[Opendnssec-user] key_data_update() failed

Roman Serbski mefystofel at gmail.com
Wed Feb 17 13:07:02 UTC 2021


On Tue, Feb 9, 2021 at 11:08 PM Randy Bush via Opendnssec-user
<opendnssec-user at lists.opendnssec.org> wrote:
>
> opendnssec version 2.1.7
> softhsm 1.3.8
>
> Feb  8 20:07:33 rap ods-enforcerd[676]: [enforcer] update: key_data_update() failed
>
> goog gives no hits for key_data_update() failed
>
> clue bat, please?

Hello,

Same here with OpenDNSSEC 2.1.7 and SoftHSM 2.6.1 running under
FreeBSD 12.2-RELEASE-p2:

Feb 17 12:17:47 srv-sign ods-enforcerd[17022]: [enforcer] update zone:
domain.org
Feb 17 12:17:47 srv-sign ods-enforcerd[17022]: [enforcer]
removeDeadKeys deleting key: f30eafaf208d0cab57cda29a75b62820
Feb 17 12:17:47 srv-sign ods-enforcerd[17022]: [enforcer] update:
key_data_update() failed
Feb 17 12:17:47 srv-sign ods-enforcerd[17022]: [enforce_task] No
changes to signconf file required for zone domain.org

I see that the new 2.1.8 has been released yesterday which mentions a
fix to keys not being purged from the HSM, although I'm not sure it's
our case.

As soon as 2.1.8 appears in the ports I'll give it a go.

Regards,
Roman


More information about the Opendnssec-user mailing list