View Issue Details

IDProjectCategoryView StatusLast Update
0011287Talerdeployment and operationspublic2026-11-03 14:27
ReporterChristian Grothoff Assigned ToResolution deadline
Implementervecirex Reviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)0.5Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritylowSeverityfeatureReproducibilityN/A
Status closedResolutionfixed 
Platformi7OSDebian GNU/LinuxOS Versionsqueeze
Product Versiongit (master) 
Target Versionpost-1.0 
Summary0011287: set DNS CAA records in DNS
DescriptionSee: https://letsencrypt.org/docs/caa/. We should probably find out our accounturi for the respective server and even pin that.
Tagsinfrastructure, security

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

vecirex

2026-11-03 14:14

administrator   ~0030210

taler.net already has CAA (dig +short CAA taler.net -> 128 issue "letsencrypt.org"); no change needed there.

vecirex

2026-11-03 14:17

administrator   ~0030211

CAA apex (@) set, TTL 300, issue letsencrypt.org:

$ dig +short CAA taler-ops.ch @x.ns.joker.com
128 issue "letsencrypt.org"

$ dig +short CAA taler-systems.com @x.ns.joker.com
128 issue "letsencrypt.org"

$ dig +short CAA gnunet.org @x.ns.joker.com
128 issue "letsencrypt.org"

vecirex

2026-11-03 14:26

administrator   ~0030214

CAA apex (@) set, TTL 300, issue letsencrypt.org:
$ dig +short CAA anastasis.lu @x.ns.joker.com
128 issue "letsencrypt.org"

Issue History

Date ModifiedUsernameFieldChange
2026-03-22 22:09Christian GrothoffNew Issue
2026-03-22 22:09Christian GrothoffStatusnew => assigned
2026-03-22 22:09Christian GrothoffAssigned To => vecirex
2026-03-22 22:09Christian GrothoffTag Attached: security
2026-03-22 22:09Christian GrothoffStatusassigned => implementing
2026-03-22 22:09Christian GrothoffPrioritynormal => low
2026-09-18 12:05vecirexTag Attached: infrastructure
2026-11-03 14:14vecirexNote Added: 0030210
2026-11-03 14:17vecirexNote Added: 0030211
2026-11-03 14:17vecirexAssigned Tovecirex =>
2026-11-03 14:17vecirexImplementer => vecirex
2026-11-03 14:17vecirexStatusimplementing => closed
2026-11-03 14:17vecirexResolutionopen => fixed
2026-11-03 14:26vecirexNote Added: 0030214
2026-11-03 14:27vecirexEstimated effort (hours) => 0.5