[Opendnssec-user] signing process stops after NSEC3 step

[Matthijs Mekking]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Carsten,

- From the logs on, I could not see why de.eu.com was not signed properly:
The snippet stops where it gets interesting.

For me it worked fine with the default kasp policy. Is there anything
special you did before resigning this zone (updating policy, updating
zone, clearing internal information, ...)

Best regards,

Matthijs

Carsten Strotmann wrote:
> Hi,
> 
> I have a zone where the signing process stops after the NSEC3ing step.
> Other zones are signed well.
> 
> The zone is a test zone, I have attached the original zone file
> (de.eu.com-hosts) and all temporary files from /var/opendnssec/tmp
> 
> the last file is "de.eu.com-signed2" which has been been created but is
> left empty.
> 
> the trace from /var/log/messages
> 
> Oct 27 14:07:55 csmobile2 ods-signerd: Received command: 'stop'
> Oct 27 14:07:55 csmobile2 ods-signerd: close syslog
> Oct 27 14:08:04 csmobile2 ods-signerd: Scheduling task to sign zone
> de.eu.com at 1256648884.22 with resign time 7200
> Oct 27 14:08:04 csmobile2 ods-signerd: No output file found, seconds to
> resign: 0
> Oct 27 14:08:04 csmobile2 ods-signerd: Scheduling task to sign zone
> de.eu.com at 1256648884.22 with resign time 7200
> Oct 27 14:08:04 csmobile2 ods-signerd: Zone de.eu.com added
> Oct 27 14:08:04 csmobile2 ods-signerd: Scheduling task to sign zone
> example.com at 1256648884.22 with resign time 7200
> Oct 27 14:08:04 csmobile2 ods-signerd: No output file found, seconds to
> resign: 0
> Oct 27 14:08:04 csmobile2 ods-signerd: Scheduling task to sign zone
> example.com at 1256648884.22 with resign time 7200
> Oct 27 14:08:04 csmobile2 ods-signerd: Zone example.com added
> Oct 27 14:08:04 csmobile2 ods-signerd: opening socket:
> /var/run/opendnssec/engine.sock
> Oct 27 14:08:04 csmobile2 ods-signerd: Engine running
> Oct 27 14:08:04 csmobile2 ods-signerd: Zone action to perform: 3
> Oct 27 14:08:04 csmobile2 ods-signerd: Zone action to perform: 3
> Oct 27 14:08:04 csmobile2 ods-signerd: Resorting signed zone: de.eu.com
> Oct 27 14:08:04 csmobile2 ods-signerd: No signed zone yet
> Oct 27 14:08:04 csmobile2 ods-signerd: Preprocessing signed zone: de.eu.com
> Oct 27 14:08:04 csmobile2 ods-signerd: No signed zone yet
> Oct 27 14:08:04 csmobile2 ods-signerd: Sorting zone: de.eu.com
> Oct 27 14:08:04 csmobile2 ods-signerd: Preprocessing zone: de.eu.com
> Oct 27 14:08:04 csmobile2 ods-signerd: No information yet for key
> 05326fb9e612314411494402fa84681c
> Oct 27 14:08:04 csmobile2 ods-signerd: Generating DNSKEY RR for
> 05326fb9e612314411494402fa84681c
> Oct 27 14:08:04 csmobile2 ods-signerd: No information yet for key
> a31438bb2f42a2e3e78091a79a4cd659
> Oct 27 14:08:04 csmobile2 ods-signerd: Generating DNSKEY RR for
> a31438bb2f42a2e3e78091a79a4cd659
> Oct 27 14:08:04 csmobile2 ods-signerd: No information yet for key
> 9a6fe8784ecd5da93c9f259689fd5896
> Oct 27 14:08:04 csmobile2 ods-signerd: Generating DNSKEY RR for
> 9a6fe8784ecd5da93c9f259689fd5896
> Oct 27 14:08:04 csmobile2 ods-signerd: No information yet for key
> 57bb7a420e0975cf23f7da9ca6f4a0e7
> Oct 27 14:08:04 csmobile2 ods-signerd: Generating DNSKEY RR for
> 57bb7a420e0975cf23f7da9ca6f4a0e7
> Oct 27 14:08:04 csmobile2 ods-signerd: NSEC(3)ing zone: de.eu.com
> Oct 27 14:10:26 csmobile2 kernel: [  890.820357] Process accounting paused
> 
> Best regards
> 
> Carsten Strotmann
> Men & Mice
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Opendnssec-user mailing list
> Opendnssec-user at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBAgAGBQJK5xACAAoJEA8yVCPsQCW5yacH/jjSVW6SmFBR1RUcN3MtCvUa
k/NOsrBZ7OiDSssTlToS2KIC6gRfbo2nOoevQ5irxs5D9itj7JjdIi1TkRxldImN
UB7uYr6SVKuSnsQPyW+ppS57BQ2zFvjWf8kbvi0RGuwVAwIEDxJShGKT8DcDu/gu
ear/ZYyblWJYxf9t+6Lpxmmj9i8ITCHVeF/ShyG5qYFAQU3oGRFTOYLW56EV+8T1
QbEYb1zTf05aXoSxt2NHiaYVYUeJ9G2Vozt73NM2/AwXohesPCLUPr5gJhK1E/xw
ugLZ5rGDGWxPoUM3aRYGYyCZL+rop/dq9fECTIMQa9a2o8aGyD7BwaYsjZ12bh8=
=lroy
-----END PGP SIGNATURE-----