[Opendnssec-user] Migrating to SoftHSM2

[Rickard Bellgrim]

> 2015-12-23T09:27:09.152565+01:00 kvivs20 ods-signerd: [hsm] sign init:
> CKR_GENERAL_ERROR
> 2015-12-23T09:27:09.152600+01:00 kvivs20 ods-signerd: [hsm] error signing
> rrset with libhsm
> 2015-12-23T09:27:09.152635+01:00 kvivs20 ods-signerd: [rrset] unable to
> sign RRset[99]: lhsm_sign() failed
> 2015-12-23T09:27:09.152671+01:00 kvivs20 ods-signerd:
> SecureDataManager.cpp(359): Invalid IV in encrypted data
> 2015-12-23T09:27:09.152706+01:00 kvivs20 ods-signerd: [hsm] sign init:
> CKR_GENERAL_ERROR
> 2015-12-23T09:27:09.152741+01:00 kvivs20 ods-signerd: [hsm] error signing
> rrset with libhsm
> 2015-12-23T09:27:09.152780+01:00 kvivs20 ods-signerd: [rrset] unable to
> sign RRset[28]: lhsm_sign() failed
> 2015-12-23T09:27:09.152817+01:00 kvivs20 ods-signerd: [worker[2]] sign
> zone KVI.nl failed: 673 RRsets failed
> 2015-12-23T09:27:09.152852+01:00 kvivs20 ods-signerd: [worker[2]]
> CRITICAL: failed to sign zone KVI.nl: General error
> 2015-12-23T09:27:09.152887+01:00 kvivs20 ods-signerd: [worker[2]] backoff
> task [sign] for zone KVI.nl with 60 seconds
>
> Do you have any idea what can be done for further diagnosis, or for repair?
>

The issue was fixed in https://github.com/opendnssec/SoftHSMv2/pull/163

The fix has not been released, but is merged into the develop branch on
GitHub.

// Rickard
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20160110/85a2226c/attachment.htm>