[Opendnssec-user] opendnssec 1.4.8

Fred.Zwarts F.Zwarts at KVI.nl
Mon Oct 5 11:17:26 UTC 2015


I noticed that opendnssec 1.4.8 has been released today.
I tried to use it on our test system, which has been running 1.4.7 for some 
months now without problems.
Compilation and linking went without problems.
The installation seems to copy the files to the right directories.
Then I stopped the running 1.4.7 system and started the new 1.4.8 system. In 
the system log file I now see some messages that I did not see before:

When setting up policies:

Oct  5 12:59:08 KVIVS13 ods-enforcerd: ERROR: no such parameter with name 
revoked
Oct  5 12:59:08 KVIVS13 ods-enforcerd: Could not predict ksk requirement for 
next interval for POLICY1
Oct  5 12:59:08 KVIVS13 ods-enforcerd: ERROR: no such parameter with name 
revoked
Oct  5 12:59:08 KVIVS13 ods-enforcerd: Could not count current ksk numbers 
for policy POLICY1

When setting up zones:

Oct  5 12:59:08 KVIVS13 ods-enforcerd: ERROR: no such parameter with name 
revoked
Oct  5 12:59:08 KVIVS13 ods-enforcerd: Error allocating zsks to zone a.b.c.d

opendnssec does not seem to be started proberly. Most commands fail:

# ods-ksmutil key list --verbose
SQLite database set to: /var/opendnssec/kasp.db
Keys:
ERROR: error executing SQL - no such column: k.rfc5011
Error: failed to list keys


Apparently, the upgrade from 1.4.7 to 1.4.8 is not as straightforward as 
with previous versions.
What is the correct upgrade procedure?

Our system:
SUSE Linux Enterprise Server 11 (x86_64)
VERSION = 11
PATCHLEVEL = 4

SoftHSM 1.3.7





More information about the Opendnssec-user mailing list