2024-07-17 18:47:58,798: kskm.common.config: INFO Loaded configuration from file ksrsigner.yaml SHA-256 d85dd4fb10025fd2e35ac56aa69571b5fdc11f7cb148b6d7dca443d42c960642 WORDS stormy filament steamship Wichita assume aftermath eyetooth sensation tissue existence solo hamburger rematch Montana hamlet positive willow recover billiard informant sailboat dictator Scotland stethoscope sweatband Pandora crucial souvenir Burbank monument afflict December 2024-07-17 18:47:58,841: kskm.common.config: INFO Configuration validated 2024-07-17 18:47:58,843: kskm.skr.load: INFO Loaded SKR from file skr-root-2024-q3-0.xml SHA-256 bb9a5163436ff368220e4c7e7b0f69725b9f6484a6dd36780a1f5e482a992279 WORDS shamrock newsletter drunken Galveston crucial hemisphere upset gravity blockade Atlantic drainage insurgent kickoff atmosphere gazelle holiness erase opulent flytrap Jupiter rematch tambourine Christmas indigo allow businessman eyeglass dictator brickyard nebula blockade inertia 2024-07-17 18:47:59,104: kskm.tools.ksrsigner: INFO Previous SKR: 2024-07-17 18:47:59,104: kskm.tools.ksrsigner: INFO # Inception Expiration ZSK Tags KSK(CKA_LABEL) 2024-07-17 18:47:59,104: kskm.tools.ksrsigner: INFO 1 2024-07-01T00:00:00 2024-07-22T00:00:00 5613,20038 20326(Klajeyz)/S 2024-07-17 18:47:59,104: kskm.tools.ksrsigner: INFO 2 2024-07-11T00:00:00 2024-08-01T00:00:00 20038 20326(Klajeyz)/S 2024-07-17 18:47:59,104: kskm.tools.ksrsigner: INFO 3 2024-07-21T00:00:00 2024-08-11T00:00:00 20038 20326(Klajeyz)/S 2024-07-17 18:47:59,104: kskm.tools.ksrsigner: INFO 4 2024-07-31T00:00:00 2024-08-21T00:00:00 20038 20326(Klajeyz)/S 2024-07-17 18:47:59,104: kskm.tools.ksrsigner: INFO 5 2024-08-10T00:00:00 2024-08-31T00:00:00 20038 20326(Klajeyz)/S 2024-07-17 18:47:59,104: kskm.tools.ksrsigner: INFO 6 2024-08-20T00:00:00 2024-09-10T00:00:00 20038 20326(Klajeyz)/S 2024-07-17 18:47:59,104: kskm.tools.ksrsigner: INFO 7 2024-08-30T00:00:00 2024-09-20T00:00:00 20038 20326(Klajeyz)/S 2024-07-17 18:47:59,104: kskm.tools.ksrsigner: INFO 8 2024-09-09T00:00:00 2024-09-30T00:00:00 20038 20326(Klajeyz)/S 2024-07-17 18:47:59,105: kskm.tools.ksrsigner: INFO 9 2024-09-19T00:00:00 2024-10-10T00:00:00 61050,20038 20326(Klajeyz)/S 2024-07-17 18:47:59,105: kskm.ksr.load: INFO Loaded KSR from file ksr-root-2024-q4-0.xml SHA-256 70ff91960130556e9008514731a145c2442afca48a1a1e48322b7c4940696e92 WORDS guidance Yucatan pheasant monument absurd commando edict headwaters peachy antenna drunken determine chatter outfielder crusade repellent crumpled chambermaid wayside Pandora Oakland Bradbury berserk dictator checkup Cherokee kiwi dinosaur crackdown guitarist goldfish misnomer 2024-07-17 18:47:59,108: kskm.ksr.validate: INFO Validating KSR using request policy: 2024-07-17 18:47:59,108: kskm.ksr.validate: INFO _dataclass_placeholder: None 2024-07-17 18:47:59,108: kskm.ksr.validate: INFO acceptable_domains: ['.'] 2024-07-17 18:47:59,108: kskm.ksr.validate: INFO approved_algorithms: ['RSASHA256'] 2024-07-17 18:47:59,108: kskm.ksr.validate: INFO check_bundle_intervals: True 2024-07-17 18:47:59,108: kskm.ksr.validate: INFO check_bundle_overlap: True 2024-07-17 18:47:59,108: kskm.ksr.validate: INFO check_chain_keys: True 2024-07-17 18:47:59,108: kskm.ksr.validate: INFO check_chain_keys_in_hsm: True 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO check_chain_overlap: True 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO check_cycle_length: True 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO check_keys_match_ksk_operator_policy: True 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO check_keys_publish_safety: True 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO check_keys_retire_safety: True 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO dns_ttl: 172800 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO enable_unsupported_ecdsa: False 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO keys_match_zsk_policy: True 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO max_bundle_interval: 11 days, 0:00:00 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO max_cycle_inception_length: 81 days, 0:00:00 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO min_bundle_interval: 9 days, 0:00:00 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO min_cycle_inception_length: 79 days, 0:00:00 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO num_bundles: 9 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO num_different_keys_in_all_bundles: 3 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO num_keys_per_bundle: [2, 1, 1, 1, 1, 1, 1, 1, 2] 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO rsa_approved_exponents: [65537] 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO rsa_approved_key_sizes: [2048] 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO rsa_exponent_match_zsk_policy: True 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO signature_algorithms_match_zsk_policy: True 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO signature_check_expire_horizon: True 2024-07-17 18:47:59,109: kskm.ksr.validate: INFO signature_horizon_days: 180 2024-07-17 18:47:59,110: kskm.ksr.validate: INFO signature_validity_match_zsk_policy: True 2024-07-17 18:47:59,110: kskm.ksr.validate: INFO validate_signatures: True 2024-07-17 18:47:59,110: kskm.ksr.validate: INFO KSR-DOMAIN: Verified domain '.' 2024-07-17 18:47:59,110: kskm.ksr.validate: INFO KSR-ID: Will be checked later, when SKR is available 2024-07-17 18:47:59,110: kskm.ksr.validate: INFO KSR-BUNDLE-UNIQUE: All 9 bundles have unique ids 2024-07-17 18:47:59,110: kskm.ksr.validate: INFO KSR-BUNDLE-KEYS: All 3 unique keys in the bundles accepted by policy 2024-07-17 18:47:59,111: kskm.ksr.validate: INFO KSR-BUNDLE-POP: All 9 bundles contain proof-of-possession 2024-07-17 18:47:59,111: kskm.ksr.validate: INFO KSR-BUNDLE-COUNT: Number of bundles (9) accepted 2024-07-17 18:47:59,111: kskm.ksr.validate: INFO KSR-BUNDLE-CYCLE-DURATION: The cycle length is in accordance with the KSK operator policy 2024-07-17 18:47:59,111: kskm.ksr.validate: INFO KSR-POLICY-KEYS: Validated number of keys per bundle, and for all bundles 2024-07-17 18:47:59,112: kskm.ksr.validate: INFO KSR-POLICY-ALG: All 1 ZSK operator signature algorithms accepted by policy 2024-07-17 18:47:59,112: kskm.ksr.validate: INFO KSR-POLICY-SIG-OVERLAP: All bundles overlap in accordance with the stated ZSK operator policy 2024-07-17 18:47:59,112: kskm.ksr.validate: INFO KSR-POLICY-SIG-VALIDITY: All 9 bundles have 21 days <= validity >= 21 days 2024-07-17 18:47:59,112: kskm.ksr.validate: INFO KSR-POLICY-SIG-HORIZON: All signatures expire in less than 180 days 2024-07-17 18:47:59,112: kskm.ksr.validate: INFO KSR-POLICY-BUNDLE-INTERVALS: All bundles intervals in accordance with the KSK operator policy 2024-07-17 18:47:59,112: kskm.tools.ksrsigner: INFO Request: 2024-07-17 18:47:59,112: kskm.tools.ksrsigner: INFO # Inception Expiration ZSK Tags KSK(CKA_LABEL) 2024-07-17 18:47:59,112: kskm.tools.ksrsigner: INFO 1 2024-10-01T00:00:00 2024-10-22T00:00:00 61050,20038 2024-07-17 18:47:59,112: kskm.tools.ksrsigner: INFO 2 2024-10-11T00:00:00 2024-11-01T00:00:00 61050 2024-07-17 18:47:59,112: kskm.tools.ksrsigner: INFO 3 2024-10-21T00:00:00 2024-11-11T00:00:00 61050 2024-07-17 18:47:59,112: kskm.tools.ksrsigner: INFO 4 2024-10-31T00:00:00 2024-11-21T00:00:00 61050 2024-07-17 18:47:59,112: kskm.tools.ksrsigner: INFO 5 2024-11-10T00:00:00 2024-12-01T00:00:00 61050 2024-07-17 18:47:59,113: kskm.tools.ksrsigner: INFO 6 2024-11-20T00:00:00 2024-12-11T00:00:00 61050 2024-07-17 18:47:59,113: kskm.tools.ksrsigner: INFO 7 2024-11-30T00:00:00 2024-12-21T00:00:00 61050 2024-07-17 18:47:59,113: kskm.tools.ksrsigner: INFO 8 2024-12-10T00:00:00 2024-12-31T00:00:00 61050 2024-07-17 18:47:59,113: kskm.tools.ksrsigner: INFO 9 2024-12-20T00:00:00 2025-01-10T00:00:00 61050,26470 2024-07-17 18:47:59,113: kskm.misc.hsm: INFO Initializing PKCS#11 module aep using /opt/Keyper/PKCS11Provider/pkcs11.linux_gcc_4_1_2_glibc_2_5_x86_64.so.5.02 2024-07-17 18:47:59,370: kskm.misc.hsm: INFO HSM First slot: ICANNKSK 2024-07-17 18:47:59,370: kskm.misc.hsm: INFO HSM ManufacturerID: Ultra Electronics AEP Networks 2024-07-17 18:47:59,370: kskm.misc.hsm: INFO HSM Model: Keyper 9860-2 2024-07-17 18:47:59,370: kskm.misc.hsm: INFO HSM Serial: H2110017 2024-07-17 18:47:59,371: kskm.misc.hsm: INFO Initializing PKCS#11 module luna using /usr/safenet/lunaclient/lib/libCryptoki2_64.so 2024-07-17 18:48:00,092: kskm.misc.hsm: WARNING No slots found in HSM 2024-07-17 18:48:00,092: kskm.signer.verify_chain: INFO Checking coherence between SKR(n-1) and this KSR 2024-07-17 18:48:00,092: kskm.signer.verify_chain: INFO KSR-CHAIN-KEYS: The last keys in SKR(n-1) matches the first keys in this KSR 2024-07-17 18:48:00,092: kskm.signer.verify_chain: INFO KSR-CHAIN-OVERLAP: Overlap with last bundle in SKR(n-1) 9 days is in accordance with the KSR policy 2024-07-17 18:48:00,093: kskm.signer.verify_chain: INFO KSR-CHAIN-KEYS: All 1 signatures in the last bundle of the last SKR were made with keys present in the HSM(s) 2024-07-17 18:51:16,465: kskm.signer.policy: INFO KSR-POLICY-SAFETY: PublishSafety validated 2024-07-17 18:51:16,466: kskm.signer.policy: INFO KSR-POLICY-SAFETY: RetireSafety validated 2024-07-17 18:51:16,466: kskm.tools.ksrsigner: INFO Generated SKR: 2024-07-17 18:51:16,466: kskm.tools.ksrsigner: INFO # Inception Expiration ZSK Tags KSK(CKA_LABEL) 2024-07-17 18:51:16,466: kskm.tools.ksrsigner: INFO 1 2024-10-01T00:00:00 2024-10-22T00:00:00 61050,20038 20326(Klajeyz)/S 2024-07-17 18:51:16,466: kskm.tools.ksrsigner: INFO 2 2024-10-11T00:00:00 2024-11-01T00:00:00 61050 20326(Klajeyz)/S 2024-07-17 18:51:16,467: kskm.tools.ksrsigner: INFO 3 2024-10-21T00:00:00 2024-11-11T00:00:00 61050 20326(Klajeyz)/S 2024-07-17 18:51:16,467: kskm.tools.ksrsigner: INFO 4 2024-10-31T00:00:00 2024-11-21T00:00:00 61050 20326(Klajeyz)/S 2024-07-17 18:51:16,467: kskm.tools.ksrsigner: INFO 5 2024-11-10T00:00:00 2024-12-01T00:00:00 61050 20326(Klajeyz)/S 2024-07-17 18:51:16,467: kskm.tools.ksrsigner: INFO 6 2024-11-20T00:00:00 2024-12-11T00:00:00 61050 20326(Klajeyz)/S 2024-07-17 18:51:16,467: kskm.tools.ksrsigner: INFO 7 2024-11-30T00:00:00 2024-12-21T00:00:00 61050 20326(Klajeyz)/S 2024-07-17 18:51:16,467: kskm.tools.ksrsigner: INFO 8 2024-12-10T00:00:00 2024-12-31T00:00:00 61050 20326(Klajeyz)/S 2024-07-17 18:51:16,467: kskm.tools.ksrsigner: INFO 9 2024-12-20T00:00:00 2025-01-10T00:00:00 61050,26470 20326(Klajeyz)/S 2024-07-17 18:51:16,578: kskm.signer: INFO Wrote SKR to file skr-root-2024-q4-0.xml SHA-256 a07a409e366d91d6f22664762c5ae320a6b66fd1b8b6d9db47600c45e9918d4f WORDS ragtime infancy crackdown onlooker Christmas hazardous pheasant speculate uproot caretaker flytrap impetus Burbank existence tissue butterfat rematch potato gremlin scavenger select potato sugar suspicious dashboard fortitude ammo detector treadmill miracle optic document