[Opendnssec-user] signerd problem

Mathieu Arnold mat at mat.cc
Thu Aug 2 13:55:55 UTC 2012


Hi,

Today, I got :

Aug  2 12:31:03 ns1 ods-signerd: [STATS] 240.143.79.in-addr.arpa RR[count=0
time=0(sec)] NSEC[count=0 time=0(sec)] RRSIG[new=43 reused=483 time=0(sec)
avg=0(sig/sec)] AUDIT[time=7(sec)] TOTAL[time=7(sec)]
Aug  2 12:31:09 ns1 ods-signerd: [hsm] idle libhsm connection, trying to
reopen
Aug  2 12:31:11 ns1 ods-signerd: [hsm] libhsm connection opened succesfully
Aug  2 12:31:11 ns1 ods-signerd: [drudger[1]] error creating libhsm context
Aug  2 12:31:11 ns1 ods-signerd: [worker[2]] sign zone
241.143.79.in-addr.arpa failed: 532 of 532 signatures failed
Aug  2 12:31:11 ns1 ods-signerd: [worker[2]] backoff task [sign] for zone
241.143.79.in-addr.arpa with 60 seconds
Aug  2 12:31:11 ns1 ods-signerd: [drudger[2]] error creating libhsm context
Aug  2 12:31:16 ns1 ods-signerd: [worker[2]] sign zone
a.0.1.e.e.1.1.c.2.0.0.2.ip6.arpa failed: 14 of 14 signatures failed
Aug  2 12:31:16 ns1 ods-signerd: [worker[2]] backoff task [sign] for zone
a.0.1.e.e.1.1.c.2.0.0.2.ip6.arpa with 60 seconds
Aug  2 12:31:32 ns1 ods-signerd: [worker[2]] sign zone
242.143.79.in-addr.arpa failed: 520 of 520 signatures failed
Aug  2 12:31:32 ns1 ods-signerd: [worker[2]] backoff task [sign] for zone
242.143.79.in-addr.arpa with 60 seconds


And after that, it continued to backoff the signing process for all the
zones, I had to stop/start the signer to get it working again...

opendnssec 1.3.9
softhsm 1.3.3
freebsd 8.2


-- 
Mathieu Arnold



More information about the Opendnssec-user mailing list