[Opendnssec-user] Puzzled with error messages

PASZTOR Miklos pasztor at nic.hu
Mon Apr 6 07:59:07 UTC 2020


 Hi,

 I am using OpenDNSSEC 2.1.3 with debian buster.

 There are some error messages, which I really do not understand. The following
 two types of message sequences appear frequently:

 1.
Mar 31 12:33:16 node ods-signerd[20149]: [hsm] unable to get key: key 8af4eb7fc6fd24ab45f87a1e485f00e1 not found
Mar 31 12:33:16 node ods-signerd[20149]: [hsm] error signing rrset with libhsm
Mar 31 12:33:16 node ods-signerd[20149]: [rrset] unable to sign RRset[2]: lhsm_sign() failed
Mar 31 12:33:16 node ods-signerd[20149]: [worker[3]] sign zone example.hu failed: 3 RRsets failed
Mar 31 12:33:16 node ods-signerd[20149]: [worker[3]] CRITICAL: failed to sign zone example.hu: General error

 The key in question is in softhsm, and is visible with 'ods-hsmutil list'.  When
 this happens the zone is not signed. However after a minute the signer retries
 the operation, apparently finds the key, and signs the zone with success.

 2.
Mar 31 14:36:09 node ods-signerd[20149]: [worker[1]] CRITICAL: failed to sign zone example.hu: All OK

 It seems that besides these error messages zones are signed properly.

 Could someone please explain?
 TIA.

 Regards,
 Miklós
--
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20200406/9a262f4a/attachment-0001.bin>


More information about the Opendnssec-user mailing list