2024-04-25 18:36:15,667: kskm.common.config: INFO Loaded configuration from file ksrsigner.yaml SHA-256 962c515dd68bee5380fd50e2ec98dfe0c971f6634c3b211e9444a3b2ffe179f9 WORDS prefer Chicago drunken filament stockman Medusa tycoon enterprise merit Wyoming drumbeat tomorrow tumor narrative talon tobacco spearhead hideaway village Galveston drainage councilman blackjack Burlington Pluto designing reform pioneer Zulu tolerance jawbone Waterloo 2024-04-25 18:36:15,706: kskm.common.config: INFO Configuration validated 2024-04-25 18:36:15,708: kskm.skr.load: INFO Loaded SKR from file skr-root-2024-q2-0.xml SHA-256 d6b445c09306a9cb44d99cb77321085b53b1fd68b6d73d488f958571f631dd62 WORDS stockman politeness crusade recipe playhouse amulet revenge revival crumpled supportive python processor hockey Camelot aimless exodus dwelling photograph willow gravity Scotland stethoscope commence dictator payday Montana music hideaway village company swelter gadgetry 2024-04-25 18:36:15,948: kskm.tools.ksrsigner: INFO Previous SKR: 2024-04-25 18:36:15,949: kskm.tools.ksrsigner: INFO # Inception Expiration ZSK Tags KSK(CKA_LABEL) 2024-04-25 18:36:15,949: kskm.tools.ksrsigner: INFO 1 2024-04-01T00:00:00 2024-04-22T00:00:00 30903,5613 20326(Klajeyz)/S 2024-04-25 18:36:15,949: kskm.tools.ksrsigner: INFO 2 2024-04-11T00:00:00 2024-05-02T00:00:00 5613 20326(Klajeyz)/S 2024-04-25 18:36:15,949: kskm.tools.ksrsigner: INFO 3 2024-04-21T00:00:00 2024-05-12T00:00:00 5613 20326(Klajeyz)/S 2024-04-25 18:36:15,949: kskm.tools.ksrsigner: INFO 4 2024-05-01T00:00:00 2024-05-22T00:00:00 5613 20326(Klajeyz)/S 2024-04-25 18:36:15,949: kskm.tools.ksrsigner: INFO 5 2024-05-11T00:00:00 2024-06-01T00:00:00 5613 20326(Klajeyz)/S 2024-04-25 18:36:15,949: kskm.tools.ksrsigner: INFO 6 2024-05-21T00:00:00 2024-06-11T00:00:00 5613 20326(Klajeyz)/S 2024-04-25 18:36:15,949: kskm.tools.ksrsigner: INFO 7 2024-05-31T00:00:00 2024-06-21T00:00:00 5613 20326(Klajeyz)/S 2024-04-25 18:36:15,949: kskm.tools.ksrsigner: INFO 8 2024-06-10T00:00:00 2024-07-01T00:00:00 5613 20326(Klajeyz)/S 2024-04-25 18:36:15,949: kskm.tools.ksrsigner: INFO 9 2024-06-20T00:00:00 2024-07-11T00:00:00 20038,5613 20326(Klajeyz)/S 2024-04-25 18:36:15,950: kskm.ksr.load: INFO Loaded KSR from file ksr-root-2024-q3-0.xml SHA-256 51ffea38b7a12484129055c570e17a366408e1b5bff642463e13b098b254f705 WORDS drunken Yucatan Trojan consulting seabird outfielder bluebird Jupiter atlas millionaire edict resistor guidance tolerance keyboard congregate flytrap antenna tempest positive slingshot vocalist crowfoot detergent concert barbecue ruffled narrative sawdust equation virus almighty 2024-04-25 18:36:15,953: kskm.ksr.validate: INFO Validating KSR using request policy: 2024-04-25 18:36:15,953: kskm.ksr.validate: INFO _dataclass_placeholder: None 2024-04-25 18:36:15,953: kskm.ksr.validate: INFO acceptable_domains: ['.'] 2024-04-25 18:36:15,953: kskm.ksr.validate: INFO approved_algorithms: ['RSASHA256'] 2024-04-25 18:36:15,953: kskm.ksr.validate: INFO check_bundle_intervals: True 2024-04-25 18:36:15,953: kskm.ksr.validate: INFO check_bundle_overlap: True 2024-04-25 18:36:15,953: kskm.ksr.validate: INFO check_chain_keys: True 2024-04-25 18:36:15,953: kskm.ksr.validate: INFO check_chain_keys_in_hsm: True 2024-04-25 18:36:15,953: kskm.ksr.validate: INFO check_chain_overlap: True 2024-04-25 18:36:15,953: kskm.ksr.validate: INFO check_cycle_length: True 2024-04-25 18:36:15,953: kskm.ksr.validate: INFO check_keys_match_ksk_operator_policy: True 2024-04-25 18:36:15,953: kskm.ksr.validate: INFO check_keys_publish_safety: True 2024-04-25 18:36:15,953: kskm.ksr.validate: INFO check_keys_retire_safety: True 2024-04-25 18:36:15,953: kskm.ksr.validate: INFO dns_ttl: 172800 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO enable_unsupported_ecdsa: False 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO keys_match_zsk_policy: True 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO max_bundle_interval: 11 days, 0:00:00 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO max_cycle_inception_length: 81 days, 0:00:00 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO min_bundle_interval: 9 days, 0:00:00 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO min_cycle_inception_length: 79 days, 0:00:00 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO num_bundles: 9 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO num_different_keys_in_all_bundles: 3 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO num_keys_per_bundle: [2, 1, 1, 1, 1, 1, 1, 1, 2] 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO rsa_approved_exponents: [65537] 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO rsa_approved_key_sizes: [2048] 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO rsa_exponent_match_zsk_policy: True 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO signature_algorithms_match_zsk_policy: True 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO signature_check_expire_horizon: True 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO signature_horizon_days: 180 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO signature_validity_match_zsk_policy: True 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO validate_signatures: True 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO KSR-DOMAIN: Verified domain '.' 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO KSR-ID: Will be checked later, when SKR is available 2024-04-25 18:36:15,954: kskm.ksr.validate: INFO KSR-BUNDLE-UNIQUE: All 9 bundles have unique ids 2024-04-25 18:36:15,955: kskm.ksr.validate: INFO KSR-BUNDLE-KEYS: All 3 unique keys in the bundles accepted by policy 2024-04-25 18:36:15,956: kskm.ksr.validate: INFO KSR-BUNDLE-POP: All 9 bundles contain proof-of-possession 2024-04-25 18:36:15,956: kskm.ksr.validate: INFO KSR-BUNDLE-COUNT: Number of bundles (9) accepted 2024-04-25 18:36:15,956: kskm.ksr.validate: INFO KSR-BUNDLE-CYCLE-DURATION: The cycle length is in accordance with the KSK operator policy 2024-04-25 18:36:15,956: kskm.ksr.validate: INFO KSR-POLICY-KEYS: Validated number of keys per bundle, and for all bundles 2024-04-25 18:36:15,956: kskm.ksr.validate: INFO KSR-POLICY-ALG: All 1 ZSK operator signature algorithms accepted by policy 2024-04-25 18:36:15,956: kskm.ksr.validate: INFO KSR-POLICY-SIG-OVERLAP: All bundles overlap in accordance with the stated ZSK operator policy 2024-04-25 18:36:15,957: kskm.ksr.validate: INFO KSR-POLICY-SIG-VALIDITY: All 9 bundles have 21 days <= validity >= 21 days 2024-04-25 18:36:15,957: kskm.ksr.validate: INFO KSR-POLICY-SIG-HORIZON: All signatures expire in less than 180 days 2024-04-25 18:36:15,957: kskm.ksr.validate: INFO KSR-POLICY-BUNDLE-INTERVALS: All bundles intervals in accordance with the KSK operator policy 2024-04-25 18:36:15,957: kskm.tools.ksrsigner: INFO Request: 2024-04-25 18:36:15,957: kskm.tools.ksrsigner: INFO # Inception Expiration ZSK Tags KSK(CKA_LABEL) 2024-04-25 18:36:15,957: kskm.tools.ksrsigner: INFO 1 2024-07-01T00:00:00 2024-07-22T00:00:00 20038,5613 2024-04-25 18:36:15,957: kskm.tools.ksrsigner: INFO 2 2024-07-11T00:00:00 2024-08-01T00:00:00 20038 2024-04-25 18:36:15,957: kskm.tools.ksrsigner: INFO 3 2024-07-21T00:00:00 2024-08-11T00:00:00 20038 2024-04-25 18:36:15,957: kskm.tools.ksrsigner: INFO 4 2024-07-31T00:00:00 2024-08-21T00:00:00 20038 2024-04-25 18:36:15,957: kskm.tools.ksrsigner: INFO 5 2024-08-10T00:00:00 2024-08-31T00:00:00 20038 2024-04-25 18:36:15,957: kskm.tools.ksrsigner: INFO 6 2024-08-20T00:00:00 2024-09-10T00:00:00 20038 2024-04-25 18:36:15,957: kskm.tools.ksrsigner: INFO 7 2024-08-30T00:00:00 2024-09-20T00:00:00 20038 2024-04-25 18:36:15,957: kskm.tools.ksrsigner: INFO 8 2024-09-09T00:00:00 2024-09-30T00:00:00 20038 2024-04-25 18:36:15,957: kskm.tools.ksrsigner: INFO 9 2024-09-19T00:00:00 2024-10-10T00:00:00 20038,61050 2024-04-25 18:36:15,957: kskm.misc.hsm: INFO Initializing PKCS#11 module aep using /opt/Keyper/PKCS11Provider/pkcs11.linux_gcc_4_1_2_glibc_2_5_x86_64.so.5.02 2024-04-25 18:36:16,214: kskm.misc.hsm: INFO HSM First slot: ICANNKSK 2024-04-25 18:36:16,214: kskm.misc.hsm: INFO HSM ManufacturerID: Ultra Electronics AEP Networks 2024-04-25 18:36:16,214: kskm.misc.hsm: INFO HSM Model: Keyper 9860-2 2024-04-25 18:36:16,214: kskm.misc.hsm: INFO HSM Serial: H2110009 2024-04-25 18:36:16,214: kskm.signer.verify_chain: INFO Checking coherence between SKR(n-1) and this KSR 2024-04-25 18:36:16,215: kskm.signer.verify_chain: INFO KSR-CHAIN-KEYS: The last keys in SKR(n-1) matches the first keys in this KSR 2024-04-25 18:36:16,215: kskm.signer.verify_chain: INFO KSR-CHAIN-OVERLAP: Overlap with last bundle in SKR(n-1) 10 days is in accordance with the KSR policy 2024-04-25 18:36:16,216: kskm.signer.verify_chain: INFO KSR-CHAIN-KEYS: All 1 signatures in the last bundle of the last SKR were made with keys present in the HSM(s) 2024-04-25 18:39:32,026: kskm.signer.policy: INFO KSR-POLICY-SAFETY: PublishSafety validated 2024-04-25 18:39:32,026: kskm.signer.policy: INFO KSR-POLICY-SAFETY: RetireSafety validated 2024-04-25 18:39:32,026: kskm.tools.ksrsigner: INFO Generated SKR: 2024-04-25 18:39:32,026: kskm.tools.ksrsigner: INFO # Inception Expiration ZSK Tags KSK(CKA_LABEL) 2024-04-25 18:39:32,027: kskm.tools.ksrsigner: INFO 1 2024-07-01T00:00:00 2024-07-22T00:00:00 20038,5613 20326(Klajeyz)/S 2024-04-25 18:39:32,027: kskm.tools.ksrsigner: INFO 2 2024-07-11T00:00:00 2024-08-01T00:00:00 20038 20326(Klajeyz)/S 2024-04-25 18:39:32,027: kskm.tools.ksrsigner: INFO 3 2024-07-21T00:00:00 2024-08-11T00:00:00 20038 20326(Klajeyz)/S 2024-04-25 18:39:32,027: kskm.tools.ksrsigner: INFO 4 2024-07-31T00:00:00 2024-08-21T00:00:00 20038 20326(Klajeyz)/S 2024-04-25 18:39:32,027: kskm.tools.ksrsigner: INFO 5 2024-08-10T00:00:00 2024-08-31T00:00:00 20038 20326(Klajeyz)/S 2024-04-25 18:39:32,027: kskm.tools.ksrsigner: INFO 6 2024-08-20T00:00:00 2024-09-10T00:00:00 20038 20326(Klajeyz)/S 2024-04-25 18:39:32,027: kskm.tools.ksrsigner: INFO 7 2024-08-30T00:00:00 2024-09-20T00:00:00 20038 20326(Klajeyz)/S 2024-04-25 18:39:32,027: kskm.tools.ksrsigner: INFO 8 2024-09-09T00:00:00 2024-09-30T00:00:00 20038 20326(Klajeyz)/S 2024-04-25 18:39:32,027: kskm.tools.ksrsigner: INFO 9 2024-09-19T00:00:00 2024-10-10T00:00:00 20038,61050 20326(Klajeyz)/S 2024-04-25 18:39:32,155: kskm.signer: INFO Wrote SKR to file skr-root-2024-q3-0.xml SHA-256 bb9a5163436ff368220e4c7e7b0f69725b9f6484a6dd36780a1f5e482a992279 WORDS shamrock newsletter drunken Galveston crucial hemisphere upset gravity blockade Atlantic drainage insurgent kickoff atmosphere gazelle holiness erase opulent flytrap Jupiter rematch tambourine Christmas indigo allow businessman eyeglass dictator brickyard nebula blockade inertia