[Opendnssec-user] Sudden failure related to NSEC3, Re: Sudden failure related to NSEC3

[Berry A.W. van Halderen]

On 07/10/2016 11:10 AM, Havard Eidnes wrote:
>>> I took a copy of the tmp/ directory in OpenDNSSEC (and then
>>> removed the files there), and have a copy of the "bad" zones
>>> which came out at the other end if someone wants to take a look
>>> at it to possibly find out how this could happen.
>>
>> This sound bad, please send me as much you can from before and after the
>> problem, including policies and database if possible.
> 
> Will do in a separate private message.
> 
>> You are running 1.4.10 I presume?
> 
> I'm actually running 1.4.9 with some fixes applied, some of them
> remnants from debugging earlier problems.  In particular, the
> earlier fix which added zone_del_nsec3params() which came from
> your end is part of my running code.

I think my colleague might already have mentioned it, but we think
you are in a situation that is half way 1.4.9 and 1.4.10.  And half way
is not there yet ;-).  After some initial fixes, it was found that
there was more to the issue.  So we believe the released version
properly fix the issue you are facing.
In general, we can of course only support the released version.  An
easy upgrade should get you onto track.

With kind regards,
Berry van Halderen