2024-02-14 23:28:18,458: kskm.common.config: INFO Loaded configuration from file ksrsigner.yaml SHA-256 cc0c5839ca1ae7ff6ca840e10838b4dca6d19d5679b4aae07aa9d8ec9677dfa7 WORDS spigot article endorse corporate spellbind Bradbury transit Yucatan glucose paramount crackdown tolerance aimless consulting scenic sympathy rematch scavenger quadrant escapade jawbone politeness reward tobacco keyboard passenger stormy unicorn prefer inception talon paragraph 2024-02-14 23:28:18,498: kskm.common.config: INFO Configuration validated 2024-02-14 23:28:18,499: kskm.skr.load: INFO Loaded SKR from file skr-root-2024-q1-0.xml SHA-256 0f2922c76d8ac758dedff603d0c2e44e13369c1938d56ef7509425abf8f0b48f WORDS artist certify blockade retraction goggles maverick soybean everyday tactics therapist village aggregate stagnate repellent tonic distortion Aztec congregate python bottomless classic specialist goldfish voyager drumbeat molecule bombast Pegasus Vulcan upcoming scenic midsummer 2024-02-14 23:28:18,537: kskm.tools.ksrsigner: INFO Previous SKR: 2024-02-14 23:28:18,537: kskm.tools.ksrsigner: INFO # Inception Expiration ZSK Tags KSK(CKA_LABEL) 2024-02-14 23:28:18,537: kskm.tools.ksrsigner: INFO 1 2024-01-01T00:00:00 2024-01-22T00:00:00 30903,46780 20326(Klajeyz)/S 2024-02-14 23:28:18,537: kskm.tools.ksrsigner: INFO 2 2024-01-11T00:00:00 2024-02-01T00:00:00 30903 20326(Klajeyz)/S 2024-02-14 23:28:18,537: kskm.tools.ksrsigner: INFO 3 2024-01-21T00:00:00 2024-02-11T00:00:00 30903 20326(Klajeyz)/S 2024-02-14 23:28:18,537: kskm.tools.ksrsigner: INFO 4 2024-01-31T00:00:00 2024-02-21T00:00:00 30903 20326(Klajeyz)/S 2024-02-14 23:28:18,537: kskm.tools.ksrsigner: INFO 5 2024-02-10T00:00:00 2024-03-02T00:00:00 30903 20326(Klajeyz)/S 2024-02-14 23:28:18,537: kskm.tools.ksrsigner: INFO 6 2024-02-20T00:00:00 2024-03-12T00:00:00 30903 20326(Klajeyz)/S 2024-02-14 23:28:18,538: kskm.tools.ksrsigner: INFO 7 2024-03-01T00:00:00 2024-03-22T00:00:00 30903 20326(Klajeyz)/S 2024-02-14 23:28:18,538: kskm.tools.ksrsigner: INFO 8 2024-03-11T00:00:00 2024-04-01T00:00:00 30903 20326(Klajeyz)/S 2024-02-14 23:28:18,538: kskm.tools.ksrsigner: INFO 9 2024-03-21T00:00:00 2024-04-11T00:00:00 30903,5613 20326(Klajeyz)/S 2024-02-14 23:28:18,538: kskm.ksr.load: INFO Loaded KSR from file ksr-root-2024-q2-0.xml SHA-256 1d6a2d78bf06b8576170588ac739535a08c66b03bff6aa8bc7b2d75f8260a206 WORDS Belfast hamburger button indigo slingshot amulet select Eskimo fallout hesitate endorse maverick soybean corporate dwelling existence aimless responsive glitter aggregate slingshot vocalist reward Medusa soybean pioneer stopwatch forever miser fortitude rebirth amulet 2024-02-14 23:28:18,541: kskm.ksr.validate: INFO Validating KSR using request policy: 2024-02-14 23:28:18,541: kskm.ksr.validate: INFO _dataclass_placeholder: None 2024-02-14 23:28:18,541: kskm.ksr.validate: INFO acceptable_domains: ['.'] 2024-02-14 23:28:18,541: kskm.ksr.validate: INFO approved_algorithms: ['RSASHA256'] 2024-02-14 23:28:18,541: kskm.ksr.validate: INFO check_bundle_intervals: True 2024-02-14 23:28:18,541: kskm.ksr.validate: INFO check_bundle_overlap: True 2024-02-14 23:28:18,541: kskm.ksr.validate: INFO check_chain_keys: True 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO check_chain_keys_in_hsm: True 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO check_chain_overlap: True 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO check_cycle_length: True 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO check_keys_match_ksk_operator_policy: True 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO check_keys_publish_safety: True 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO check_keys_retire_safety: True 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO dns_ttl: 172800 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO enable_unsupported_ecdsa: False 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO keys_match_zsk_policy: True 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO max_bundle_interval: 11 days, 0:00:00 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO max_cycle_inception_length: 81 days, 0:00:00 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO min_bundle_interval: 9 days, 0:00:00 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO min_cycle_inception_length: 79 days, 0:00:00 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO num_bundles: 9 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO num_different_keys_in_all_bundles: 3 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO num_keys_per_bundle: [2, 1, 1, 1, 1, 1, 1, 1, 2] 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO rsa_approved_exponents: [65537] 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO rsa_approved_key_sizes: [2048] 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO rsa_exponent_match_zsk_policy: True 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO signature_algorithms_match_zsk_policy: True 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO signature_check_expire_horizon: True 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO signature_horizon_days: 180 2024-02-14 23:28:18,542: kskm.ksr.validate: INFO signature_validity_match_zsk_policy: True 2024-02-14 23:28:18,543: kskm.ksr.validate: INFO validate_signatures: True 2024-02-14 23:28:18,543: kskm.ksr.validate: INFO KSR-DOMAIN: Verified domain '.' 2024-02-14 23:28:18,543: kskm.ksr.validate: INFO KSR-ID: Will be checked later, when SKR is available 2024-02-14 23:28:18,543: kskm.ksr.validate: INFO KSR-BUNDLE-UNIQUE: All 9 bundles have unique ids 2024-02-14 23:28:18,543: kskm.ksr.validate: INFO KSR-BUNDLE-KEYS: All 3 unique keys in the bundles accepted by policy 2024-02-14 23:28:18,544: kskm.ksr.validate: INFO KSR-BUNDLE-POP: All 9 bundles contain proof-of-possession 2024-02-14 23:28:18,544: kskm.ksr.validate: INFO KSR-BUNDLE-COUNT: Number of bundles (9) accepted 2024-02-14 23:28:18,544: kskm.ksr.validate: INFO KSR-BUNDLE-CYCLE-DURATION: The cycle length is in accordance with the KSK operator policy 2024-02-14 23:28:18,544: kskm.ksr.validate: INFO KSR-POLICY-KEYS: Validated number of keys per bundle, and for all bundles 2024-02-14 23:28:18,544: kskm.ksr.validate: INFO KSR-POLICY-ALG: All 1 ZSK operator signature algorithms accepted by policy 2024-02-14 23:28:18,545: kskm.ksr.validate: INFO KSR-POLICY-SIG-OVERLAP: All bundles overlap in accordance with the stated ZSK operator policy 2024-02-14 23:28:18,545: kskm.ksr.validate: INFO KSR-POLICY-SIG-VALIDITY: All 9 bundles have 21 days <= validity >= 21 days 2024-02-14 23:28:18,545: kskm.ksr.validate: INFO KSR-POLICY-SIG-HORIZON: All signatures expire in less than 180 days 2024-02-14 23:28:18,545: kskm.ksr.validate: INFO KSR-POLICY-BUNDLE-INTERVALS: All bundles intervals in accordance with the KSK operator policy 2024-02-14 23:28:18,545: kskm.tools.ksrsigner: INFO Request: 2024-02-14 23:28:18,545: kskm.tools.ksrsigner: INFO # Inception Expiration ZSK Tags KSK(CKA_LABEL) 2024-02-14 23:28:18,545: kskm.tools.ksrsigner: INFO 1 2024-04-01T00:00:00 2024-04-22T00:00:00 30903,5613 2024-02-14 23:28:18,545: kskm.tools.ksrsigner: INFO 2 2024-04-11T00:00:00 2024-05-02T00:00:00 5613 2024-02-14 23:28:18,545: kskm.tools.ksrsigner: INFO 3 2024-04-21T00:00:00 2024-05-12T00:00:00 5613 2024-02-14 23:28:18,545: kskm.tools.ksrsigner: INFO 4 2024-05-01T00:00:00 2024-05-22T00:00:00 5613 2024-02-14 23:28:18,545: kskm.tools.ksrsigner: INFO 5 2024-05-11T00:00:00 2024-06-01T00:00:00 5613 2024-02-14 23:28:18,545: kskm.tools.ksrsigner: INFO 6 2024-05-21T00:00:00 2024-06-11T00:00:00 5613 2024-02-14 23:28:18,545: kskm.tools.ksrsigner: INFO 7 2024-05-31T00:00:00 2024-06-21T00:00:00 5613 2024-02-14 23:28:18,545: kskm.tools.ksrsigner: INFO 8 2024-06-10T00:00:00 2024-07-01T00:00:00 5613 2024-02-14 23:28:18,546: kskm.tools.ksrsigner: INFO 9 2024-06-20T00:00:00 2024-07-11T00:00:00 20038,5613 2024-02-14 23:28:18,546: kskm.misc.hsm: INFO Initializing PKCS#11 module aep using /opt/Keyper/PKCS11Provider/pkcs11.linux_gcc_4_1_2_glibc_2_5_x86_64.so.5.02 2024-02-14 23:28:18,718: kskm.misc.hsm: INFO HSM First slot: ICANNKSK 2024-02-14 23:28:18,719: kskm.misc.hsm: INFO HSM ManufacturerID: Ultra Electronics AEP Networks 2024-02-14 23:28:18,719: kskm.misc.hsm: INFO HSM Model: Keyper 9860-2 2024-02-14 23:28:18,719: kskm.misc.hsm: INFO HSM Serial: H2110006 2024-02-14 23:28:18,719: kskm.signer.verify_chain: INFO Checking coherence between SKR(n-1) and this KSR 2024-02-14 23:28:18,719: kskm.signer.verify_chain: INFO KSR-CHAIN-KEYS: The last keys in SKR(n-1) matches the first keys in this KSR 2024-02-14 23:28:18,720: kskm.signer.verify_chain: INFO KSR-CHAIN-OVERLAP: Overlap with last bundle in SKR(n-1) 10 days is in accordance with the KSR policy 2024-02-14 23:28:18,720: kskm.signer.verify_chain: INFO KSR-CHAIN-KEYS: All 1 signatures in the last bundle of the last SKR were made with keys present in the HSM(s) 2024-02-14 23:30:33,938: kskm.signer.policy: INFO KSR-POLICY-SAFETY: PublishSafety validated 2024-02-14 23:30:33,938: kskm.signer.policy: INFO KSR-POLICY-SAFETY: RetireSafety validated 2024-02-14 23:30:33,939: kskm.tools.ksrsigner: INFO Generated SKR: 2024-02-14 23:30:33,939: kskm.tools.ksrsigner: INFO # Inception Expiration ZSK Tags KSK(CKA_LABEL) 2024-02-14 23:30:33,939: kskm.tools.ksrsigner: INFO 1 2024-04-01T00:00:00 2024-04-22T00:00:00 30903,5613 20326(Klajeyz)/S 2024-02-14 23:30:33,939: kskm.tools.ksrsigner: INFO 2 2024-04-11T00:00:00 2024-05-02T00:00:00 5613 20326(Klajeyz)/S 2024-02-14 23:30:33,939: kskm.tools.ksrsigner: INFO 3 2024-04-21T00:00:00 2024-05-12T00:00:00 5613 20326(Klajeyz)/S 2024-02-14 23:30:33,939: kskm.tools.ksrsigner: INFO 4 2024-05-01T00:00:00 2024-05-22T00:00:00 5613 20326(Klajeyz)/S 2024-02-14 23:30:33,939: kskm.tools.ksrsigner: INFO 5 2024-05-11T00:00:00 2024-06-01T00:00:00 5613 20326(Klajeyz)/S 2024-02-14 23:30:33,940: kskm.tools.ksrsigner: INFO 6 2024-05-21T00:00:00 2024-06-11T00:00:00 5613 20326(Klajeyz)/S 2024-02-14 23:30:33,940: kskm.tools.ksrsigner: INFO 7 2024-05-31T00:00:00 2024-06-21T00:00:00 5613 20326(Klajeyz)/S 2024-02-14 23:30:33,940: kskm.tools.ksrsigner: INFO 8 2024-06-10T00:00:00 2024-07-01T00:00:00 5613 20326(Klajeyz)/S 2024-02-14 23:30:33,940: kskm.tools.ksrsigner: INFO 9 2024-06-20T00:00:00 2024-07-11T00:00:00 20038,5613 20326(Klajeyz)/S 2024-02-14 23:30:34,048: kskm.signer: INFO Wrote SKR to file HSM8W-skr-root-2024-q2-0.xml SHA-256 d6b445c09306a9cb44d99cb77321085b53b1fd68b6d73d488f958571f631dd62 WORDS stockman politeness crusade recipe playhouse amulet revenge revival crumpled supportive python processor hockey Camelot aimless exodus dwelling photograph willow gravity Scotland stethoscope commence dictator payday Montana music hideaway village company swelter gadgetry