<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Hi</div><div><br></div><div><br></div><div>For testing purposes, I have installed openDNSSEC (opendnssec-1.4.0-0.2.b1.el6.x86_64) on CentOS release 6.3 (Final).</div><div>I want to use a softHSM repository :</div><div><div><br></div><div><span class="Apple-tab-span" style="white-space:pre"> </span><Repository name="SoftHSM"></div><div><span class="Apple-tab-span" style="white-space:pre"> </span><Module>/usr/lib64/softhsm/libsofthsm.so</Module></div><div><span class="Apple-tab-span" style="white-space:pre"> </span><TokenLabel>OpenDNSSEC</TokenLabel></div><div><span class="Apple-tab-span" style="white-space:pre"> </span><PIN>1234</PIN></div><div><span class="Apple-tab-span" style="white-space:pre"> </span></Repository></div></div><div><br></div><div><br></div><div>When I start the service with "ods-control start" I have the following error :</div><div>____________________</div><div><div>Feb 14 11:38:48 pre-dnssec ods-enforcerd: opendnssec starting...</div><div>Feb 14 11:38:48 pre-dnssec ods-enforcerd: opendnssec Parent exiting...</div><div>Feb 14 11:38:48 pre-dnssec ods-enforcerd: opendnssec forked OK...</div><div>Feb 14 11:38:48 pre-dnssec ods-enforcerd: group set to: ods (496)</div><div>Feb 14 11:38:48 pre-dnssec ods-enforcerd: user set to: ods (496)</div><div>Feb 14 11:38:48 pre-dnssec ods-enforcerd: opendnssec started (version 1.4.0b1), pid 29752</div><div>Feb 14 11:38:48 pre-dnssec ods-enforcerd: HSM opened successfully.</div><div>Feb 14 11:38:49 pre-dnssec ods-enforcerd: Checking database connection...</div><div>Feb 14 11:38:49 pre-dnssec ods-enforcerd: Database connection ok.</div><div>Feb 14 11:38:49 pre-dnssec ods-enforcerd: Reading config "/etc/opendnssec/conf.xml"</div><div>Feb 14 11:38:49 pre-dnssec ods-enforcerd: Reading config schema "/usr/share/opendnssec/conf.rng"</div><div>Feb 14 11:38:49 pre-dnssec ods-enforcerd: Wrong database backend for enforcer workers, forcing single thread operation</div><div>Feb 14 11:38:49 pre-dnssec ods-enforcerd: Communication Interval: 3600</div><div>Feb 14 11:38:49 pre-dnssec ods-enforcerd: No DS Submit command supplied</div><div>Feb 14 11:38:49 pre-dnssec ods-enforcerd: SQLite database set to: /var/opendnssec/kasp.db</div><div>Feb 14 11:38:49 pre-dnssec ods-enforcerd: Log User set to: local0</div><div>Feb 14 11:38:49 pre-dnssec ods-enforcerd: Switched log facility to: local0</div><div>Feb 14 11:38:49 pre-dnssec ods-enforcerd: Connecting to Database...</div><div>Feb 14 11:38:49 pre-dnssec ods-enforcerd: Policy default found.</div><div>Feb 14 11:38:49 pre-dnssec ods-enforcerd: Key sharing is Off.</div><div>Feb 14 11:38:49 pre-dnssec ods-enforcerd: Error creating key in repository SoftHSM</div><div>Feb 14 11:38:49 pre-dnssec ods-enforcerd: generate key pair: CKR_GENERAL_ERROR</div></div><div>____________________</div><div><br></div><div>When I test with "ods-hsmutil test SoftHSM -v" :</div><div><br></div><div>____________________</div><div><div><font class="Apple-style-span" face="Courier">Testing repository: SoftHSM</font></div><div><font class="Apple-style-span" face="Courier"><br></font></div><div><font class="Apple-style-span" face="Courier">Generating 512-bit RSA key... OK</font></div><div><font class="Apple-style-span" face="Courier">Extracting key identifier... OK, e1ef6a6a36d199dd6b49a254618c21b1</font></div><div><font class="Apple-style-span" face="Courier">Signing (RSA/SHA1) with key... OK</font></div><div><font class="Apple-style-span" face="Courier">Signing (RSA/SHA256) with key... OK</font></div><div><font class="Apple-style-span" face="Courier">Deleting key... OK</font></div><div><font class="Apple-style-span" face="Courier"><br></font></div><div><font class="Apple-style-span" face="Courier">Generating 768-bit RSA key... OK</font></div><div><font class="Apple-style-span" face="Courier">Extracting key identifier... OK, b0445c441c2037a53db99a39f5719202</font></div><div><font class="Apple-style-span" face="Courier">Signing (RSA/SHA1) with key... OK</font></div><div><font class="Apple-style-span" face="Courier">Signing (RSA/SHA256) with key... OK</font></div><div><font class="Apple-style-span" face="Courier">Deleting key... OK</font></div><div><font class="Apple-style-span" face="Courier"><br></font></div><div><font class="Apple-style-span" face="Courier">Generating 1024-bit RSA key... OK</font></div><div><font class="Apple-style-span" face="Courier">Extracting key identifier... OK, a26310c7013b94fe980574a5470c1a42</font></div><div><font class="Apple-style-span" face="Courier">Signing (RSA/SHA1) with key... OK</font></div><div><font class="Apple-style-span" face="Courier">Signing (RSA/SHA256) with key... OK</font></div><div><font class="Apple-style-span" face="Courier">Signing (RSA/SHA512) with key... OK</font></div><div><font class="Apple-style-span" face="Courier">Deleting key... OK</font></div><div><font class="Apple-style-span" face="Courier"><br></font></div><div><font class="Apple-style-span" face="Courier">Generating 1536-bit RSA key... OK</font></div><div><font class="Apple-style-span" face="Courier">Extracting key identifier... OK, e074ec0e9da74296d8d2614d35089306</font></div><div><font class="Apple-style-span" face="Courier">Signing (RSA/SHA1) with key... OK</font></div><div><font class="Apple-style-span" face="Courier">Signing (RSA/SHA256) with key... OK</font></div><div><font class="Apple-style-span" face="Courier">Signing (RSA/SHA512) with key... OK</font></div><div><font class="Apple-style-span" face="Courier">Deleting key... OK</font></div><div><font class="Apple-style-span" face="Courier"><br></font></div><div><font class="Apple-style-span" face="Courier">Generating 2048-bit RSA key... OK</font></div><div><font class="Apple-style-span" face="Courier">Extracting key identifier... OK, 765935b2ec956752d9c97536ef0d646f</font></div><div><font class="Apple-style-span" face="Courier">Signing (RSA/SHA1) with key... OK</font></div><div><font class="Apple-style-span" face="Courier">Signing (RSA/SHA256) with key... OK</font></div><div><font class="Apple-style-span" face="Courier">Signing (RSA/SHA512) with key... OK</font></div><div><font class="Apple-style-span" face="Courier">Deleting key... OK</font></div><div><font class="Apple-style-span" face="Courier"><br></font></div><div><font class="Apple-style-span" face="Courier">Generating 4096-bit RSA key... OK</font></div><div><font class="Apple-style-span" face="Courier">Extracting key identifier... OK, 76dc156d3e25286e82e228834d93d794</font></div><div><font class="Apple-style-span" face="Courier">Signing (RSA/SHA1) with key... OK</font></div><div><font class="Apple-style-span" face="Courier">Signing (RSA/SHA256) with key... OK</font></div><div><font class="Apple-style-span" face="Courier">Signing (RSA/SHA512) with key... OK</font></div><div><font class="Apple-style-span" face="Courier">Deleting key... OK</font></div><div><font class="Apple-style-span" face="Courier"><br></font></div><div><font class="Apple-style-span" face="Courier">ods-hsmutil: symbol lookup error: ods-hsmutil: undefined symbol: strlcpy</font></div></div><div>____________________</div><div><br></div><div><br></div><div>What is wrong ?</div><div><br></div><div>Thanks</div><div><br></div><div>Claude Gross</div></body></html>