[Opendnssec-user] SSL error "error is (1:113)" for enforcerd and signerd

[Anne van Bemmelen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello list,
In our test environment the signing of a zonefile went well with the
following specs:

RedHat 2.6.18-308.4.1.el5, 64 bit
OpenDNSSEC 1.3.5
openssl-0.9.8e-22.el5_8.1.x86_64
openssl-0.9.8e-22.el5_8.1.i686

Recently I noticed the following errors:
Error message is : error:140E0114:SSL routines:SSL_shutdown:uninitialized
Error is (1 : 113)

Shortly openssl was updated to:
openssl-0.9.8e-22.el5_8.3.x86_64
openssl-0.9.8e-22.el5_8.3.i686

Since then the following errors appear:

After every "ods-control stop/start":
May  7 11:27:04 signerp1 ods-signerd: [engine] signer shutdown
May  7 11:27:15 signerp1 ods-enforcerd: opendnssec starting...
May  7 11:27:15 signerp1 ods-enforcerd: opendnssec forked OK...
May  7 11:27:15 signerp1 ods-enforcerd: opendnssec Parent exiting...
May  7 11:27:15 signerp1 ods-enforcerd: opendnssec started (version
1.3.5), pid 32441
May  7 11:27:15 signerp1 ods-enforcerd: SSL cipher list set to AES256-SHA
May  7 11:27:16 signerp1 ods-signerd: SSL cipher list set to AES256-SHA
May  7 11:27:18 signerp1 ods-enforcerd: Error message is :
error:140E0114:SSL routines:SSL_shutdown:uninitialized
May  7 11:27:18 signerp1 ods-enforcerd: Error is (1 : 113)
May  7 11:27:18 signerp1 ods-signerd: Error message is :
error:140E0114:SSL routines:SSL_shutdown:uninitialized
May  7 11:27:18 signerp1 ods-signerd: Error is (1 : 113)
May  7 11:27:18 signerp1 ods-enforcerd: HSM opened successfully.
May  7 11:27:18 signerp1 ods-signerd: [engine] signer started

After every "ods-ksmutil key list -v":
May  7 11:19:43 signerp1 ods-ksmutil: SSL cipher list set to AES256-SHA
May  7 11:19:46 signerp1 ods-ksmutil: Error message is :
error:140E0114:SSL routines:SSL_shutdown:uninitialized
May  7 11:19:46 signerp1 ods-ksmutil: Error is (1 : 113)

Yet the signing of the zone seems OK.

I have the following questions:
- - With respect to the signing proces: is this a harmless error?
- - Is this error related to the recent upgrade of openssl?

I appreciate any help.

- -- 
Met vriendelijke groet/Kind regards,
Anne van Bemmelen

SIDN | Utrechtseweg 310 | 6812 AR | Postbus 5022 |  6802 AE | ARNHEM
T +31 (0)26 352 55 00  | M +31 (0)6 15 06 33 96 | F +31 (0)26 352 55 05
anne.vanbemmelen at sidn.nl| www.sidn.nl| Key-ID: 0xB8A5F0B2
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJPp7jzAAoJEJLipR24pfCyFvcIAINVmksBhUTcNR/0w+tOr7oo
tHl4YwsSqTb5LH8akSO5QC2SVWQ9SbePQpFZ36N8zjgoRj8FPOomUizKDkj93TFS
3FXsKtRjyrxassqLXLXStlQ6ixYaGaHcldid5oEW0Jtt3FMzkHiZ73jhxi+5+hWq
6NzGjTW4qtWpTGplCxIzLcb1XrFVi0RvyhPGTJYKW9mD6jhc81Wcb8KVVC2VXVgV
/PPN153plRT0wpyhMROtPXd7wTYKe3JW0A57SBidFeXQZ1RZLE1lCO1j9PW8k1xb
bq0hs/ve1VXGoFXsFVv8ni2mcd03MF0S73DxjbGbg/vw7TIquZbb6kR2cjVoLAY=
=Pixc
-----END PGP SIGNATURE-----