[Opendnssec-user] Re: Cannot sign .FR, stops at fr.in.sorted

[Matthijs Mekking]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Stephane,

The signer thinks it does not need to output a new zone, because no new
signatures where created.

Oct 29 11:41:25 jezabel ods-signerd: signer stderr: signer: number of
signatures created: 0 (0 rr/sec)
Oct 29 11:41:25 jezabel ods-signerd: No new signatures, keeping zone

You can try to clear the internal information and do a fresh resign:

> ods-signer clear fr; ods-signer sign fr

Best regards,

Matthijs

Stephane Bortzmeyer wrote:
> On Wed, Oct 28, 2009 at 04:38:37PM +0100,
>  Rickard Bellgrim <rickard.bellgrim at iis.se> wrote 
>  a message of 83 lines which said:
> 
>> Update the system
>> "ods-ksmutil update"
> 
> Done. Now, I no longer see the auditor running (and no trace of it in
> the logs) but it still fails (no /var/opendnssec/signed/fr). 
> 
> The log says:
> 
> ...
> Oct 29 11:40:22 jezabel ods-signerd: stderr from nseccer: nsec3er: 236 NSEC3 records generated (7 rr/sec) 
> Oct 29 11:40:22 jezabel ods-signerd: Run command: '/usr/local/libexec/opendnssec/signer -c /etc/opendnssec/conf.xml -p /var/opendnssec/tmp/fr.signed -w /var/opendnssec/tmp/fr.signed2 -r'
> Oct 29 11:40:22 jezabel ods-signerd: write to subp:  
> Oct 29 11:40:22 jezabel ods-signerd: write to subp: :origin fr
> Oct 29 11:40:22 jezabel ods-signerd: write to subp: :soa_ttl 3600
> Oct 29 11:40:22 jezabel ods-signerd: write to subp: :soa_minimum 3600
> Oct 29 11:40:22 jezabel ods-signerd: set serial to 1256812822
> Oct 29 11:40:22 jezabel ods-signerd: write to subp: :expiration 20091105104022
> Oct 29 11:40:22 jezabel ods-signerd: write to subp: :expiration_denial 20091105104022
> Oct 29 11:40:22 jezabel ods-signerd: write to subp: :jitter 43200
> Oct 29 11:40:22 jezabel ods-signerd: write to subp: :inception 20091029103522
> Oct 29 11:40:22 jezabel ods-signerd: write to subp: :refresh 20091102104022
> Oct 29 11:40:22 jezabel ods-signerd: write to subp: :refresh_denial 20091102104022
> Oct 29 11:40:22 jezabel ods-signerd: use signature key: 9a751331baf10005a7de8a2a776f6884
> Oct 29 11:40:22 jezabel ods-signerd: write to subp: :add_ksk 9a751331baf10005a7de8a2a776f6884 7 257
> Oct 29 11:40:22 jezabel ods-signerd: use signature key: f87fd06a95e8cd187c6d826a5905eaae
> Oct 29 11:40:22 jezabel ods-signerd: write to subp: :add_zsk f87fd06a95e8cd187c6d826a5905eaae 7 256
> Oct 29 11:41:25 jezabel ods-signerd: signer stderr: signer: number of signatures created: 0 (0 rr/sec) 
> Oct 29 11:41:25 jezabel ods-signerd: No new signatures, keeping zone
> Oct 29 11:41:25 jezabel ods-signerd: worker 3 acquiring lock
> Oct 29 11:41:25 jezabel ods-signerd: worker 3 acquired lock
> Oct 29 11:41:25 jezabel ods-signerd: no task for worker 3, sleep for 6694.89069414
> Oct 29 11:41:25 jezabel ods-signerd: worker 3 released lock by going to wait (for ttime)
> _______________________________________________
> Opendnssec-user mailing list
> Opendnssec-user at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBAgAGBQJK6XPKAAoJEA8yVCPsQCW5o+UIANyhF6x151CAHJRPi7SIxAzc
0wwf8KigIuOk4EAEdRKb8AO2MQfFcqpSMYYycTRS91KYSJk5b++dpsXSHSDHTNNY
4lfm10jEwRXFRq+cO0fhe08GEJPcrFEMGn3Wb8GWRABjJawo1vZt4YP/RFuCMYFc
XN1EXrwFFut/sfS6TBruGXDmwVmWD72IWoiPCbF/gE/aqpUIMgK+lzbsPcn+pATa
gTkI8jyoXZF8BS2pdP05PM+EhfMwQ6w1FEdthJLypasqumJ8d71ybE023FM/Xszz
OXOdXoHNt1a29gM6Eqyp2VLnwB1WyW4yqNHyGasgnW5/ahaOlvBAVRETZz21vW8=
=6Emb
-----END PGP SIGNATURE-----