[Opendnssec-user] Signature set has no RRSIG record?
Eivind Olsen
eivind at aminor.no
Tue Apr 26 12:18:42 UTC 2011
I have an issue here, running OpenDNSSEC 1.2.1.
Automatic re-signing seems to have had some issues, giving me entries like
these in my logs:
Apr 26 13:11:47 vimes ods-signerd: signature set has no RRSIG record: drop
signatures for RRset[50]
Apr 26 13:11:47 vimes ods-signerd: error creating RRSIG for rrset[50]
Apr 26 13:11:47 vimes ods-signerd: unable to sign zone data: failed to
sign domain
Apr 26 13:11:47 vimes ods-signerd: task [sign zone bohrnag.org] failed
So, I tried forcing a signing through ods-signer, and got these:
Apr 26 14:02:45 vimes ods-signerd: cmdhandler: zone bohrnag.org scheduled
for immediate re-sign
Apr 26 14:02:45 vimes ods-signerd: signature set has no RRSIG record: drop
signatures for RRset[50]
Apr 26 14:02:45 vimes ods-signerd: error creating RRSIG for rrset[50]
Apr 26 14:02:45 vimes ods-signerd: unable to sign zone data: failed to
sign domain
Apr 26 14:02:45 vimes ods-signerd: task [sign zone bohrnag.org] failed
So, next step: I restarted OpenDNSSEC:
Apr 26 14:06:39 vimes ods-enforcerd: opendnssec started (version 1.2.1),
pid 85434
Apr 26 14:06:39 vimes ods-signerd: signer engine started
Apr 26 14:06:42 vimes ods-auditor[85442]: Key (498) has gone straight to
active use without a prepublished phase
Apr 26 14:06:42 vimes ods-signerd: task [audit zone bohrnag.org] failed
Apr 26 14:07:04 vimes ods-signerd: cmdhandler: zone bohrnag.org scheduled
for immediate re-sign
Apr 26 14:07:06 vimes ods-auditor[85460]: Key (498) has gone straight to
active use without a prepublished phase
Apr 26 14:07:06 vimes ods-signerd: task [audit zone bohrnag.org] failed
Apr 26 14:09:04 vimes ods-auditor[85486]: Key (498) has gone straight to
active use without a prepublished phase
Apr 26 14:09:04 vimes ods-signerd: task [audit zone bohrnag.org] failed
It's probably me doing something weird, but what?
Anything I should look into in particular? Or any other information I
should post?
Regards
Eivind Olsen
eivind at aminor.no
More information about the Opendnssec-user
mailing list