[Opendnssec-user] ods-signerd error parsing RR's data

[Paul Duffy]

Matthijs,

Thanks for the note, when I run it through ldns-read-zone, it prints following:

# ldns-read-zone ie.zone.2015080509
Syntax error, could not parse the RR's rdata at 505631

# ldns-read-zone -v
read zone version 1.6.17 (ldns version 1.6.17)

I’ve had a look at the line via vim (showing unprintable characters) there’s nothing visually distinctive about it compare to other DS records so I’m at loss to explain what’s going on.

Now the above is on RHEL 6.7, as a matter of interest I decided to give it a shot on RHEL7 text box I have. The error is somewhat different, though still equally terse:

# ldns-verify-zone ie.zone.2015080509
General memory error at 505631

# ldns-verify-zone -v
verify-zone version 1.6.16 (ldns version 1.6.16)


Regards
-Paul
--
Paul Duffy
Network Operations
IE Domain Registry Ltd
Tel: +353 (1) 2365416
Fax: +353 (1) 2300365
Web: www.iedr.ie

------------------------------------------------------------------------------------
Registered Office: Fourth Floor, Block 2, Harbour Square,
Dun Laoghaire, Co. Dublin. Registered in Ireland. No: 315315
------------------------------------------------------------------------------------
------------------------------------------------------------------------------------
The enclosed document is CONFIDENTIAL to addressee and
IE Domain Registry Ltd. The intended addressee is NOT
AUTHORISED to copy, distribute, disclose or otherwise use
the information disclosed. Please also note that this
information should not be edited or redistributed in any way.
------------------------------------------------------------------------------------



> On 6 Aug 2015, at 11:47, Matthijs Mekking <matthijs at pletterpet.nl> wrote:
> 
> Hi Paul,
> 
> Try running the zone or RR through ldns-read-zone or some other ldns
> example tool (OpenDNSSEC uses ldns to read in zones), maybe that will
> help to gain some clue.
> 
> Best regards,
>  Matthijs
> 
> On 06-08-15 12:16, Paul Duffy wrote:
>> Hi,
>> 
>> Yesterday I ran into an issue when it came to signing zone. We had added
>> a new DS record into our zone, when it came to signing the zone it
>> choked when it hit this record:
>> 
>>    ods-signerd: [adapter] error parsing RR at line 505591 (Syntax
>>    error, could not parse the RR's rdata): snafu.ie
>>    <http://snafu.ie>.#011IN#011DS#01135791 5 1
>>    8B1EEDA983F93F36F69D4D165F079P51C8071B1D
>> 
>> 
>> Now as far as I can tell there was nothing invalid per-say which this
>> compare to any of the other DS’s that are in the zone. I had ran through
>> a number of verification steps beforehand and verified that the DS match
>> with what was published on the client domain’s (redacted - changed to
>> snafu.ie <http://snafu.ie>)  own name servers. When I got them to roll
>> their KSK and submit new DS record it worked fine and didn’t cause any
>> issue with ODS, so I’m bit perplexed. Any feedback/help would be
>> appreciated.
>> 
>> (ods-signerd 1.4.6)
>> 
>> -Paul
>> 
>> --
>> Paul Duffy
>> Network Operations
>> IE Domain Registry Ltd
>> Tel: +353 (1) 2365416
>> Fax: +353 (1) 2300365
>> Web: www.iedr.ie <http://www.iedr.ie>
>> 
>> ------------------------------------------------------------------------------------
>> Registered Office: Fourth Floor, Block 2, Harbour Square,
>> Dun Laoghaire, Co. Dublin. Registered in Ireland. No: 315315
>> ------------------------------------------------------------------------------------
>> ------------------------------------------------------------------------------------
>> The enclosed document is CONFIDENTIAL to addressee and
>> IE Domain Registry Ltd. The intended addressee is NOT
>> AUTHORISED to copy, distribute, disclose or otherwise use
>> the information disclosed. Please also note that this
>> information should not be edited or redistributed in any way.
>> ------------------------------------------------------------------------------------
>> 
>> 
>> 
>> 
>> 
>> 
>> _______________________________________________
>> Opendnssec-user mailing list
>> Opendnssec-user at lists.opendnssec.org
>> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
>> 
> 
> _______________________________________________
> Opendnssec-user mailing list
> Opendnssec-user at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20150806/832af995/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20150806/832af995/attachment.bin>