[Opendnssec-user] signerd crash

Mathieu Arnold mat at mat.cc
Wed Sep 4 11:06:58 UTC 2013


+--On 4 septembre 2013 11:02:54 +0100 Sara Dickinson <sara at sinodun.com>
wrote:
|> Hi,
|> 
|> I just had signerd crash on sig11, from what I can gather in the logs
|> (attached) the enforcer woke up, purged some old keys from softhsm, and
|> the signer was *not* happy at all about it.
|> 
|> I've launched it back, waited 8 and a half minutes for it for read all
|> the confs, and am waiting for the effect of ods-signer update --all to
|> take effect and see if something's wrong.
| 
| 
| Hi Mathieu, 
| 
| Which version are you using? 

1.4.1 on FreeBSD.

| We have just fixed a problem in that sounds awfully similar where the
| signer was crashing after problems with the hsm connection:
| 
| * OPENDNSSEC-444: Fix double free corruption in case of HSM connection
| error while signing RRsets (also fixes SUPPORT-71).
| 
| It is fundamentally a threading issue. If you have the core dump from the
| crash I could try to confirm if this is what you are seeing.  

I looked, but I can't seem to find one, no.

| The fix is in the 1.4.2rc1 release candidate which is was made available
| to the maintainers yesterday and is available here:
| 
| Downloads:
| * http://dist.opendnssec.org/source/testing/opendnssec-1.4.2rc1.tar.gz
| * http://dist.opendnssec.org/source/testing/opendnssec-1.4.2rc1.tar.gz.sig
| * Checksum sha1: 5766c5510f225f09c13e9ffaaf09cb447aa428f1
| * Checksum sha256:
| c3ad800b7548480fa36d65889d452333f7e03ef8909719d4ffdb97274452a186
| 
| 
| A full 1.4.2 release is planned for Tuesday 10th September. 

I'll wait for the release, with the number of zones I have, if it's not
fixed with the update, I'll see it soon :-)

Thanks,

-- 
Mathieu Arnold



More information about the Opendnssec-user mailing list