[Opendnssec-user] ods-enforcerd: [engine] Initialization: CKR_GENERAL_ERROR

Yuri Schaeffer yuri at nlnetlabs.nl
Mon Dec 4 15:46:04 UTC 2017


> Dec  4 15:46:31 morvan ods-enforcerd: [engine] running as pid 6227
> Dec  4 15:46:31 morvan ods-enforcerd: [engine] enforcer started
> Dec  4 15:46:31 morvan ods-enforcerd: [engine] Initialization: CKR_GENERAL_ERROR

It seems like the Enforcer can't properly connect to your HSM. Please
review the HSM settings in conf.xml. Also raise the verbosity for the
enforcer in that file when retrying.

If you are using SoftHSM consider that the HSM files might not be
writable for the user opendnssec runs on. The SoftHSM configuration will
allow for enabling more logging.

//Yuri

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20171204/8d3b63da/attachment.bin>


More information about the Opendnssec-user mailing list