[Opendnssec-user] No Keys Generated Using AEP Keyper

刘硕 shuoleo at 126.com
Wed Jan 30 02:34:32 UTC 2013


Hi Dave,

I'm testing opendnssec-1.4.0rc2 with AEP Keyper, I can start the service now, ods-signerd and ods-enforcerd are running.
But when I use ods-ksmutil zone add -z dstest to add a new zone, I found no keys with ods-ksmuitl key list

I get logs like:
Jan 30 10:03:06 CST-BJ-103 ods-signerd: [cmdhandler] received command update --all[12]
Jan 30 10:03:06 CST-BJ-103 ods-signerd: [zonelist] read file /home/gtld/software/opendnssec-1.4.0rc2/etc/opendnssec/zonelist.xml
Jan 30 10:03:06 CST-BJ-103 ods-signerd: [worker[2]] configure zone dstest
Jan 30 10:03:06 CST-BJ-103 ods-signerd: [file] unable to stat file /home/gtld/software/opendnssec-1.4.0rc2/var/opendnssec/signconf/dstest.xml: ods_fopen() failed
Jan 30 10:03:06 CST-BJ-103 ods-signerd: [zone] zone dstest signconf file /home/gtld/software/opendnssec-1.4.0rc2/var/opendnssec/signconf/dstest.xml is unchanged since 2013-01-30 10:03:06
Jan 30 10:03:06 CST-BJ-103 ods-signerd: [worker[2]] CRITICAL: failed to sign zone dstest: General error
Jan 30 10:03:06 CST-BJ-103 ods-signerd: [worker[2]] backoff task [configure] for zone dstest with 60 seconds

And there is no dstest.xml in var/opendnssec/signconf/ at all, and no data in table keypairs of kasp.db.

It seems opendnssec could not generate keys using AEP Keyper, am I right?

Have you guys ever met this problem?


Best regards,
Stuart
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20130130/74bfb561/attachment.htm>


More information about the Opendnssec-user mailing list