[Opendnssec-user] Error converting from 1.4.14 to 2.1.8

[Havard Eidnes]

>>   Does anyone successfully run OpenDNSSEC 2.x with SoftHSM 2.x
>>   while using sqlite3 as the SoftHSM backend and with a
>>   WorkerThreads setting in OpenDNSSEC larger than 1?
>
> Hi Håvard,
>
> We're one of them.  ~80 domains under FreeBSD 12.2-RELEASE:
> 
> opendnssec2-2.1.7
> softhsm2-2.6.1_2
> sqlite3-3.34.1,1
> 
> WorkerThreads is set to 4 (which is a default value IINM).

Hmm, OK, thanks for that.

Just to be super clear: does your softhsm2.conf file say
"objectstore.backend = db"?

If "yes", that then probably means that in our case we have an
undiagnosed platform-related hard-to-debug issue with that
combination, where the actual diagnosis is hampered by the lack
of useful error messages available from libhsm within OpenDNSSEC
2.1.8.  Not too pleasant, but we found a workaround which works
for us: use the "file" SoftHSM backend instead.

We finally made the leap, BTW, and upgraded our production
OpenDNSSEC setup from 1.4.14 to 2.1.8, plus upgraded SoftHSM from
1.3.7 to 2.6.1 at the same time.  Looks good so far (knock on
wood!)

We're running this on NetBSD/amd64 9.0.

> I don't recall any issues but perhaps 80 domains is a small value.

Maybe, but from looking at the logs and trying to debug this, I
got the sense the number of zones doesn't really make all that
much of a difference for this problem.

Thanks again,

- Håvard