[Opendnssec-user] ods-enforcerd: Segmentation fault

Thomas E. list at crashcom.info
Thu Dec 7 16:54:18 UTC 2017


Thanks Hoda,

then enforcer is back to life :)

Best regards,
Thomas

Am 07.12.2017 um 13:33 schrieb Hoda Rohani:
> Hello Thomas,
> 
> Please apply this patch:
> https://github.com/opendnssec/opendnssec/commit/f29b483d6e157afb9e52e751a694a90193ea2326
> 
> Actually the previous patch had a bug when passing NULL string. I guess this patch will resolve your issue.
> 
> Regards,
> Hoda
> 
> On 07-12-17 13:24, Thomas E. wrote:
>> Hi!
>>
>> For some reason the enforcerd suddenly died with a segmentation fault. The enforcer has been running for while without
>> issues and suddenly it crashed.
>>
>> The only difference to the runs it did before is that it ended up with the result that a DS record needed to be updated:
>>
>> "[enforce_task] please submit DS with keytag 22922 for zone test.de"
>>
>> These are the logs from the last run:
>>
>> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key f241eca9cc2dd5fa798ddf5a2b0cc3a7 1
>> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key 726d615a60d61a54e223ace3da7cd07c 1
>> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key 712850eb5fd42777c9a57dc4e94702d7 1
>> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key 74e8c23de67e15851a0d8b8b987a20db 1
>> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key 92ab7c79b96e994bc735c062814acd08 1
>> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key f5e958d5c501556480c0d0db331570bb 1
>> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key 0a18212e851969c77182447fcdce863c 1
>> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key a2b814b5ed20b9ab08f2b2a8f6b25aad 1
>> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: May ZSK a2b814b5ed20b9ab08f2b2a8f6b25aad DNSKEY in state
>> omnipresent transition to unretentive?
>> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone Policy says we can (1/3)
>> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: May ZSK a2b814b5ed20b9ab08f2b2a8f6b25aad RRSIG in state
>> unretentive transition to hidden?
>> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone Policy says we can (1/3)
>> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key 40217e390dabe3ffd572d23d05830d79 4
>> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key 0426252c04a4cc3419b18e41a027b530 1
>> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: May ZSK 0426252c04a4cc3419b18e41a027b530 RRSIG in state
>> rumoured transition to omnipresent?
>> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone Policy says we can (1/3)
>> Dec  6 19:22:52 ods ods-enforcerd: [enforcer] updateZone DNSSEC says we can (2/3)
>> Dec  6 19:22:52 ods ods-enforcerd: [enforce_task] please retract DS with keytag 47476 for zone test.de
>> Dec  6 19:22:52 ods ods-enforcerd: [enforce_task] please submit DS with keytag 22922 for zone test.de
>> Dec  6 19:22:52 ods ods-enforcerd: Segmentation fault
>> Dec  6 19:22:52 ods ods-enforcerd: :
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd:   keystate/keystate_ds.c:150 in exec_dnskey_by_id()
>> Dec  6 19:22:52 ods ods-enforcerd:   keystate/keystate_ds.c:231 in retract_dnskey_by_id()
>> Dec  6 19:22:52 ods ods-enforcerd:   keystate/keystate_ds.c:402 in change_keys_from_to()
>> Dec  6 19:22:52 ods ods-enforcerd: keystate/keystate_ds_retract_task.c:44 in keystate_ds_retract_task_perform()
>> Dec  6 19:22:52 ods ods-enforcerd:   scheduler/task.c:120 in task_perform()
>> Dec  6 19:22:52 ods ods-enforcerd:   scheduler/worker.c:71 in worker_start()
>> Dec  6 19:22:52 ods ods-enforcerd: /root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd: Threaddump
>> Dec  6 19:22:52 ods ods-enforcerd: :
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd:   scheduler/task.c:117 in task_perform()
>> Dec  6 19:22:52 ods ods-enforcerd:   scheduler/worker.c:71 in worker_start()
>> Dec  6 19:22:52 ods ods-enforcerd: /root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd: Threaddump
>> Dec  6 19:22:52 ods ods-enforcerd: :
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd:   scheduler/task.c:117 in task_perform()
>> Dec  6 19:22:52 ods ods-enforcerd:   scheduler/worker.c:71 in worker_start()
>> Dec  6 19:22:52 ods ods-enforcerd: /root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd: Threaddump
>> Dec  6 19:22:52 ods ods-enforcerd: :
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd: /root/opendnssec-2.1.3/common/locks.c:63 in ods_thread_wait()
>> Dec  6 19:22:52 ods ods-enforcerd:   scheduler/schedule.c:465 in schedule_pop_task()
>> Dec  6 19:22:52 ods ods-enforcerd:   scheduler/worker.c:68 in worker_start()
>> Dec  6 19:22:52 ods ods-enforcerd: /root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd: Threaddump
>> Dec  6 19:22:52 ods ods-enforcerd: :
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd: /root/opendnssec-2.1.3/common/cmdhandler.c:388 in cmdhandler_start()
>> Dec  6 19:22:52 ods ods-enforcerd: /root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>> Dec  6 19:22:52 ods ods-enforcerd:   inlined method
>>
>>
>> Restarting is now ending up with this error:
>>
>> Starting enforcer...
>> OpenDNSSEC key and signing policy enforcer version 2.1.3
>> Unable to connect to engine. connect() failed: Connection refused ("/var/run/opendnssec/enforcer.sock")
>>
>> Any help would be much appreciated!
>>
>> Thanks,
>> Thomas
>>
>> _______________________________________________
>> Opendnssec-user mailing list
>> Opendnssec-user at lists.opendnssec.org
>> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user




More information about the Opendnssec-user mailing list