Hi!
For some reason the enforcerd suddenly died with a segmentation fault.
The enforcer has been running for while without issues and suddenly it
crashed.
The only difference to the runs it did before is that it ended up with
the result that a DS record needed to be updated:
"[enforce_task] please submit DS with keytag 22922 for zone test.de"
These are the logs from the last run:
Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
f241eca9cc2dd5fa798ddf5a2b0cc3a7 1
Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
726d615a60d61a54e223ace3da7cd07c 1
Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
712850eb5fd42777c9a57dc4e94702d7 1
Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
74e8c23de67e15851a0d8b8b987a20db 1
Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
92ab7c79b96e994bc735c062814acd08 1
Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
f5e958d5c501556480c0d0db331570bb 1
Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
0a18212e851969c77182447fcdce863c 1
Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
a2b814b5ed20b9ab08f2b2a8f6b25aad 1
Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: May ZSK
a2b814b5ed20b9ab08f2b2a8f6b25aad DNSKEY in state omnipresent transition
to unretentive?
Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone Policy says we
can (1/3)
Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: May ZSK
a2b814b5ed20b9ab08f2b2a8f6b25aad RRSIG in state unretentive transition
to hidden?
Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone Policy says we
can (1/3)
Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
40217e390dabe3ffd572d23d05830d79 4
Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
0426252c04a4cc3419b18e41a027b530 1
Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: May ZSK
0426252c04a4cc3419b18e41a027b530 RRSIG in state rumoured transition to
omnipresent?
Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone Policy says we
can (1/3)
Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone DNSSEC says we
can (2/3)
Dec 6 19:22:52 ods ods-enforcerd: [enforce_task] please retract DS with
keytag 47476 for zone test.de
Dec 6 19:22:52 ods ods-enforcerd: [enforce_task] please submit DS with
keytag 22922 for zone test.de
Dec 6 19:22:52 ods ods-enforcerd: Segmentation fault
Dec 6 19:22:52 ods ods-enforcerd: :
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: keystate/keystate_ds.c:150 in
exec_dnskey_by_id()
Dec 6 19:22:52 ods ods-enforcerd: keystate/keystate_ds.c:231 in
retract_dnskey_by_id()
Dec 6 19:22:52 ods ods-enforcerd: keystate/keystate_ds.c:402 in
change_keys_from_to()
Dec 6 19:22:52 ods ods-enforcerd:
keystate/keystate_ds_retract_task.c:44 in keystate_ds_retract_task_perform()
Dec 6 19:22:52 ods ods-enforcerd: scheduler/task.c:120 in task_perform()
Dec 6 19:22:52 ods ods-enforcerd: scheduler/worker.c:71 in worker_start()
Dec 6 19:22:52 ods ods-enforcerd:
/root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: Threaddump
Dec 6 19:22:52 ods ods-enforcerd: :
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: scheduler/task.c:117 in task_perform()
Dec 6 19:22:52 ods ods-enforcerd: scheduler/worker.c:71 in worker_start()
Dec 6 19:22:52 ods ods-enforcerd:
/root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: Threaddump
Dec 6 19:22:52 ods ods-enforcerd: :
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: scheduler/task.c:117 in task_perform()
Dec 6 19:22:52 ods ods-enforcerd: scheduler/worker.c:71 in worker_start()
Dec 6 19:22:52 ods ods-enforcerd:
/root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: Threaddump
Dec 6 19:22:52 ods ods-enforcerd: :
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd:
/root/opendnssec-2.1.3/common/locks.c:63 in ods_thread_wait()
Dec 6 19:22:52 ods ods-enforcerd: scheduler/schedule.c:465 in
schedule_pop_task()
Dec 6 19:22:52 ods ods-enforcerd: scheduler/worker.c:68 in worker_start()
Dec 6 19:22:52 ods ods-enforcerd:
/root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: Threaddump
Dec 6 19:22:52 ods ods-enforcerd: :
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd:
/root/opendnssec-2.1.3/common/cmdhandler.c:388 in cmdhandler_start()
Dec 6 19:22:52 ods ods-enforcerd:
/root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Dec 6 19:22:52 ods ods-enforcerd: inlined method
Restarting is now ending up with this error:
Starting enforcer...
OpenDNSSEC key and signing policy enforcer version 2.1.3
Unable to connect to engine. connect() failed: Connection refused
("/var/run/opendnssec/enforcer.sock")
Any help would be much appreciated!
Thanks,
Thomas
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
