[Opendnssec-develop] NSEC3ing fails in RC2
Rick Zijlker
rick.zijlker at sidn.nl
Thu May 6 15:04:09 UTC 2010
Hey all,
I can't figure out what's going wrong here. As I interpreted the
logging, the auditor says there is no NSEC3 record present, but there
are. Using default policy, with tighter timings (24H KSK rollover, 8H
ZSK rollover, 15min resign etc.) .
Can anyone help me out on this one?
LOGGING:
May 6 16:51:28 signer1 ods-enforcerd: opendnssec-enforcer starting...
May 6 16:51:28 signer1 ods-enforcerd: opendnssec-enforcer Parent
exiting...
May 6 16:51:28 signer1 ods-enforcerd: opendnssec-enforcer forked OK...
May 6 16:51:28 signer1 ods-enforcerd: opendnssec-enforcer started
(version 1.1.0rc2), pid 24419
May 6 16:51:28 signer1 ods-enforcerd: HSM opened successfully.
May 6 16:51:28 signer1 ods-enforcerd: Reading config
"/etc/opendnssec/conf.xml"
May 6 16:51:28 signer1 ods-enforcerd: Reading config schema
"/usr/local/share/opendnssec/conf.rng"
May 6 16:51:28 signer1 ods-enforcerd: Communication Interval: 3600
May 6 16:51:28 signer1 ods-enforcerd: No DS Submit command supplied
May 6 16:51:28 signer1 ods-enforcerd: SQLite database set to:
/var/opendnssec/kasp.db
May 6 16:51:28 signer1 ods-enforcerd: Log User set to: local0
May 6 16:51:28 signer1 ods-enforcerd: Switched log facility to: local0
May 6 16:51:28 signer1 ods-enforcerd: Connecting to Database...
May 6 16:51:28 signer1 ods-enforcerd: Policy default found.
May 6 16:51:28 signer1 ods-enforcerd: Key sharing is Off.
May 6 16:51:28 signer1 ods-enforcerd: SoftHSM: C_GenerateKeyPair: Key
pair generated
May 6 16:51:28 signer1 ods-enforcerd: Created KSK size: 2048, alg: 7
with id: eb57c8ad8ca6220932bdf15247351f19 in repository: SoftHSM and
database.
May 6 16:51:29 signer1 ods-enforcerd: SoftHSM: C_GenerateKeyPair: Key
pair generated
May 6 16:51:29 signer1 ods-enforcerd: Created KSK size: 2048, alg: 7
with id: 0424219554651888c2d6287eb85a8ebf in repository: SoftHSM and
database.
May 6 16:51:29 signer1 ods-enforcerd: SoftHSM: C_GenerateKeyPair: Key
pair generated
May 6 16:51:29 signer1 ods-enforcerd: Created ZSK size: 1024, alg: 7
with id: ee47a4ad43b7db7d3d155781c6a94ee2 in repository: SoftHSM and
database.
May 6 16:51:29 signer1 ods-enforcerd: SoftHSM: C_GenerateKeyPair: Key
pair generated
May 6 16:51:30 signer1 ods-enforcerd: Created ZSK size: 1024, alg: 7
with id: 357b7f1f5968385518e734dc3bc9850b in repository: SoftHSM and
database.
May 6 16:51:30 signer1 ods-enforcerd: zonelist filename set to
/etc/opendnssec/zonelist.xml.
May 6 16:51:30 signer1 ods-enforcerd: Zone ods found.
May 6 16:51:30 signer1 ods-enforcerd: Policy for ods set to default.
May 6 16:51:30 signer1 ods-enforcerd: Config will be output to
/var/opendnssec/signconf/ods.xml.
May 6 16:51:30 signer1 ods-enforcerd: INFO: Promoting ZSK from publish
to active as this is the first pass for the zone
May 6 16:51:30 signer1 ods-enforcerd: WARNING: Making non-backed up ZSK
active, PLEASE make sure that you know the potential problems of using
keys which are not recoverable
May 6 16:51:30 signer1 ods-signerd: Received command: 'update ods'
May 6 16:51:30 signer1 ods-signerd: Scheduling task to sign zone ods at
1273157488.15 with resign time 600
May 6 16:51:30 signer1 ods-signerd: Scheduling task to sign zone ods at
1273157488.15 with resign time 600
May 6 16:51:30 signer1 ods-signerd: Zone action to perform: 3
May 6 16:51:30 signer1 ods-enforcerd: Could not call signer engine
May 6 16:51:30 signer1 ods-enforcerd: Will continue: call 'ods-signer
update' to manually update zones
May 6 16:51:30 signer1 ods-enforcerd: Disconnecting from Database...
May 6 16:51:30 signer1 ods-enforcerd: Sleeping for 3600 seconds.
May 6 16:51:30 signer1 ods-signerd: Client socket shut down
May 6 16:51:30 signer1 ods-signerd: Preprocessing signed zone: ods
May 6 16:51:30 signer1 ods-signerd: No signed zone yet
May 6 16:51:30 signer1 ods-signerd: Sorting zone: ods
May 6 16:51:30 signer1 ods-signerd: Nseccing zone: ods
May 6 16:51:30 signer1 ods-signerd: No information yet for key
eb57c8ad8ca6220932bdf15247351f19
May 6 16:51:30 signer1 ods-signerd: Generating DNSKEY RR for
eb57c8ad8ca6220932bdf15247351f19
May 6 16:51:30 signer1 ods-signerd: Found key
eb57c8ad8ca6220932bdf15247351f19
May 6 16:51:30 signer1 ods-signerd: No information yet for key
ee47a4ad43b7db7d3d155781c6a94ee2
May 6 16:51:30 signer1 ods-signerd: Generating DNSKEY RR for
ee47a4ad43b7db7d3d155781c6a94ee2
May 6 16:51:30 signer1 ods-signerd: Found key
ee47a4ad43b7db7d3d155781c6a94ee2
May 6 16:51:30 signer1 ods-signerd: No information yet for key
357b7f1f5968385518e734dc3bc9850b
May 6 16:51:30 signer1 ods-signerd: Generating DNSKEY RR for
357b7f1f5968385518e734dc3bc9850b
May 6 16:51:30 signer1 ods-signerd: Found key
357b7f1f5968385518e734dc3bc9850b
May 6 16:51:30 signer1 ods-signerd: signer stderr: Warning: unable to
open /var/opendnssec/tmp/ods.signed: No such file or directory,
performing full zone sign
May 6 16:51:30 signer1 ods-signerd: signer stderr: signer: number of
signatures created: 72 (within a second)
May 6 16:51:30 signer1 ods-signerd: Created 72 new signatures
May 6 16:51:30 signer1 ods-signerd: Running auditor on zone
May 6 16:51:31 signer1 ods-auditor[24448]: Auditor started
May 6 16:51:31 signer1 ods-auditor[24448]: Auditor starting on ods
May 6 16:51:31 signer1 ods-auditor[24448]: SOA differs : from 1000 to
1273157490
May 6 16:51:31 signer1 ods-auditor[24448]: Auditing ods zone : NSEC3
SIGNED
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns2.label21.ods (0500q2sct81770labmqd07qg58u9nf1h.ods) which was not
covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns3.label17.ods (06ba5j2jegq44jfntoeaaej09n5jm6a8.ods) which was not
covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns4.label22.ods (0pgfld8lg2n0uh432q4q6ajd19uistqo.ods) which was not
covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns4.label14.ods (15igbgmrf4cla49bikads1tfqepnkl5u.ods) which was not
covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns5.label25.ods (16o5ithnkd0h2076590trkbd21bdf299.ods) which was not
covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns3.label8.ods
(1f458tjkcpk555ms7rgrr9f06nlg5hs0.ods) which was not covered by an NSEC3
record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns1.label6.ods
(1qpoohlmjoveluert9s26og50crurgh5.ods) which was not covered by an NSEC3
record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns6.label11.ods (1u3jah5m0tnc7kq8usqrkmtf34v3j4pc.ods) which was not
covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns6.label13.ods (2a4velsj96qmuupcv6i6i9ll1r0ksjm7.ods) which was not
covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found domain
(ns4.label29.ods) whose hash (2s24haq50m31l4br2kcdl5jopp508ef8.ods) is
between owner (2m05mung7vu3n9qtdh3vmu0b585pdl2b.ods) and next_hashed
(3v5ieqoqrk1qnl5uft39sh4lfuqsegcj.ods)for non-optout NSEC3
May 6 16:51:31 signer1 ods-auditor[24448]: ERROR : expected at
ns4.label29.ods (2m05mung7vu3n9qtdh3vmu0b585pdl2b.ods) but found A
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns4.label9.ods
(2scoild81jadchp0canf7sh9bedmc49k.ods) which was not covered by an NSEC3
record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns3.label18.ods (32dbcbfngc06qenimh6s1qij67kbuspt.ods) which was not
covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns1.label30.ods (34nj4k3fcbtpfnbt7l8bsm5uein0kdaf.ods) which was not
covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns2.label30.ods (3hs8tvtfbhm8bro055arpsg5ksf3l9ue.ods) which was not
covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns6.label30.ods (4040ubcevebghn5s7c1ogods8ue8aspm.ods) which was not
covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns2.label14.ods (439m51qiojp0gb4bbl19em529h6rfu5c.ods) which was not
covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns5.label4.ods
(4ktt7ekohnh68vbpcll4k7di9p2ff84g.ods) which was not covered by an NSEC3
record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns5.label21.ods (4smlu9arc4vvbd9f8tm2o9ihmufdrv3s.ods) which was not
covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns4.label32.ods (5985m4vgtrauoies0u5mjfl5frde4r0f.ods) which was not
covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns3.label14.ods (5kascm0vmrlojane8q7ebv5hjrqi7cgn.ods) which was not
covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns2.label22.ods (5u4gqjhklhfcr03h1gr5fai2ar9pi0m2.ods) which was not
covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns3.label4.ods
(65urmqflp4r8lsfme7kfpb54b2v5qpma.ods) which was not covered by an NSEC3
record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns1.label5.ods
(6ct35gcbbsgh1j5sahsiisv1eit444u8.ods) which was not covered by an NSEC3
record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for ns6.label4.ods
(6e15lbkb0gujeh663tht6p8qjpv93cvn.ods) which was not covered by an NSEC3
record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns3.label22.ods (6u4kt6d91rsh89na32qp0vkg9968ejsa.ods) which was not
covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns6.label33.ods (6unkss61rm9e7pfp265uliqec0m6o4ll.ods) which was not
covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
some.ns.at.label7.ods (70mbpd0n8t6s7krbca8eq50d6oiu2vto.ods) which was
not covered by an NSEC3 record
May 6 16:51:31 signer1 ods-auditor[24448]: Found RRs for
ns2.label34.ods (7bq2ansdhctb00up3btett7lr9l2kup8.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns6.label14.ods (7jrlt4kku7nc0bf0amhubr8hv2fkflsb.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns3.label10.ods (7m047daqo4eiujds61s9t1qcr5sv2s1a.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns5.label34.ods (7n8ef6dlqsck2jae9d132uvo3nu2rtjp.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns5.label17.ods (7p0brl3i0vojkb2lm29t0m4mq5f2o90p.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label8.ods
(7sbl2laio94tb9rmg367kpj0s3t6n9qo.ods) which was not covered by an NSEC3
record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns2.label10.ods (7vhhr0nrcufea2b367fti5qqo9cipi8s.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns2.label25.ods (8pu2kvr2c513t606lc9rvv85q38gbvfg.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label9.ods
(8r78m0tsfjgfk0vrtbqfpdj978gm0ri1.ods) which was not covered by an NSEC3
record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns2.label13.ods (8rmmclt46ief0csi6rhvh8miae8281a6.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label6.ods
(9517n9q0ohaddftd9jgnb0hi1hoh3hml.ods) which was not covered by an NSEC3
record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns4.label33.ods (9gfku9lgt9ksp2enes7orlpb9ad581lj.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns6.label21.ods (9l26ehlrjqfv059cipqs30to966l3ioe.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns5.label10.ods (9p5tbff6k4iktts6eipfsfce1ili078j.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns5.label13.ods (adabo19jemopvks1rcju794nq3npccrs.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns3.label32.ods (besq4if7688o3rd1jb4jf7uf7t5r6dj0.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns4.label30.ods (bje9l4b2jjes8v3og0r0r5vvo61jjskp.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns1.label17.ods (bqd6aku51afcg5f3qpfaqu7hr6vqmb67.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns2.label32.ods (buug5ukgu1q7d2dkqhh9iamrsr90ueb9.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label5.ods
(cbc50kjttjlegij5e2qdbggcemj2a2e2.ods) which was not covered by an NSEC3
record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns5.label22.ods (cph6ad3nmj3ub8cjks30a4tj0l53grvr.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns5.label32.ods (crff0fta791en33ajtok91ubv5li3jr5.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns2.label11.ods (cuoilmom3rgbq42e3lnueg0hskq736rj.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns4.label17.ods (d2pn32kv32pou650lfsoo7k4nq7eetn7.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label4.ods
(dob2dgf2glfmohdagm2jfpkkgpdigd7i.ods) which was not covered by an NSEC3
record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label5.ods
(dpp69tnld7rc0510k5gtgikfr55m6svm.ods) which was not covered by an NSEC3
record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns5.label29.ods (e2husvlqtuot3qcltheeavcneopv4djs.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns5.label18.ods (eqk1e45qf6ka8hs5ktkkqu17ll53tai9.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns3.label34.ods (esgtngcslho8q44cljvlvnn0rkdh2359.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns1.label18.ods (f3fih9dn1atrpkihbqollfv684h9r7m9.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label5.ods
(fgokfk9ame3hinec6fqcqfmlr49l3jk8.ods) which was not covered by an NSEC3
record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns6.label25.ods (fldeg2bj2ie18n6mkcvacpoa9or1ta4o.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label8.ods
(fq0hp42e1vutbsi72u3oifl6bmkdpvdf.ods) which was not covered by an NSEC3
record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns3.label13.ods (g406lbpft0po3dgjad4akqu34am8h1va.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found domain
(ns4.label18.ods) whose hash (gliqlf2dsr3raeb5q4kp33ehmcfchk6c.ods) is
between owner (gispjmo8f6ikpsgl5e3opvh400rd2e2b.ods) and next_hashed
(hvggdmjnc74khi6lenmbjl69eijm9vr7.ods)for non-optout NSEC3
May 6 16:51:32 signer1 ods-auditor[24448]: ERROR : expected at
ns4.label18.ods (gispjmo8f6ikpsgl5e3opvh400rd2e2b.ods) but found A
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns4.label34.ods (hmng8eakfoo28s8gfb9mok3s719m07cs.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label9.ods
(hq00uoahl4fgl473urf6s64e4i83cqt0.ods) which was not covered by an NSEC3
record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns2.label6.ods
(i6jtvrh97r4ejg4a7vskt2npi30mrpe0.ods) which was not covered by an NSEC3
record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns4.label10.ods (i7q89egv792cqnh20sa7mo7m9e6b1ad1.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns2.label33.ods (igs3bfm23c547spui06dg211ct59jjvq.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns4.label11.ods (iheoe1ihamd13kd7joku1k0lmdv83eh5.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns3.label11.ods (ir6r11kq3j7rlqbsar3o4fpthpdpdp8f.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label6.ods
(iu689jck711kug4voj6fbo5ku66hqvv2.ods) which was not covered by an NSEC3
record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns6.label10.ods (j0ktpagkcatp1p7tak03mt9fs8ae1a42.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns6.label18.ods (j19j0dqa8n0flaq8ofl41ft6sktct9r3.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns1.label25.ods (j6a7n0eth8ensauo4ka3f2vi68vrj04v.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns3.label29.ods (k1ll22l8v1ianvuffc76c83bcvhku9d3.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label9.ods
(k3l51jbpc9541tfqn65cuc944quq9gdk.ods) which was not covered by an NSEC3
record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns1.label21.ods (k68eorm0emlmt5tm4sg83ah826b6sklo.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns3.label6.ods
(kioqei1vk5o52jreoubv9atvfc2p4n5d.ods) which was not covered by an NSEC3
record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns1.label11.ods (l9q0db2vocmvfs30lcibjdcqkf44b890.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns6.label34.ods (lhlsenbs7di6uev2cblram47es6hknfh.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns2.label18.ods (lrd8ujf9rhrphqe4kvufkkch52fos5qg.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns1.label14.ods (lvdskfa9j3ttvfmt2mtu9g0qr0va99nc.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns2.label17.ods (mvldnb4msovvh633nquntp7m4bmql0i4.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns5.label30.ods (n6f0ovehd2jlfgl4ic6hhlmsomt7pgku.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns4.label4.ods
(n95hq28vmlqojnmbmrq39j0agav4km5q.ods) which was not covered by an NSEC3
record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns1.label13.ods (ngu2mf796q6dlniiu9764o8h94r2p7kg.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns1.label4.ods
(o2kifr82anr30ov65r9c509lmessse8r.ods) which was not covered by an NSEC3
record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns1.label10.ods (o2slm445gghnceep94v4f9bjlupl055m.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns2.label29.ods (o3h9kor3tudvj6l8ml3ff7f6jdkr8ln5.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns1.label22.ods (o52tg8p8as7r5p7094vigh8spshfsu72.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label9.ods
(o8klvgip3r28v9u2h3h2huetnp2s8cto.ods) which was not covered by an NSEC3
record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns4.label21.ods (oaapfs5b5smc9t1r97jnm2c6a8tmbktm.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns5.label14.ods (osq29se5r4sl9sfi1sfmkhmu915fmm8r.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns3.label21.ods (ot114galqt8vteg0b49av79k99sbavf8.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for ns6.label8.ods
(pk89iv6jt1p120v1vrr496nu18u1k04v.ods) which was not covered by an NSEC3
record
May 6 16:51:32 signer1 ods-auditor[24448]: Found RRs for
ns1.label34.ods (pneq2bqqla57r1u9t2rntha7e66bu3nj.ods) which was not
covered by an NSEC3 record
May 6 16:51:32 signer1 ods-auditor[24448]: Too much output from auditor
- suppressing for rest of run
Piece from the /var/opendnssec/tmp/ods.signed:
label21.ods. 3600 IN NS ns1.label21.ods.
label21.ods. 3600 IN NS ns2.label21.ods.
label21.ods. 3600 IN NS ns3.label21.ods.
label21.ods. 3600 IN NS ns4.label21.ods.
label21.ods. 3600 IN NS ns5.label21.ods.
label21.ods. 3600 IN NS ns6.label21.ods.
7kctrj4d4djg7p1trhmv1isaokun2ebi.ods. 1800 IN NSEC3 1 0 5
6730d04f36602116 83us8o3j96vtapffs8ktm6gb3pu6v9t3 NS
7kctrj4d4djg7p1trhmv1isaokun2ebi.ods. 1800 IN RRSIG NSEC3 7
2 1800 20100506170422 20100506144630 59493 ods.
KUbwz8kuGHlPeINluX5oW0zz1irsDCKkiufCwyk1SyqkavTpywuovyk1H9Ij92y0DjEth2hV
LRB4LCmuMvoT46lb
LkvWf7O4hsWWw+4jwbjQE1yeKyArW6n7tOMhy8jl3iIVF2mwPTDZFE7BMgm8FnzfYUQgSBLu
iUv9QAIrIxg= ;{id = 59493}
Cheers,
Rick
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20100506/88b24345/attachment.htm>
More information about the Opendnssec-develop
mailing list