[Opendnssec-user] AXFR of signed zone - failed

[Daniel Salzman]

On 05/15/2012 03:22 PM, Matthijs Mekking wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi Daniel,
>
> Does this still occur in trunk, revision r6336?

The revision r6336 works fine now :-)

> I committed a fix today, that checks if the query overflows. I
> encountered an assertion error when doing a large outbound zone
> transfer, no TSIG. I guess you use TSIG, and hit a similar problem
> already when adding the TSIG RR.
>

Yes, I used TSIG.


Thank you
Dan

> Best regards,
> Matthijs
>
> On 05/15/2012 01:29 PM, Daniel Salzman wrote:
>> Hi, when downloading signed zone from OpenDNSSEC (1.4.0a1,
>> 1.4.0-trunk), the ods-signerd breaks. The zone is uploaded and
>> signed successfully .
>>
>> May 15 12:48:04 nic ods-signerd: [socket] handle incoming tcp
>> connection May 15 12:48:04 nic ods-signerd: [netio] handler added
>> May 15 12:48:04 nic ods-signerd: [dnshandler] netio dispatch May
>> 15 12:48:04 nic ods-signerd: [socket] incoming tcp message May 15
>> 12:48:04 nic ods-signerd: [socket] TCP_READ: reset query May 15
>> 12:48:04 nic ods-signerd: [socket] TCP_READ: bytes transmitted 0
>> May 15 12:48:04 nic ods-signerd: [socket] TCP_READ: bytes
>> transmitted 2 (received 2) May 15 12:48:04 nic ods-signerd:
>> [socket] TCP_READ: bytes transmitted 112 (received 110) May 15
>> 12:48:04 nic ods-signerd: [query] tsig ok May 15 12:48:04 nic
>> ods-signerd: [query] incoming query qtype=AXFR for zone test.cz
>> May 15 12:48:04 nic ods-signerd: [query] refused May 15 12:48:04
>> nic ods-signerd: [socket] query processed qstate=0 May 15 12:48:04
>> nic ods-signerd: [socket] TCP_READ: clear buffer: tcplen 110 May
>> 15 12:48:04 nic ods-signerd: [dnshandler] netio dispatch May 15
>> 12:48:04 nic ods-signerd: [socket] TCP_WRITE: bytes transmitted 2
>> (sent 2) May 15 12:48:04 nic ods-signerd: [socket] TCP_WRITE:
>> bytes transmitted 112 May 15 12:48:04 nic ods-signerd: [socket]
>> TCP_WRITE: tcplen 110 May 15 12:48:04 nic ods-signerd: [socket]
>> TCP_WRITE: sizeof tcplen 2 May 15 12:48:04 nic ods-signerd:
>> [dnshandler] netio dispatch May 15 12:48:04 nic ods-signerd:
>> [socket] incoming tcp message May 15 12:48:04 nic ods-signerd:
>> [socket] TCP_READ: reset query May 15 12:48:04 nic ods-signerd:
>> [socket] TCP_READ: bytes transmitted 0 May 15 12:48:04 nic
>> ods-signerd: [netio] handler removed May 15 12:48:04 nic
>> ods-signerd: [dnshandler] netio dispatch May 15 12:48:21 nic
>> ods-signerd: [socket] handle incoming tcp connection May 15
>> 12:48:21 nic ods-signerd: [netio] handler added May 15 12:48:21
>> nic ods-signerd: [dnshandler] netio dispatch May 15 12:48:21 nic
>> ods-signerd: [socket] incoming tcp message May 15 12:48:21 nic
>> ods-signerd: [socket] TCP_READ: reset query May 15 12:48:21 nic
>> ods-signerd: [socket] TCP_READ: bytes transmitted 0 May 15
>> 12:48:21 nic ods-signerd: [socket] TCP_READ: bytes transmitted 2
>> (received 2) May 15 12:48:21 nic ods-signerd: [socket] TCP_READ:
>> bytes transmitted 112 (received 110) May 15 12:48:21 nic
>> ods-signerd: [query] tsig ok May 15 12:48:21 nic ods-signerd:
>> [query] incoming query qtype=AXFR for zone test.cz May 15 12:48:21
>> nic ods-signerd: [acl] match 10.10.10.31 May 15 12:48:21 nic
>> ods-signerd: [query] incoming axfr request for zone test.cz May 15
>> 12:48:21 nic ods-signerd: [file] open file  file=test.cz.axfr
>> mode=reading May 15 12:48:21 nic ods-signerd: [axfr] set soa in
>> axfr zone test.cz May 15 12:48:21 nic ods-signerd: [axfr] read rr
>> at line 2 May 15 12:48:21 nic ods-signerd: [axfr] add rr at line 2
>> May 15 12:48:21 nic ods-signerd: [axfr] read rr at line 3 May 15
>> 12:48:21 nic ods-signerd: [axfr] add rr at line 3 . . May 15
>> 12:48:22 nic ods-signerd: [axfr] read rr at line 999 May 15
>> 12:48:22 nic ods-signerd: [axfr] add rr at line 999 May 15 12:48:22
>> nic ods-signerd: [axfr] read rr at line 1000 May 15 12:48:22 nic
>> ods-signerd: [axfr] rr at line 1000 does not fit May 15 12:48:22
>> nic ods-signerd: [axfr] return part axfr zone test.cz May 15
>> 12:48:22 nic ods-signerd: [socket] query processed qstate=2 May 15
>> 12:48:22 nic ods-signerd: wire/buffer.c:567: buffer_write_u32_at:
>> assertion buffer_available_at(buffer, at, sizeof(data)) failed
>>
>> Dan
>>
>> _______________________________________________ Opendnssec-user
>> mailing list Opendnssec-user at lists.opendnssec.org
>> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iQEcBAEBAgAGBQJPsliFAAoJEA8yVCPsQCW546UH/iu5aj7Y1i4QusyDw43pMHZM
> eRbqM+IccxKVvCluYusQmJUEjB73r+z2f238WB9MHQa53RPDsyz7BUrU5M2RvQpH
> SzLkjKykrrjjo+TFUYIH/66sgp0IkwKfGU1F4BdgYJSHyZ4t72W7jZFChvPWM8Y1
> OjKMjZpCcAb6WTn9nrkYyczIbBRi6vdM982oWyQ/Y2RJzpX+HLP/24Io1ubi4M//
> FD/0Gior2ioaGo7hWWgvtwyAgKowjClPHIxjL+5Pd4sEJ2z7EWdHJ2qOGVpX23CV
> hke1L2TDKVzceulvUyASVkzWuAoDiIP3ljlinjN5ex9XtKW6z+C58HXdNorT08w=
> =SXZZ
> -----END PGP SIGNATURE-----