[Opendnssec-user] signerd crash

Matthijs Mekking matthijs at nlnetlabs.nl
Wed Sep 11 10:53:21 CEST 2013


On 09/04/2013 12:12 PM, Göran Bengtson wrote:
> On Wed, 4 Sep 2013, Sara Dickinson wrote:
> 
>> From: Sara Dickinson <sara at sinodun.com>
>> To: Mathieu Arnold <mat at mat.cc>
>> Cc: opendnssec-user at lists.opendnssec.org
>> Message-ID: <303FE766-7144-48D8-91A6-6D7A310452B8 at sinodun.com>
>> Date: Wed, 4 Sep 2013 11:02:54 +0100
>> Subject: Re: [Opendnssec-user] signerd crash
>>
>>
>> On 3 Sep 2013, at 15:57, Mathieu Arnold wrote:
>>
>>> Hi,
>>>
>>> I just had signerd crash on sig11, from what I can gather in the logs
>>> (attached) the enforcer woke up, purged some old keys from softhsm,
>>> and the
>>> signer was *not* happy at all about it.
>>>
>>> I've launched it back, waited 8 and a half minutes for it for read
>>> all the
>>> confs, and am waiting for the effect of ods-signer update --all to take
>>> effect and see if something's wrong.
>>
>>
>> Hi Mathieu,
>>
>> Which version are you using?
>>
>> We have just fixed a problem in that sounds awfully similar where the
>> signer was crashing after problems with the hsm connection:
>>
>> * OPENDNSSEC-444: Fix double free corruption in case of HSM connection
>> error while signing RRsets (also fixes SUPPORT-71).
>>
>> It is fundamentally a threading issue. If you have the core dump from
>> the crash I could try to confirm if this is what you are seeing.
>>
>> The fix is in the 1.4.2rc1 release candidate which is was made
>> available to the maintainers yesterday and is available here:
>>
>> Downloads:
>> * http://dist.opendnssec.org/source/testing/opendnssec-1.4.2rc1.tar.gz
>> *
>> http://dist.opendnssec.org/source/testing/opendnssec-1.4.2rc1.tar.gz.sig
>> * Checksum sha1: 5766c5510f225f09c13e9ffaaf09cb447aa428f1
>> * Checksum sha256:
>> c3ad800b7548480fa36d65889d452333f7e03ef8909719d4ffdb97274452a186
>>
>>
>> A full 1.4.2 release is planned for Tuesday 10th September.
>>
>> Sara.
>>
>> _______________________________________________
>> Opendnssec-user mailing list
>> Opendnssec-user at lists.opendnssec.org
>> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
> 
> I created a case (SUPPORT-75) this morning that looks as it may have
> the same root cause. (ODS 1.3.14 in this case).


I have ported the fix back to 1.3.

Best regards,
  Matthijs

> 
>             / Göran Bengtson
>               Chalmers Univ. of Technology.
> 
> 
> _______________________________________________
> Opendnssec-user mailing list
> Opendnssec-user at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
> 




More information about the Opendnssec-user mailing list