[Opendnssec-user] Critical issue: CKR_OBJECT_HANDLE_INVALID after ZSK rollover
Juan Carlos Rodriguez
jcarlos.rodriguez at rediris.es
Tue Sep 6 12:15:28 UTC 2016
Dear Berry,
I think we are suffering the same error at our tests using a RHEL 7, ODS
1.4.7 and a HSM Luna SA7:
Sep 6 09:16:47 dnshost ods-enforcerd: Created ZSK size: 2048, alg: 8
with id: 812c8c298040dba470085f19bf038277 in repository: ... and database.
Sep 6 09:17:04 dnshost ods-signerd: [hsm] Get attr value 2:
CKR_OBJECT_HANDLE_INVALID
Sep 6 09:17:04 dnshost ods-signerd: [hsm] unable to get key: key
812c8c298040dba470085f19bf038277 not found
Sep 6 09:17:04 dnshost ods-signerd: [zone] unable to publish dnskeys
for zone testzone: error creating dnskey
Sep 6 09:17:04 dnshost ods-signerd: [tools] unable to read zone
testzone: failed to publish dnskeys (General error)
Could you confirm us if the 1.4 version with the fix was released?
Kind regards
Juan Carlos
--
---------------------------------------------
Juan Carlos Rodríguez Merino
NOC RedIRIS
Tel: 912127620 (Ext. 4345)
RedIRIS / Red.es
Edificio Bronce
Plaza de Manuel Gómez Moreno, s/n - 2ª planta
28020 Madrid
---------------------------------------------
More information about the Opendnssec-user
mailing list