2023-11-30 20:17:30,875: kskm.common.config: INFO Loaded configuration from file ksrsigner.yaml SHA-256 432a513b007acc8ae97057bccefca01f36dd334d00e7cac0462df3abc3a69388 WORDS crucial chambermaid drunken councilman aardvark infancy spigot maverick treadmill hesitate eightball pyramid spyglass Wilmington ragtime businessman Christmas tambourine chisel disruptive aardvark truncated spellbind recipe cubic clergyman upset Pegasus snowcap paragon playhouse maritime 2023-11-30 20:17:30,915: kskm.common.config: INFO Configuration validated 2023-11-30 20:17:30,916: kskm.skr.load: INFO Loaded SKR from file skr-root-2023-q4-0.xml SHA-256 7d8087f4bdaf0c70f264a881eb07ec16ae15d8fb3764f05a9ff119e6cc5aed49 WORDS klaxon intention Neptune Virginia skullcap pharmacy ammo hesitate uproot getaway retouch inventive trouble amusement tumor bodyguard robust bifocals stormy Wichita clamshell getaway unearth existence quota vacancy bedlamp trombonist spigot existence tunnel dinosaur 2023-11-30 20:17:30,954: kskm.tools.ksrsigner: INFO Previous SKR: 2023-11-30 20:17:30,954: kskm.tools.ksrsigner: INFO # Inception Expiration ZSK Tags KSK(CKA_LABEL) 2023-11-30 20:17:30,954: kskm.tools.ksrsigner: INFO 1 2023-10-01T00:00:00 2023-10-22T00:00:00 46780,11019 20326(Klajeyz)/S 2023-11-30 20:17:30,954: kskm.tools.ksrsigner: INFO 2 2023-10-11T00:00:00 2023-11-01T00:00:00 46780 20326(Klajeyz)/S 2023-11-30 20:17:30,954: kskm.tools.ksrsigner: INFO 3 2023-10-21T00:00:00 2023-11-11T00:00:00 46780 20326(Klajeyz)/S 2023-11-30 20:17:30,954: kskm.tools.ksrsigner: INFO 4 2023-10-31T00:00:00 2023-11-21T00:00:00 46780 20326(Klajeyz)/S 2023-11-30 20:17:30,954: kskm.tools.ksrsigner: INFO 5 2023-11-10T00:00:00 2023-12-01T00:00:00 46780 20326(Klajeyz)/S 2023-11-30 20:17:30,955: kskm.tools.ksrsigner: INFO 6 2023-11-20T00:00:00 2023-12-11T00:00:00 46780 20326(Klajeyz)/S 2023-11-30 20:17:30,955: kskm.tools.ksrsigner: INFO 7 2023-11-30T00:00:00 2023-12-21T00:00:00 46780 20326(Klajeyz)/S 2023-11-30 20:17:30,955: kskm.tools.ksrsigner: INFO 8 2023-12-10T00:00:00 2023-12-31T00:00:00 46780 20326(Klajeyz)/S 2023-11-30 20:17:30,955: kskm.tools.ksrsigner: INFO 9 2023-12-20T00:00:00 2024-01-10T00:00:00 46780,30903 20326(Klajeyz)/S 2023-11-30 20:17:30,956: kskm.ksr.load: INFO Loaded KSR from file ksr-root-2024-q1-0.xml SHA-256 d31f96ec28d5296641aad3bced5fec3675f9e7675a074032be83ab9070232af5 WORDS stapler businessman prefer unicorn breadline specialist breakup gossamer cranky pedigree stapler pyramid tunnel forever tumor congregate indulge Waterloo transit graduate enlist amusement crackdown component skydive Jamaica rhythm millionaire guidance cannonball brickyard visitor 2023-11-30 20:17:30,958: kskm.ksr.validate: INFO Validating KSR using request policy: 2023-11-30 20:17:30,958: kskm.ksr.validate: INFO _dataclass_placeholder: None 2023-11-30 20:17:30,958: kskm.ksr.validate: INFO acceptable_domains: ['.'] 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO approved_algorithms: ['RSASHA256'] 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO check_bundle_intervals: True 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO check_bundle_overlap: True 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO check_chain_keys: True 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO check_chain_keys_in_hsm: True 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO check_chain_overlap: True 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO check_cycle_length: True 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO check_keys_match_ksk_operator_policy: True 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO check_keys_publish_safety: True 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO check_keys_retire_safety: True 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO dns_ttl: 172800 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO enable_unsupported_ecdsa: False 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO keys_match_zsk_policy: True 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO max_bundle_interval: 11 days, 0:00:00 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO max_cycle_inception_length: 81 days, 0:00:00 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO min_bundle_interval: 9 days, 0:00:00 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO min_cycle_inception_length: 79 days, 0:00:00 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO num_bundles: 9 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO num_different_keys_in_all_bundles: 3 2023-11-30 20:17:30,959: kskm.ksr.validate: INFO num_keys_per_bundle: [2, 1, 1, 1, 1, 1, 1, 1, 2] 2023-11-30 20:17:30,960: kskm.ksr.validate: INFO rsa_approved_exponents: [65537] 2023-11-30 20:17:30,960: kskm.ksr.validate: INFO rsa_approved_key_sizes: [2048] 2023-11-30 20:17:30,960: kskm.ksr.validate: INFO rsa_exponent_match_zsk_policy: True 2023-11-30 20:17:30,960: kskm.ksr.validate: INFO signature_algorithms_match_zsk_policy: True 2023-11-30 20:17:30,960: kskm.ksr.validate: INFO signature_check_expire_horizon: True 2023-11-30 20:17:30,960: kskm.ksr.validate: INFO signature_horizon_days: 180 2023-11-30 20:17:30,960: kskm.ksr.validate: INFO signature_validity_match_zsk_policy: True 2023-11-30 20:17:30,960: kskm.ksr.validate: INFO validate_signatures: True 2023-11-30 20:17:30,960: kskm.ksr.validate: INFO KSR-DOMAIN: Verified domain '.' 2023-11-30 20:17:30,960: kskm.ksr.validate: INFO KSR-ID: Will be checked later, when SKR is available 2023-11-30 20:17:30,960: kskm.ksr.validate: INFO KSR-BUNDLE-UNIQUE: All 9 bundles have unique ids 2023-11-30 20:17:30,960: kskm.ksr.validate: INFO KSR-BUNDLE-KEYS: All 3 unique keys in the bundles accepted by policy 2023-11-30 20:17:30,961: kskm.ksr.validate: INFO KSR-BUNDLE-POP: All 9 bundles contain proof-of-possession 2023-11-30 20:17:30,962: kskm.ksr.validate: INFO KSR-BUNDLE-COUNT: Number of bundles (9) accepted 2023-11-30 20:17:30,962: kskm.ksr.validate: INFO KSR-BUNDLE-CYCLE-DURATION: The cycle length is in accordance with the KSK operator policy 2023-11-30 20:17:30,962: kskm.ksr.validate: INFO KSR-POLICY-KEYS: Validated number of keys per bundle, and for all bundles 2023-11-30 20:17:30,962: kskm.ksr.validate: INFO KSR-POLICY-ALG: All 1 ZSK operator signature algorithms accepted by policy 2023-11-30 20:17:30,962: kskm.ksr.validate: INFO KSR-POLICY-SIG-OVERLAP: All bundles overlap in accordance with the stated ZSK operator policy 2023-11-30 20:17:30,962: kskm.ksr.validate: INFO KSR-POLICY-SIG-VALIDITY: All 9 bundles have 21 days <= validity >= 21 days 2023-11-30 20:17:30,962: kskm.ksr.validate: INFO KSR-POLICY-SIG-HORIZON: All signatures expire in less than 180 days 2023-11-30 20:17:30,962: kskm.ksr.validate: INFO KSR-POLICY-BUNDLE-INTERVALS: All bundles intervals in accordance with the KSK operator policy 2023-11-30 20:17:30,962: kskm.tools.ksrsigner: INFO Request: 2023-11-30 20:17:30,963: kskm.tools.ksrsigner: INFO # Inception Expiration ZSK Tags KSK(CKA_LABEL) 2023-11-30 20:17:30,963: kskm.tools.ksrsigner: INFO 1 2024-01-01T00:00:00 2024-01-22T00:00:00 46780,30903 2023-11-30 20:17:30,963: kskm.tools.ksrsigner: INFO 2 2024-01-11T00:00:00 2024-02-01T00:00:00 30903 2023-11-30 20:17:30,963: kskm.tools.ksrsigner: INFO 3 2024-01-21T00:00:00 2024-02-11T00:00:00 30903 2023-11-30 20:17:30,963: kskm.tools.ksrsigner: INFO 4 2024-01-31T00:00:00 2024-02-21T00:00:00 30903 2023-11-30 20:17:30,963: kskm.tools.ksrsigner: INFO 5 2024-02-10T00:00:00 2024-03-02T00:00:00 30903 2023-11-30 20:17:30,963: kskm.tools.ksrsigner: INFO 6 2024-02-20T00:00:00 2024-03-12T00:00:00 30903 2023-11-30 20:17:30,963: kskm.tools.ksrsigner: INFO 7 2024-03-01T00:00:00 2024-03-22T00:00:00 30903 2023-11-30 20:17:30,963: kskm.tools.ksrsigner: INFO 8 2024-03-11T00:00:00 2024-04-01T00:00:00 30903 2023-11-30 20:17:30,963: kskm.tools.ksrsigner: INFO 9 2024-03-21T00:00:00 2024-04-11T00:00:00 5613,30903 2023-11-30 20:17:30,963: kskm.misc.hsm: INFO Initializing PKCS#11 module aep using /opt/Keyper/PKCS11Provider/pkcs11.linux_gcc_4_1_2_glibc_2_5_x86_64.so.5.02 2023-11-30 20:17:31,126: kskm.misc.hsm: INFO HSM First slot: ICANNKSK 2023-11-30 20:17:31,126: kskm.misc.hsm: INFO HSM ManufacturerID: Ultra Electronics AEP Networks 2023-11-30 20:17:31,126: kskm.misc.hsm: INFO HSM Model: Keyper 9860-2 2023-11-30 20:17:31,126: kskm.misc.hsm: INFO HSM Serial: H2110009 2023-11-30 20:17:31,127: kskm.signer.verify_chain: INFO Checking coherence between SKR(n-1) and this KSR 2023-11-30 20:17:31,127: kskm.signer.verify_chain: INFO KSR-CHAIN-KEYS: The last keys in SKR(n-1) matches the first keys in this KSR 2023-11-30 20:17:31,127: kskm.signer.verify_chain: INFO KSR-CHAIN-OVERLAP: Overlap with last bundle in SKR(n-1) 9 days is in accordance with the KSR policy 2023-11-30 20:17:31,128: kskm.signer.verify_chain: INFO KSR-CHAIN-KEYS: All 1 signatures in the last bundle of the last SKR were made with keys present in the HSM(s) 2023-11-30 20:19:41,974: kskm.signer.policy: INFO KSR-POLICY-SAFETY: PublishSafety validated 2023-11-30 20:19:41,974: kskm.signer.policy: INFO KSR-POLICY-SAFETY: RetireSafety validated 2023-11-30 20:19:41,975: kskm.tools.ksrsigner: INFO Generated SKR: 2023-11-30 20:19:41,975: kskm.tools.ksrsigner: INFO # Inception Expiration ZSK Tags KSK(CKA_LABEL) 2023-11-30 20:19:41,975: kskm.tools.ksrsigner: INFO 1 2024-01-01T00:00:00 2024-01-22T00:00:00 46780,30903 20326(Klajeyz)/S 2023-11-30 20:19:41,975: kskm.tools.ksrsigner: INFO 2 2024-01-11T00:00:00 2024-02-01T00:00:00 30903 20326(Klajeyz)/S 2023-11-30 20:19:41,975: kskm.tools.ksrsigner: INFO 3 2024-01-21T00:00:00 2024-02-11T00:00:00 30903 20326(Klajeyz)/S 2023-11-30 20:19:41,975: kskm.tools.ksrsigner: INFO 4 2024-01-31T00:00:00 2024-02-21T00:00:00 30903 20326(Klajeyz)/S 2023-11-30 20:19:41,975: kskm.tools.ksrsigner: INFO 5 2024-02-10T00:00:00 2024-03-02T00:00:00 30903 20326(Klajeyz)/S 2023-11-30 20:19:41,975: kskm.tools.ksrsigner: INFO 6 2024-02-20T00:00:00 2024-03-12T00:00:00 30903 20326(Klajeyz)/S 2023-11-30 20:19:41,976: kskm.tools.ksrsigner: INFO 7 2024-03-01T00:00:00 2024-03-22T00:00:00 30903 20326(Klajeyz)/S 2023-11-30 20:19:41,976: kskm.tools.ksrsigner: INFO 8 2024-03-11T00:00:00 2024-04-01T00:00:00 30903 20326(Klajeyz)/S 2023-11-30 20:19:41,976: kskm.tools.ksrsigner: INFO 9 2024-03-21T00:00:00 2024-04-11T00:00:00 5613,30903 20326(Klajeyz)/S 2023-11-30 20:19:42,106: kskm.signer: INFO Wrote SKR to file HSM7E-skr-root-2024-q1-0.xml SHA-256 0f2922c76d8ac758dedff603d0c2e44e13369c1938d56ef7509425abf8f0b48f WORDS artist certify blockade retraction goggles maverick soybean everyday tactics therapist village aggregate stagnate repellent tonic distortion Aztec congregate python bottomless classic specialist goldfish voyager drumbeat molecule bombast Pegasus Vulcan upcoming scenic midsummer