[Opendnssec-user] Migrating to SoftHSM2

[Fred.Zwarts]

Thanks for your response. So, I was at the right track, but the version of 
SoftHSM2 that is currently released, does not yoet support a migration from 
SoftHSM v1. I will wait for a new release of SoftHSM that will support the 
migration. Any idea when we can expect the next release of SoftHSM2?

Fred.Zwarts.

-----Oorspronkelijk bericht----- 
From: Rickard Bellgrim
Sent: Sunday, January 10, 2016 8:07 AM
To: Fred Zwarts, KVI, Groningen
Cc: Rick van Rein ; Opendnssec-user at lists.opendnssec.org List
Subject: Re: [Opendnssec-user] Migrating to SoftHSM2




2015-12-23T09:27:09.152565+01:00 kvivs20 ods-signerd: [hsm] sign init: 
CKR_GENERAL_ERROR
2015-12-23T09:27:09.152600+01:00 kvivs20 ods-signerd: [hsm] error signing 
rrset with libhsm
2015-12-23T09:27:09.152635+01:00 kvivs20 ods-signerd: [rrset] unable to sign 
RRset[99]: lhsm_sign() failed
2015-12-23T09:27:09.152671+01:00 kvivs20 ods-signerd: 
SecureDataManager.cpp(359): Invalid IV in encrypted data
2015-12-23T09:27:09.152706+01:00 kvivs20 ods-signerd: [hsm] sign init: 
CKR_GENERAL_ERROR
2015-12-23T09:27:09.152741+01:00 kvivs20 ods-signerd: [hsm] error signing 
rrset with libhsm
2015-12-23T09:27:09.152780+01:00 kvivs20 ods-signerd: [rrset] unable to sign 
RRset[28]: lhsm_sign() failed
2015-12-23T09:27:09.152817+01:00 kvivs20 ods-signerd: [worker[2]] sign zone 
KVI.nl failed: 673 RRsets failed
2015-12-23T09:27:09.152852+01:00 kvivs20 ods-signerd: [worker[2]] CRITICAL: 
failed to sign zone KVI.nl: General error
2015-12-23T09:27:09.152887+01:00 kvivs20 ods-signerd: [worker[2]] backoff 
task [sign] for zone KVI.nl with 60 seconds

Do you have any idea what can be done for further diagnosis, or for repair?


The issue was fixed in https://github.com/opendnssec/SoftHSMv2/pull/163

The fix has not been released, but is merged into the develop branch on 
GitHub.

// Rickard