Hello Thomas,
Please apply this patch:
https://github.com/opendnssec/opendnssec/commit/f29b483d6e157afb9e52e751a694a90193ea2326
Actually the previous patch had a bug when passing NULL string. I guess this
patch will resolve your issue.
Regards,
Hoda
On 07-12-17 13:24, Thomas E. wrote:
> Hi!
>
> For some reason the enforcerd suddenly died with a segmentation fault. The
> enforcer has been running for while without
> issues and suddenly it crashed.
>
> The only difference to the runs it did before is that it ended up with the
> result that a DS record needed to be updated:
>
> "[enforce_task] please submit DS with keytag 22922 for zone test.de"
>
> These are the logs from the last run:
>
> Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
> f241eca9cc2dd5fa798ddf5a2b0cc3a7 1
> Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
> 726d615a60d61a54e223ace3da7cd07c 1
> Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
> 712850eb5fd42777c9a57dc4e94702d7 1
> Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
> 74e8c23de67e15851a0d8b8b987a20db 1
> Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
> 92ab7c79b96e994bc735c062814acd08 1
> Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
> f5e958d5c501556480c0d0db331570bb 1
> Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
> 0a18212e851969c77182447fcdce863c 1
> Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
> a2b814b5ed20b9ab08f2b2a8f6b25aad 1
> Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: May ZSK
> a2b814b5ed20b9ab08f2b2a8f6b25aad DNSKEY in state
> omnipresent transition to unretentive?
> Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone Policy says we can
> (1/3)
> Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: May ZSK
> a2b814b5ed20b9ab08f2b2a8f6b25aad RRSIG in state
> unretentive transition to hidden?
> Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone Policy says we can
> (1/3)
> Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
> 40217e390dabe3ffd572d23d05830d79 4
> Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: processing key
> 0426252c04a4cc3419b18e41a027b530 1
> Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone: May ZSK
> 0426252c04a4cc3419b18e41a027b530 RRSIG in state
> rumoured transition to omnipresent?
> Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone Policy says we can
> (1/3)
> Dec 6 19:22:52 ods ods-enforcerd: [enforcer] updateZone DNSSEC says we can
> (2/3)
> Dec 6 19:22:52 ods ods-enforcerd: [enforce_task] please retract DS with
> keytag 47476 for zone test.de
> Dec 6 19:22:52 ods ods-enforcerd: [enforce_task] please submit DS with
> keytag 22922 for zone test.de
> Dec 6 19:22:52 ods ods-enforcerd: Segmentation fault
> Dec 6 19:22:52 ods ods-enforcerd: :
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: keystate/keystate_ds.c:150 in
> exec_dnskey_by_id()
> Dec 6 19:22:52 ods ods-enforcerd: keystate/keystate_ds.c:231 in
> retract_dnskey_by_id()
> Dec 6 19:22:52 ods ods-enforcerd: keystate/keystate_ds.c:402 in
> change_keys_from_to()
> Dec 6 19:22:52 ods ods-enforcerd: keystate/keystate_ds_retract_task.c:44 in
> keystate_ds_retract_task_perform()
> Dec 6 19:22:52 ods ods-enforcerd: scheduler/task.c:120 in task_perform()
> Dec 6 19:22:52 ods ods-enforcerd: scheduler/worker.c:71 in worker_start()
> Dec 6 19:22:52 ods ods-enforcerd:
> /root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: Threaddump
> Dec 6 19:22:52 ods ods-enforcerd: :
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: scheduler/task.c:117 in task_perform()
> Dec 6 19:22:52 ods ods-enforcerd: scheduler/worker.c:71 in worker_start()
> Dec 6 19:22:52 ods ods-enforcerd:
> /root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: Threaddump
> Dec 6 19:22:52 ods ods-enforcerd: :
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: scheduler/task.c:117 in task_perform()
> Dec 6 19:22:52 ods ods-enforcerd: scheduler/worker.c:71 in worker_start()
> Dec 6 19:22:52 ods ods-enforcerd:
> /root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: Threaddump
> Dec 6 19:22:52 ods ods-enforcerd: :
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: /root/opendnssec-2.1.3/common/locks.c:63
> in ods_thread_wait()
> Dec 6 19:22:52 ods ods-enforcerd: scheduler/schedule.c:465 in
> schedule_pop_task()
> Dec 6 19:22:52 ods ods-enforcerd: scheduler/worker.c:68 in worker_start()
> Dec 6 19:22:52 ods ods-enforcerd:
> /root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: Threaddump
> Dec 6 19:22:52 ods ods-enforcerd: :
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd:
> /root/opendnssec-2.1.3/common/cmdhandler.c:388 in cmdhandler_start()
> Dec 6 19:22:52 ods ods-enforcerd:
> /root/opendnssec-2.1.3/common/janitor.c:306 in runthread()
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
> Dec 6 19:22:52 ods ods-enforcerd: inlined method
>
>
> Restarting is now ending up with this error:
>
> Starting enforcer...
> OpenDNSSEC key and signing policy enforcer version 2.1.3
> Unable to connect to engine. connect() failed: Connection refused
> ("/var/run/opendnssec/enforcer.sock")
>
> Any help would be much appreciated!
>
> Thanks,
> Thomas
>
> _______________________________________________
> Opendnssec-user mailing list
> [email protected]
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
