Hello,                                                                          
                                                     
We have connected ods to a new partition in our HSM. The ods install wasn't 
cleaned
so it still thinks old keys are valid (i.e. the whole kasp.db is messed up).

Obviously this setup will fail, but I'm also hit with an assertion failure. The
relevant logging is here:

signertest ods-signerd: [hsm] unable to get key: key 
00c8f5813717302a753d3a625b4f398a not found
signertest ods-signerd: [zone] unable to publish dnskeys zone nl: error 
creating DNSKEY for key
00c8f5813717302a753d3a625b4f398a
signertest ods-signerd: [worker[2]] backoff task [load signconf for] for zone 
nl with 120 seconds
signertest ods-signerd: signer/tools.c:229: tools_nsecify: assertion 
zone->nsec3params failed

Regards,

--
    Miek Gieben

Attachment: signature.asc
Description: Digital signature

_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

Reply via email to