[Opendnssec-user] Something wrong when signing 100M zone

Matthijs Mekking matthijs at nlnetlabs.nl
Tue Jul 3 08:16:39 UTC 2012

Hash: SHA1


OpenDNSSEC should have no problems signing large zones. From the logs
you posted, I assume you are using 1.3.X. The signer fails to write
the zone due to an assertion failure. Either the adapter is missing or
the zone data is missing. This should be logged too, just before the
'Assertion error' message. You can get more detailed information when
you increase the verbosity (6 is the highest):

$ ods-signer verbosity 6

Does this still occur when you restart the signer?

Best regards,

On 07/03/2012 10:00 AM, 刘硕 wrote:
> Hi all, There is something wrong when I signed a zone named
> examplex, and I can see the signed file in /signed dir, but the log
> shows something wrong and I can't see the details of the signature
> result. Does anybody know what's the problem? Jul  3 15:55:14
> CST-BJ-103 ods-signerd: [tools] unable to write zone examplex:
> adapter failed (Assertion error) Jul  3 15:55:14 CST-BJ-103
> ods-signerd: [worker[2]] backoff task [read] for zone examplex with
> 480 seconds
> PS.I wanted to sign a zone larger than 100M, when I imported the
> zone and ods-signer the zone , that's the first time I saw the
> lines just as above shows, and after that whatever zone and no
> matter how large the size of zones are ,the signature details just
> dispeard and the above lines are the only gift I can get, so I
> wondered whether there is something wrong with opendnssec when
> dealing with large zones.
> Thank you all!
> ------------------------------------------------------------------------
Stuart Lau
> _______________________________________________ Opendnssec-user
> mailing list Opendnssec-user at lists.opendnssec.org 
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/


More information about the Opendnssec-user mailing list