key for validation usfj.mil. is marked as invalid because of a previous validation failure <usfj.mil. A IN>: signature expired from 199.211.150.66 for key usfj.mil. while building chain of trust