[Opendnssec-develop] Hudson/Jenkins test

Siôn Lloyd sion at nominet.org.uk
Fri Jul 15 13:39:07 UTC 2011


I just ran the simulate_test_engine.sh script (twice, to make sure) and 
we see some errors:

Zone unknown.rr.org was not correctly signed
Zone example.com was not correctly signed
Zone all.rr.org failed successfully
Zone all.rr.binary.org signed successfully

There are a number of auditor entries in the logs, and I am not sure if 
we expect some of them (given that one zone is expected to fail). Some 
examples:

Jul 15 14:28:23 sion ods-auditor[27776]: RRSIGS should include algorithm 
RSASHA256 for unknown.rr.org, SOA, have :
Jul 15 14:28:23 sion ods-auditor[27776]: RRSet (unknown.rr.org, SOA) 
failed verification : No signatures in the RRSet : unknown.rr.org, SOA, 
tag = none

Jul 15 14:28:23 sion ods-auditor[27776]: non-DNSSEC RRSet TYPE731 
included in Output that was not present in Input : a.unknown.rr.org. 
3600 IN TYPE731 \# 6 abcdef012345
Jul 15 14:28:23 sion ods-auditor[27776]: Output zone does not contain 
non-DNSSEC RRSet : TYPE731, a.unknown.rr.org. 3600 CLASS32 TYPE731 \# 6 
abcdef012345

Jul 15 14:28:23 sion ods-auditor[27776]: non-DNSSEC RRSet TYPE62347 
included in Output that was not present in Input : b.unknown.rr.org. 
3600 IN TYPE62347 \# 0
Jul 15 14:28:23 sion ods-auditor[27776]: Output zone does not contain 
non-DNSSEC RRSet : TYPE62347, b.unknown.rr.org. 3600 HS TYPE62347 \# 0

Jul 15 14:28:24 sion ods-auditor[27783]: RRSet (ns1.example.com, SSHFP) 
failed verification : Signature failed to cryptographically verify, tag 
= 20170

Also; the signer segfaults as it shuts down:

Jul 15 14:28:34 sion ods-signerd: [engine] signer shutdown
Jul 15 14:28:35 sion kernel: [21587.173476] ods-signerd[27721]: segfault 
at 20 ip 00007f07c696aee7 sp 00007fff2d9338a0 error 4 in 
libldns.so.1.6.10[7f07c6953000+47000]

This is on a 64-bit kubuntu 11 machine. Could someone confirm for me if 
they see the same behaviour? (maybe wait until Monday now.)


Cheers.

Sion



More information about the Opendnssec-develop mailing list