Maintained by: NLnet Labs

[Unbound-users] Validating the root: translation of ICANN XML file

Hauke Hoffmann
Fri Jul 16 20:30:18 CEST 2010


On Friday 16 July 2010 15:50:19 Stephane Bortzmeyer wrote:
> As far as I know, the only format of secure distribution for the root
> trust anchor is an XML file. Here is a Makefile and a XSLT script to
> translate this file to a trust anchor that Unbound will
> recognize. Just type "make"

Hi Stephane,

you should add the -o option to wget, otherwise you may have  asecurity risk 
of unexpected download filenames.
http://www.ocert.org/advisories/ocert-2010-001.html

I've attached a corrected version of this Makefile.

Regards
  Hauke

-------------- next part --------------
A non-text attachment was scrubbed...
Name: Makefile
Type: text/x-makefile
Size: 1346 bytes
Desc: not available
URL: <http://unbound.nlnetlabs.nl/pipermail/unbound-users/attachments/20100716/3caf96d9/attachment.bin>