[Opendnssec-develop] Re: [Opendnssec-commits] [keihatsu.kirei.se/svn/dnssec] r5372 - in trunk/OpenDNSSEC/signer/src: shared signer

Rickard Bellgrim rickard at opendnssec.org
Tue Aug 9 14:37:18 UTC 2011


On Mon, Aug 8, 2011 at 10:02 AM, Matthijs Mekking <matthijs at nlnetlabs.nl> wrote:
> Author: matthijs
> Date: 2011-08-08 10:02:54 +0200 (Mon, 08 Aug 2011)
> New Revision: 5372
>
> Modified:
>   trunk/OpenDNSSEC/signer/src/shared/hsm.c
>   trunk/OpenDNSSEC/signer/src/signer/keys.c
>   trunk/OpenDNSSEC/signer/src/signer/keys.h
> Log:
> Pivotal Story #16517425: Signature lifetime too long/short
> https://www.pivotaltracker.com/story/show/16517425
>
> port from branch 1.3

I am getting errors from this one.

Aug  9 14:19:20 fou ods-signerd: ../../../signer/src/shared/hsm.c at
58 could not pthread_mutex_lock(&key_id->key_lock): Invalid argument
Aug  9 14:19:20 fou ods-signerd: ../../../signer/src/shared/hsm.c at
78 could not pthread_mutex_unlock(&key_id->key_lock): Invalid argument
Aug  9 14:19:20 fou ods-signerd: ../../../signer/src/shared/hsm.c at
112 could not pthread_mutex_lock(&key_id->key_lock): Invalid argument
Aug  9 14:19:20 fou ods-signerd: ../../../signer/src/shared/hsm.c at
114 could not pthread_mutex_unlock(&key_id->key_lock): Invalid
argument

Another problem is that you now only get a single threaded signer
since there is a lock for the key. Would it be a solution to have a
local params in the lhsm_sign and get the non-volatile information
(owner, algorithm, flags) from the key_id?

// Rickard



More information about the Opendnssec-develop mailing list