[Opendnssec-develop] Enforcer died during production KSK rollover .nl

Antoin Verschuren antoin.verschuren at sidn.nl
Fri Oct 22 07:55:57 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 21-10-10 19:15, Jakob Schlyter wrote:
> On 21 okt 2010, at 18.10, Antoin Verschuren wrote:
> 
>> The error for the enforcer was: CKR_TOKEN_NOT_PRESENT
> 
> Was the HSM on-line and enabled when the error occurred?

Yes. I know from googling that this is a pkcs11 error that libhsm
probably just relays. The strange thing however is that the only thing
we did was restarting the ODS, but changed nothing to the hsm, to tokens
or to the config, and it just resumed. I can imagine a temporary
connection issue, but should it then die ?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAEBAgAGBQJMwUONAAoJEDqHrM883AgntiwIAMgtZkbjJ+VhJ0mMYLDuJ93e
LtvzLWpbqAevCvrLR40wAurLDMDiiXm+rhpRDNsfqSv+rvfUJKqKjVTyiVt5RkBZ
lqrYlZXbc5/HJCoGi+zw8dPn9+0f2liSTM5khod8pA7eAl4obDyasaq86b2d+ZZy
ttSuuvoJqzKhX9/RTHFguhJIHPO5MNXgURF56Qi2+ZN2POQ2ZX2imnGI2dPtWvTL
kalomwK6/ojqzsJFwRW/aAD2e027h85bTRUknYPjJeiE+8tV+sCuJJs0bxTuV9tV
YeOwq6asELoUenf5u6hwPoheC8rmJ+YmbumvmV2xD1YFKIw9621ov5Ix7IKLGus=
=3k1f
-----END PGP SIGNATURE-----



More information about the Opendnssec-develop mailing list