Add temporary cert renewal cname

To work around lack of whois contact these days, we're stuck using
either HTTP or DNS based domain validation for x.509 certificate
renewals. This record is temporary and will be removed as soon as
the renewed certificate is received.

Change-Id: I174409fc9df0339086ccc56162ccc99310cea6b8
This commit is contained in:
Jeremy Stanley 2019-01-20 15:48:50 +00:00
parent 4f4361cdb8
commit 4ab35a7073
1 changed files with 2 additions and 1 deletions

View File

@ -2,7 +2,7 @@
$ORIGIN zuul-ci.org.
$TTL 5m
@ IN SOA adns1.opendev.org. hostmaster.openstack.org. (
1546635320 ; serial number unixtime
1547999236 ; serial number unixtime
1h ; refresh (secondary checks for updates)
10m ; retry (secondary retries failed axfr)
10d ; expire (secondary ends serving old data)
@ -20,3 +20,4 @@ lists IN AAAA 2001:4800:780e:510:3bc3:d7f6:ff04:b736
www IN A 23.253.125.17
www IN AAAA 2001:4800:7817:103:be76:4eff:fe04:e3e3
git IN CNAME git.openstack.org.
_3448823BC189100E3DCD2E94572633B6 IN CNAME 90544004E176DD3817F6466DCFF6E3CE.4EC62C892004F3A45C05BDD742518CCA.5c44975a6e889.comodoca.com.