2024-10-17 19:15:36,371: kskm.common.config: INFO Loaded configuration from file ksrsigner.yaml SHA-256 9d5fe2ec142030c45de8c25c8f400a7ee855e681253098431040ca906bde088c WORDS quadrant forever tiger unicorn baboon butterfat chairlift reproduce exceed typewriter snapshot fascinate payday Dakota allow insurgent trauma equipment tracker inventive bombast commando printer decimal assume Dakota spellbind millionaire glitter telephone aimless megaton
2024-10-17 19:15:36,402: kskm.skr.load: INFO Loaded SKR from file skr-root-2024-q4-0.xml SHA-256 a07a409e366d91d6f22664762c5ae320a6b66fd1b8b6d9db47600c45e9918d4f WORDS ragtime infancy crackdown onlooker Christmas hazardous pheasant speculate uproot caretaker flytrap impetus Burbank existence tissue butterfat rematch potato gremlin scavenger select potato sugar suspicious dashboard fortitude ammo detector treadmill miracle optic document
2024-10-17 19:15:36,409: kskm.tools.ksrsigner: INFO Previous SKR:
2024-10-17 19:15:36,409: kskm.tools.ksrsigner: INFO #  Inception           Expiration           ZSK Tags      KSK(CKA_LABEL)
2024-10-17 19:15:36,409: kskm.tools.ksrsigner: INFO 1  2024-10-01T00:00:00 2024-10-22T00:00:00  20038,61050   20326(Klajeyz)/S
2024-10-17 19:15:36,410: kskm.tools.ksrsigner: INFO 2  2024-10-11T00:00:00 2024-11-01T00:00:00  61050         20326(Klajeyz)/S
2024-10-17 19:15:36,410: kskm.tools.ksrsigner: INFO 3  2024-10-21T00:00:00 2024-11-11T00:00:00  61050         20326(Klajeyz)/S
2024-10-17 19:15:36,410: kskm.tools.ksrsigner: INFO 4  2024-10-31T00:00:00 2024-11-21T00:00:00  61050         20326(Klajeyz)/S
2024-10-17 19:15:36,410: kskm.tools.ksrsigner: INFO 5  2024-11-10T00:00:00 2024-12-01T00:00:00  61050         20326(Klajeyz)/S
2024-10-17 19:15:36,410: kskm.tools.ksrsigner: INFO 6  2024-11-20T00:00:00 2024-12-11T00:00:00  61050         20326(Klajeyz)/S
2024-10-17 19:15:36,410: kskm.tools.ksrsigner: INFO 7  2024-11-30T00:00:00 2024-12-21T00:00:00  61050         20326(Klajeyz)/S
2024-10-17 19:15:36,410: kskm.tools.ksrsigner: INFO 8  2024-12-10T00:00:00 2024-12-31T00:00:00  61050         20326(Klajeyz)/S
2024-10-17 19:15:36,410: kskm.tools.ksrsigner: INFO 9  2024-12-20T00:00:00 2025-01-10T00:00:00  26470,61050   20326(Klajeyz)/S
2024-10-17 19:15:36,411: kskm.ksr.load: INFO Loaded KSR from file ksr-root-2025-q1-2-c_to_c.xml SHA-256 9f16aa335d2b89ca624e55ac56175b3597ed457b91888ba7fdb0e34ed89037ad WORDS quota bodyguard reward concurrent exceed Cherokee nightbird revenue flagpole distortion edict penetrate egghead bookseller erase conformist preshrunk unify crusade inferno pheasant maritime obtuse paragraph willow phonetic tissue distortion stormy millionaire clamshell perceptive
2024-10-17 19:15:36,414: kskm.ksr.validate: INFO Validating KSR using request policy:
2024-10-17 19:15:36,414: kskm.ksr.validate: INFO   acceptable_domains: ['.']
2024-10-17 19:15:36,414: kskm.ksr.validate: INFO   approved_algorithms: ['RSASHA256']
2024-10-17 19:15:36,414: kskm.ksr.validate: INFO   check_bundle_intervals: True
2024-10-17 19:15:36,414: kskm.ksr.validate: INFO   check_bundle_overlap: True
2024-10-17 19:15:36,414: kskm.ksr.validate: INFO   check_chain_keys: True
2024-10-17 19:15:36,414: kskm.ksr.validate: INFO   check_chain_keys_in_hsm: True
2024-10-17 19:15:36,414: kskm.ksr.validate: INFO   check_chain_overlap: True
2024-10-17 19:15:36,414: kskm.ksr.validate: INFO   check_cycle_length: True
2024-10-17 19:15:36,414: kskm.ksr.validate: INFO   check_keys_match_ksk_operator_policy: True
2024-10-17 19:15:36,414: kskm.ksr.validate: INFO   check_keys_publish_safety: True
2024-10-17 19:15:36,414: kskm.ksr.validate: INFO   check_keys_retire_safety: True
2024-10-17 19:15:36,414: kskm.ksr.validate: INFO   dns_ttl: 172800
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO   enable_unsupported_ecdsa: False
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO   enable_unsupported_edwards_dsa: False
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO   keys_match_zsk_policy: True
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO   max_bundle_interval: 11 days, 0:00:00
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO   max_cycle_inception_length: 81 days, 0:00:00
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO   min_bundle_interval: 9 days, 0:00:00
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO   min_cycle_inception_length: 79 days, 0:00:00
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO   num_bundles: 9
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO   num_different_keys_in_all_bundles: 3
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO   num_keys_per_bundle: [2, 1, 1, 1, 1, 1, 1, 1, 2]
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO   rsa_approved_exponents: [65537]
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO   rsa_approved_key_sizes: [2048]
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO   rsa_exponent_match_zsk_policy: True
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO   signature_algorithms_match_zsk_policy: True
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO   signature_check_expire_horizon: True
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO   signature_horizon_days: 180
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO   signature_validity_match_zsk_policy: True
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO   validate_signatures: True
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO KSR-DOMAIN: Verified domain '.'
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO KSR-ID: Will be checked later, when SKR is available
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO KSR-BUNDLE-UNIQUE: All 9 bundles have unique ids
2024-10-17 19:15:36,415: kskm.ksr.validate: INFO KSR-BUNDLE-KEYS: All 3 unique keys in the bundles accepted by policy
2024-10-17 19:15:36,417: kskm.ksr.validate: INFO KSR-BUNDLE-POP: All 9 bundles contain proof-of-possession
2024-10-17 19:15:36,417: kskm.ksr.validate: INFO KSR-BUNDLE-COUNT: Number of bundles (9) accepted
2024-10-17 19:15:36,417: kskm.ksr.validate: INFO KSR-BUNDLE-CYCLE-DURATION: The cycle length is in accordance with the KSK operator policy
2024-10-17 19:15:36,417: kskm.ksr.validate: INFO KSR-POLICY-KEYS: Validated number of keys per bundle, and for all bundles
2024-10-17 19:15:36,417: kskm.ksr.validate: INFO KSR-POLICY-ALG: All 1 ZSK operator signature algorithms accepted by policy
2024-10-17 19:15:36,417: kskm.ksr.validate: INFO KSR-POLICY-SIG-OVERLAP: All bundles overlap in accordance with the stated ZSK operator policy
2024-10-17 19:15:36,417: kskm.ksr.validate: INFO KSR-POLICY-SIG-VALIDITY: All 9 bundles have 21 days <= validity >= 21 days
2024-10-17 19:15:36,417: kskm.ksr.validate: INFO KSR-POLICY-SIG-HORIZON: All signatures expire in less than 180 days
2024-10-17 19:15:36,418: kskm.ksr.validate: INFO KSR-POLICY-BUNDLE-INTERVALS: All bundles intervals in accordance with the KSK operator policy
2024-10-17 19:15:36,418: kskm.tools.ksrsigner: INFO Request:
2024-10-17 19:15:36,418: kskm.tools.ksrsigner: INFO #  Inception           Expiration           ZSK Tags      KSK(CKA_LABEL)
2024-10-17 19:15:36,418: kskm.tools.ksrsigner: INFO 1  2025-01-01T00:00:00 2025-01-22T00:00:00  26470,61050   
2024-10-17 19:15:36,418: kskm.tools.ksrsigner: INFO 2  2025-01-11T00:00:00 2025-02-01T00:00:00  26470         
2024-10-17 19:15:36,418: kskm.tools.ksrsigner: INFO 3  2025-01-21T00:00:00 2025-02-11T00:00:00  26470         
2024-10-17 19:15:36,418: kskm.tools.ksrsigner: INFO 4  2025-01-31T00:00:00 2025-02-21T00:00:00  26470         
2024-10-17 19:15:36,418: kskm.tools.ksrsigner: INFO 5  2025-02-10T00:00:00 2025-03-03T00:00:00  26470         
2024-10-17 19:15:36,418: kskm.tools.ksrsigner: INFO 6  2025-02-20T00:00:00 2025-03-13T00:00:00  26470         
2024-10-17 19:15:36,418: kskm.tools.ksrsigner: INFO 7  2025-03-02T00:00:00 2025-03-23T00:00:00  26470         
2024-10-17 19:15:36,418: kskm.tools.ksrsigner: INFO 8  2025-03-12T00:00:00 2025-04-02T00:00:00  26470         
2024-10-17 19:15:36,418: kskm.tools.ksrsigner: INFO 9  2025-03-22T00:00:00 2025-04-12T00:00:00  26470,53148   
2024-10-17 19:15:36,418: kskm.misc.hsm: INFO Initializing PKCS#11 module aep using /opt/Keyper/PKCS11Provider/pkcs11.linux_gcc_4_1_2_glibc_2_5_x86_64.so.5.02
2024-10-17 19:15:36,591: kskm.misc.hsm: INFO HSM First slot:      ICANNKSK                        
2024-10-17 19:15:36,592: kskm.misc.hsm: INFO HSM ManufacturerID:  Ultra Electronics AEP Networks  
2024-10-17 19:15:36,592: kskm.misc.hsm: INFO HSM Model:           Keyper 9860-2   
2024-10-17 19:15:36,592: kskm.misc.hsm: INFO HSM Serial:          H2110010        
2024-10-17 19:15:36,592: kskm.misc.hsm: INFO Initializing PKCS#11 module luna using /usr/safenet/lunaclient/lib/libCryptoki2_64.so
2024-10-17 19:15:36,898: kskm.misc.hsm: INFO HSM First slot:      HSM9E_KSK-2024                  
2024-10-17 19:15:36,898: kskm.misc.hsm: INFO HSM ManufacturerID:                                  
2024-10-17 19:15:36,899: kskm.misc.hsm: INFO HSM Model:           Luna G7         
2024-10-17 19:15:36,899: kskm.misc.hsm: INFO HSM Serial:          1658876115494   
2024-10-17 19:15:36,899: kskm.signer.verify_chain: INFO Checking coherence between SKR(n-1) and this KSR
2024-10-17 19:15:36,901: kskm.signer.verify_chain: INFO KSR-CHAIN-KEYS: The last keys in SKR(n-1) matches the first keys in this KSR
2024-10-17 19:15:36,901: kskm.signer.verify_chain: INFO KSR-CHAIN-OVERLAP: Overlap with last bundle in SKR(n-1) 9 days is in accordance with the KSR policy
2024-10-17 19:15:36,904: kskm.signer.verify_chain: INFO KSR-CHAIN-KEYS: All 1 signatures in the last bundle of the last SKR were made with keys present in the HSM(s)
2024-10-17 19:17:03,459: kskm.misc.hsm: INFO Signing 256 bytes with key key_label=Klajeyz RSA public_key=348 bytes, algorithm RSASHA256, mechanism CKM_RSA_X_509, hash using hsm=False
2024-10-17 19:17:03,464: kskm.misc.hsm: INFO Signing 256 bytes with key key_label=Klajeyz RSA public_key=348 bytes, algorithm RSASHA256, mechanism CKM_RSA_X_509, hash using hsm=False
2024-10-17 19:17:03,469: kskm.misc.hsm: INFO Signing 256 bytes with key key_label=Klajeyz RSA public_key=348 bytes, algorithm RSASHA256, mechanism CKM_RSA_X_509, hash using hsm=False
2024-10-17 19:17:03,474: kskm.misc.hsm: INFO Signing 256 bytes with key key_label=Klajeyz RSA public_key=348 bytes, algorithm RSASHA256, mechanism CKM_RSA_X_509, hash using hsm=False
2024-10-17 19:17:03,479: kskm.misc.hsm: INFO Signing 256 bytes with key key_label=Klajeyz RSA public_key=348 bytes, algorithm RSASHA256, mechanism CKM_RSA_X_509, hash using hsm=False
2024-10-17 19:17:03,484: kskm.misc.hsm: INFO Signing 256 bytes with key key_label=Klajeyz RSA public_key=348 bytes, algorithm RSASHA256, mechanism CKM_RSA_X_509, hash using hsm=False
2024-10-17 19:17:03,489: kskm.misc.hsm: INFO Signing 256 bytes with key key_label=Klajeyz RSA public_key=348 bytes, algorithm RSASHA256, mechanism CKM_RSA_X_509, hash using hsm=False
2024-10-17 19:17:03,494: kskm.misc.hsm: INFO Signing 256 bytes with key key_label=Klajeyz RSA public_key=348 bytes, algorithm RSASHA256, mechanism CKM_RSA_X_509, hash using hsm=False
2024-10-17 19:17:03,499: kskm.misc.hsm: INFO Signing 256 bytes with key key_label=Klajeyz RSA public_key=348 bytes, algorithm RSASHA256, mechanism CKM_RSA_X_509, hash using hsm=False
2024-10-17 19:17:03,502: kskm.signer.policy: INFO KSR-POLICY-SAFETY: PublishSafety validated
2024-10-17 19:17:03,503: kskm.signer.policy: INFO KSR-POLICY-SAFETY: RetireSafety validated
2024-10-17 19:17:03,503: kskm.tools.ksrsigner: INFO Generated SKR:
2024-10-17 19:17:03,503: kskm.tools.ksrsigner: INFO #  Inception           Expiration           ZSK Tags      KSK(CKA_LABEL)
2024-10-17 19:17:03,503: kskm.tools.ksrsigner: INFO 1  2025-01-01T00:00:00 2025-01-22T00:00:00  26470,61050   20326(Klajeyz)/S
2024-10-17 19:17:03,503: kskm.tools.ksrsigner: INFO 2  2025-01-11T00:00:00 2025-02-01T00:00:00  26470         20326(Klajeyz)/S
2024-10-17 19:17:03,504: kskm.tools.ksrsigner: INFO 3  2025-01-21T00:00:00 2025-02-11T00:00:00  26470         20326(Klajeyz)/S
2024-10-17 19:17:03,504: kskm.tools.ksrsigner: INFO 4  2025-01-31T00:00:00 2025-02-21T00:00:00  26470         20326(Klajeyz)/S
2024-10-17 19:17:03,504: kskm.tools.ksrsigner: INFO 5  2025-02-10T00:00:00 2025-03-03T00:00:00  26470         20326(Klajeyz)/S
2024-10-17 19:17:03,504: kskm.tools.ksrsigner: INFO 6  2025-02-20T00:00:00 2025-03-13T00:00:00  26470         20326(Klajeyz)/S
2024-10-17 19:17:03,504: kskm.tools.ksrsigner: INFO 7  2025-03-02T00:00:00 2025-03-23T00:00:00  26470         20326(Klajeyz)/S
2024-10-17 19:17:03,504: kskm.tools.ksrsigner: INFO 8  2025-03-12T00:00:00 2025-04-02T00:00:00  26470         20326(Klajeyz)/S
2024-10-17 19:17:03,504: kskm.tools.ksrsigner: INFO 9  2025-03-22T00:00:00 2025-04-12T00:00:00  26470,53148   20326(Klajeyz)/S
2024-10-17 19:17:03,614: kskm.signer: INFO Wrote SKR to file skr-root-2025-q1-2-c_to_c.xml SHA-256 90d379717cf0a6e151e0c1bf9655c3f6e9669bbf2f4837a45bf4a29d97c0a031 WORDS peachy sociable jawbone hideaway kiwi upcoming rematch tolerance drunken tobacco snapline rebellion prefer equipment snowcap vocalist treadmill gossamer puppy rebellion cement dictator clamshell Pandora erase Virginia rebirth Ohio preshrunk recipe ragtime company