<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252"><title>Re: [Opendnssec-develop] NSEC3ing fails in RC2</title>
</head>
<body>
<font face="Calibri, Verdana, Helvetica, Arial"><span style="font-size:11pt">Hi - <br>
<br>
Sorry for the delay in responding; I’ve been away.<br>
<br>
Can you please try svn revision 3417 and let me know if you still have these issues?<br>
<br>
Thanks,<br>
<br>
<br>
Alex.<br>
<br>
<br>
On 06/05/2010 16:04, "Rick Zijlker" <<a href="rick.zijlker@sidn.nl">rick.zijlker@sidn.nl</a>> wrote:<br>
<br>
</span></font><blockquote><font face="Calibri, Verdana, Helvetica, Arial"><span style="font-size:11pt">Hey all,<br>
<br>
I can’t figure out what’s going wrong here. As I interpreted the logging, the auditor says there is no NSEC3 record present, but there are. Using default policy, with tighter timings (24H KSK rollover, 8H ZSK rollover, 15min resign etc.) .<br>
<br>
Can anyone help me out on this one?<br>
<br>
LOGGING:<br>
<br>
May 6 16:51:28 signer1 ods-enforcerd: opendnssec-enforcer starting...<br>
May 6 16:51:28 signer1 ods-enforcerd: opendnssec-enforcer Parent exiting...<br>
May 6 16:51:28 signer1 ods-enforcerd: opendnssec-enforcer forked OK...<br>
May 6 16:51:28 signer1 ods-enforcerd: opendnssec-enforcer started (version 1.1.0rc2), pid 24419<br>
May 6 16:51:28 signer1 ods-enforcerd: HSM opened successfully.<br>
May 6 16:51:28 signer1 ods-enforcerd: Reading config "/etc/opendnssec/conf.xml"<br>
May 6 16:51:28 signer1 ods-enforcerd: Reading config schema "/usr/local/share/opendnssec/conf.rng"<br>
May 6 16:51:28 signer1 ods-enforcerd: Communication Interval: 3600<br>
May 6 16:51:28 signer1 ods-enforcerd: No DS Submit command supplied<br>
May 6 16:51:28 signer1 ods-enforcerd: SQLite database set to: /var/opendnssec/kasp.db<br>
May 6 16:51:28 signer1 ods-enforcerd: Log User set to: local0<br>
May 6 16:51:28 signer1 ods-enforcerd: Switched log facility to: local0<br>
May 6 16:51:28 signer1 ods-enforcerd: Connecting to Database...<br>
May 6 16:51:28 signer1 ods-enforcerd: Policy default found.<br>
May 6 16:51:28 signer1 ods-enforcerd: Key sharing is Off.<br>
May 6 16:51:28 signer1 ods-enforcerd: SoftHSM: C_GenerateKeyPair: Key pair generated<br>
May 6 16:51:28 signer1 ods-enforcerd: Created KSK size: 2048, alg: 7 with id: eb57c8ad8ca6220932bdf15247351f19 in repository: SoftHSM and database.<br>
May 6 16:51:29 signer1 ods-enforcerd: SoftHSM: C_GenerateKeyPair: Key pair generated<br>
May 6 16:51:29 signer1 ods-enforcerd: Created KSK size: 2048, alg: 7 with id: 0424219554651888c2d6287eb85a8ebf in repository: SoftHSM and database.<br>
May 6 16:51:29 signer1 ods-enforcerd: SoftHSM: C_GenerateKeyPair: Key pair generated<br>
May 6 16:51:29 signer1 ods-enforcerd: Created ZSK size: 1024, alg: 7 with id: ee47a4ad43b7db7d3d155781c6a94ee2 in repository: SoftHSM and database.<br>
May 6 16:51:29 signer1 ods-enforcerd: SoftHSM: C_GenerateKeyPair: Key pair generated<br>
May 6 16:51:30 signer1 ods-enforcerd: Created ZSK size: 1024, alg: 7 with id: 357b7f1f5968385518e734dc3bc9850b in repository: SoftHSM and database.<br>
May 6 16:51:30 signer1 ods-enforcerd: zonelist filename set to /etc/opendnssec/zonelist.xml.<br>
May 6 16:51:30 signer1 ods-enforcerd: Zone ods found.<br>
May 6 16:51:30 signer1 ods-enforcerd: Policy for ods set to default.<br>
May 6 16:51:30 signer1 ods-enforcerd: Config will be output to /var/opendnssec/signconf/ods.xml.<br>
May 6 16:51:30 signer1 ods-enforcerd: INFO: Promoting ZSK from publish to active as this is the first pass for the zone<br>
May 6 16:51:30 signer1 ods-enforcerd: WARNING: Making non-backed up ZSK active, PLEASE make sure that you know the potential problems of using keys which are not recoverable<br>
May 6 16:51:30 signer1 ods-signerd: Received command: 'update ods'<br>
May 6 16:51:30 signer1 ods-signerd: Scheduling task to sign zone ods at 1273157488.15 with resign time 600<br>
May 6 16:51:30 signer1 ods-signerd: Scheduling task to sign zone ods at 1273157488.15 with resign time 600<br>
May 6 16:51:30 signer1 ods-signerd: Zone action to perform: 3<br>
May 6 16:51:30 signer1 ods-enforcerd: Could not call signer engine<br>
May 6 16:51:30 signer1 ods-enforcerd: Will continue: call 'ods-signer update' to manually update zones<br>
May 6 16:51:30 signer1 ods-enforcerd: Disconnecting from Database...<br>
May 6 16:51:30 signer1 ods-enforcerd: Sleeping for 3600 seconds.<br>
May 6 16:51:30 signer1 ods-signerd: Client socket shut down<br>
May 6 16:51:30 signer1 ods-signerd: Preprocessing signed zone: ods<br>
May 6 16:51:30 signer1 ods-signerd: No signed zone yet<br>
May 6 16:51:30 signer1 ods-signerd: Sorting zone: ods<br>
May 6 16:51:30 signer1 ods-signerd: Nseccing zone: ods<br>
May 6 16:51:30 signer1 ods-signerd: No information yet for key eb57c8ad8ca6220932bdf15247351f19<br>
May 6 16:51:30 signer1 ods-signerd: Generating DNSKEY RR for eb57c8ad8ca6220932bdf15247351f19<br>
May 6 16:51:30 signer1 ods-signerd: Found key eb57c8ad8ca6220932bdf15247351f19<br>
May 6 16:51:30 signer1 ods-signerd: No information yet for key ee47a4ad43b7db7d3d155781c6a94ee2<br>
May 6 16:51:30 signer1 ods-signerd: Generating DNSKEY RR for ee47a4ad43b7db7d3d155781c6a94ee2<br>
May 6 16:51:30 signer1 ods-signerd: Found key ee47a4ad43b7db7d3d155781c6a94ee2<br>
May 6 16:51:30 signer1 ods-signerd: No information yet for key 357b7f1f5968385518e734dc3bc9850b<br>
May 6 16:51:30 signer1 ods-signerd: Generating DNSKEY RR for 357b7f1f5968385518e734dc3bc9850b<br>
May 6 16:51:30 signer1 ods-signerd: Found key 357b7f1f5968385518e734dc3bc9850b<br>
May 6 16:51:30 signer1 ods-signerd: signer stderr: Warning: unable to open /var/opendnssec/tmp/ods.signed: No such file or directory, performing full zone sign<br>
May 6 16:51:30 signer1 ods-signerd: signer stderr: signer: number of signatures created: 72 (within a second)<br>
May 6 16:51:30 signer1 ods-signerd: Created 72 new signatures<br>
May 6 16:51:30 signer1 ods-signerd: Running auditor on zone<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Auditor started<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Auditor starting on ods<br>
May 6 16:51:31 signer1 ods-auditor[24448]: SOA differs : from 1000 to 1273157490<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Auditing ods zone : NSEC3 SIGNED<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns2.label21.ods (0500q2sct81770labmqd07qg58u9nf1h.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns3.label17.ods (06ba5j2jegq44jfntoeaaej09n5jm6a8.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns4.label22.ods (0pgfld8lg2n0uh432q4q6ajd19uistqo.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns4.label14.ods (15igbgmrf4cla49bikads1tfqepnkl5u.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns5.label25.ods (16o5ithnkd0h2076590trkbd21bdf299.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns3.label8.ods (1f458tjkcpk555ms7rgrr9f06nlg5hs0.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns1.label6.ods (1qpoohlmjoveluert9s26og50crurgh5.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns6.label11.ods (1u3jah5m0tnc7kq8usqrkmtf34v3j4pc.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns6.label13.ods (2a4velsj96qmuupcv6i6i9ll1r0ksjm7.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found domain (ns4.label29.ods) whose hash (2s24haq50m31l4br2kcdl5jopp508ef8.ods) is between owner (2m05mung7vu3n9qtdh3vmu0b585pdl2b.ods) and next_hashed (3v5ieqoqrk1qnl5uft39sh4lfuqsegcj.ods)for non-optout NSEC3<br>
May 6 16:51:31 signer1 ods-auditor[24448]: ERROR : expected at ns4.label29.ods (2m05mung7vu3n9qtdh3vmu0b585pdl2b.ods) but found A<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns4.label9.ods (2scoild81jadchp0canf7sh9bedmc49k.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns3.label18.ods (32dbcbfngc06qenimh6s1qij67kbuspt.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns1.label30.ods (34nj4k3fcbtpfnbt7l8bsm5uein0kdaf.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns2.label30.ods (3hs8tvtfbhm8bro055arpsg5ksf3l9ue.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns6.label30.ods (4040ubcevebghn5s7c1ogods8ue8aspm.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns2.label14.ods (439m51qiojp0gb4bbl19em529h6rfu5c.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns5.label4.ods (4ktt7ekohnh68vbpcll4k7di9p2ff84g.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns5.label21.ods (4smlu9arc4vvbd9f8tm2o9ihmufdrv3s.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns4.label32.ods (5985m4vgtrauoies0u5mjfl5frde4r0f.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns3.label14.ods (5kascm0vmrlojane8q7ebv5hjrqi7cgn.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns2.label22.ods (5u4gqjhklhfcr03h1gr5fai2ar9pi0m2.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns3.label4.ods (65urmqflp4r8lsfme7kfpb54b2v5qpma.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns1.label5.ods (6ct35gcbbsgh1j5sahsiisv1eit444u8.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns6.label4.ods (6e15lbkb0gujeh663tht6p8qjpv93cvn.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns3.label22.ods (6u4kt6d91rsh89na32qp0vkg9968ejsa.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns6.label33.ods (6unkss61rm9e7pfp265uliqec0m6o4ll.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for some.ns.at.label7.ods (70mbpd0n8t6s7krbca8eq50d6oiu2vto.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns2.label34.ods (7bq2ansdhctb00up3btett7lr9l2kup8.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label14.ods (7jrlt4kku7nc0bf0amhubr8hv2fkflsb.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label10.ods (7m047daqo4eiujds61s9t1qcr5sv2s1a.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label34.ods (7n8ef6dlqsck2jae9d132uvo3nu2rtjp.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label17.ods (7p0brl3i0vojkb2lm29t0m4mq5f2o90p.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label8.ods (7sbl2laio94tb9rmg367kpj0s3t6n9qo.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label10.ods (7vhhr0nrcufea2b367fti5qqo9cipi8s.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label25.ods (8pu2kvr2c513t606lc9rvv85q38gbvfg.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label9.ods (8r78m0tsfjgfk0vrtbqfpdj978gm0ri1.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label13.ods (8rmmclt46ief0csi6rhvh8miae8281a6.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label6.ods (9517n9q0ohaddftd9jgnb0hi1hoh3hml.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label33.ods (9gfku9lgt9ksp2enes7orlpb9ad581lj.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label21.ods (9l26ehlrjqfv059cipqs30to966l3ioe.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label10.ods (9p5tbff6k4iktts6eipfsfce1ili078j.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label13.ods (adabo19jemopvks1rcju794nq3npccrs.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label32.ods (besq4if7688o3rd1jb4jf7uf7t5r6dj0.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label30.ods (bje9l4b2jjes8v3og0r0r5vvo61jjskp.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label17.ods (bqd6aku51afcg5f3qpfaqu7hr6vqmb67.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label32.ods (buug5ukgu1q7d2dkqhh9iamrsr90ueb9.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label5.ods (cbc50kjttjlegij5e2qdbggcemj2a2e2.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label22.ods (cph6ad3nmj3ub8cjks30a4tj0l53grvr.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label32.ods (crff0fta791en33ajtok91ubv5li3jr5.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label11.ods (cuoilmom3rgbq42e3lnueg0hskq736rj.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label17.ods (d2pn32kv32pou650lfsoo7k4nq7eetn7.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label4.ods (dob2dgf2glfmohdagm2jfpkkgpdigd7i.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label5.ods (dpp69tnld7rc0510k5gtgikfr55m6svm.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label29.ods (e2husvlqtuot3qcltheeavcneopv4djs.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label18.ods (eqk1e45qf6ka8hs5ktkkqu17ll53tai9.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label34.ods (esgtngcslho8q44cljvlvnn0rkdh2359.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label18.ods (f3fih9dn1atrpkihbqollfv684h9r7m9.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label5.ods (fgokfk9ame3hinec6fqcqfmlr49l3jk8.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label25.ods (fldeg2bj2ie18n6mkcvacpoa9or1ta4o.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label8.ods (fq0hp42e1vutbsi72u3oifl6bmkdpvdf.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label13.ods (g406lbpft0po3dgjad4akqu34am8h1va.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found domain (ns4.label18.ods) whose hash (gliqlf2dsr3raeb5q4kp33ehmcfchk6c.ods) is between owner (gispjmo8f6ikpsgl5e3opvh400rd2e2b.ods) and next_hashed (hvggdmjnc74khi6lenmbjl69eijm9vr7.ods)for non-optout NSEC3<br>
May 6 16:51:32 signer1 ods-auditor[24448]: ERROR : expected at ns4.label18.ods (gispjmo8f6ikpsgl5e3opvh400rd2e2b.ods) but found A<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label34.ods (hmng8eakfoo28s8gfb9mok3s719m07cs.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label9.ods (hq00uoahl4fgl473urf6s64e4i83cqt0.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label6.ods (i6jtvrh97r4ejg4a7vskt2npi30mrpe0.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label10.ods (i7q89egv792cqnh20sa7mo7m9e6b1ad1.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label33.ods (igs3bfm23c547spui06dg211ct59jjvq.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label11.ods (iheoe1ihamd13kd7joku1k0lmdv83eh5.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label11.ods (ir6r11kq3j7rlqbsar3o4fpthpdpdp8f.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label6.ods (iu689jck711kug4voj6fbo5ku66hqvv2.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label10.ods (j0ktpagkcatp1p7tak03mt9fs8ae1a42.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label18.ods (j19j0dqa8n0flaq8ofl41ft6sktct9r3.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label25.ods (j6a7n0eth8ensauo4ka3f2vi68vrj04v.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label29.ods (k1ll22l8v1ianvuffc76c83bcvhku9d3.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label9.ods (k3l51jbpc9541tfqn65cuc944quq9gdk.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label21.ods (k68eorm0emlmt5tm4sg83ah826b6sklo.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label6.ods (kioqei1vk5o52jreoubv9atvfc2p4n5d.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label11.ods (l9q0db2vocmvfs30lcibjdcqkf44b890.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label34.ods (lhlsenbs7di6uev2cblram47es6hknfh.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label18.ods (lrd8ujf9rhrphqe4kvufkkch52fos5qg.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label14.ods (lvdskfa9j3ttvfmt2mtu9g0qr0va99nc.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label17.ods (mvldnb4msovvh633nquntp7m4bmql0i4.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label30.ods (n6f0ovehd2jlfgl4ic6hhlmsomt7pgku.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label4.ods (n95hq28vmlqojnmbmrq39j0agav4km5q.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label13.ods (ngu2mf796q6dlniiu9764o8h94r2p7kg.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label4.ods (o2kifr82anr30ov65r9c509lmessse8r.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label10.ods (o2slm445gghnceep94v4f9bjlupl055m.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label29.ods (o3h9kor3tudvj6l8ml3ff7f6jdkr8ln5.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label22.ods (o52tg8p8as7r5p7094vigh8spshfsu72.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label9.ods (o8klvgip3r28v9u2h3h2huetnp2s8cto.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label21.ods (oaapfs5b5smc9t1r97jnm2c6a8tmbktm.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns5.label14.ods (osq29se5r4sl9sfi1sfmkhmu915fmm8r.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label21.ods (ot114galqt8vteg0b49av79k99sbavf8.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label8.ods (pk89iv6jt1p120v1vrr496nu18u1k04v.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label34.ods (pneq2bqqla57r1u9t2rntha7e66bu3nj.ods) which was not covered by an NSEC3 record<br>
May 6 16:51:32 signer1 ods-auditor[24448]: Too much output from auditor - suppressing for rest of run<br>
<br>
<br>
Piece from the /var/opendnssec/tmp/ods.signed:<br>
<br>
label21.ods. 3600 IN NS ns1.label21.ods.<br>
label21.ods. 3600 IN NS ns2.label21.ods.<br>
label21.ods. 3600 IN NS ns3.label21.ods.<br>
label21.ods. 3600 IN NS ns4.label21.ods.<br>
label21.ods. 3600 IN NS ns5.label21.ods.<br>
label21.ods. 3600 IN NS ns6.label21.ods.<br>
7kctrj4d4djg7p1trhmv1isaokun2ebi.ods. 1800 IN NSEC3 1 0 5 6730d04f36602116 83us8o3j96vtapffs8ktm6gb3pu6v9t3 NS<br>
7kctrj4d4djg7p1trhmv1isaokun2ebi.ods. 1800 IN RRSIG NSEC3 7 2 1800 20100506170422 20100506144630 59493 ods. KUbwz8kuGHlPeINluX5oW0zz1irsDCKkiufCwyk1SyqkavTpywuovyk1H9Ij92y0DjEth2hVLRB4LCmuMvoT46lb<br>
LkvWf7O4hsWWw+4jwbjQE1yeKyArW6n7tOMhy8jl3iIVF2mwPTDZFE7BMgm8FnzfYUQgSBLuiUv9QAIrIxg= ;{id = 59493}<br>
<br>
<br>
Cheers,<br>
Rick<br>
<br>
<br>
<br>
<br>
<br>
<hr align="CENTER" size="3" width="95%"></span></font><font size="2"><font face="Consolas, Courier New, Courier"><span style="font-size:10pt">_______________________________________________<br>
Opendnssec-develop mailing list<br>
<a href="Opendnssec-develop@lists.opendnssec.org">Opendnssec-develop@lists.opendnssec.org</a><br>
<a href="https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop">https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop</a><br>
</span></font></font></blockquote>
</body>
</html>