Uploaded image for project: 'OpenDNSSEC'
  1. OpenDNSSEC
  2. OPENDNSSEC-235

ods-signer crash due to missing intermediate zone

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.3.7
    • Fix Version/s: 1.3.8
    • Component/s: Signer
    • Labels:
    • Environment:

      Linux Debian Squeeze

      Description

      Hello,

      The ods-signed daemon crashed consistently when it tried to reload a zone. It's last words were

      Mar 26 19:23:26 dnsmaxi ods-signerd: +RR example.com. 3600 IN DNSKEY 257 3 8 blah ;

      {id = 56549 (ksk), size = 2048b}

      Mar 26 19:23:26 dnsmaxi ods-signerd: +RR example.com. 3600 IN NSEC3PARAM 1 0 5 3d125b405a3a4b2d
      Mar 26 19:23:26 dnsmaxi ods-signerd: [data] +DD : _udp.example.com.
      Mar 26 19:23:26 dnsmaxi ods-signerd: signer/rrset.c:157: rrset_recover: assertion flags failed

      From what I can understand in the code and this exception, it is trying to recover a zone (+DD) that does not exist in the zone, namely _udp.example.com. The zone example.com does have a RR for _sip._udp.example.com. which is an SRV record for SIP.

      I removed the zone, did ods-control stop/start, then added the zone once more. This time there were no problems. If I find a more consistent recreational pattern I will extend this report, sorry.

      But let me know if I need to dig up more information – or of course if this could be my own wrong.

      Cheers,
      -Rick

        Attachments

          Activity

            People

            Assignee:
            matthijs Matthijs Mekking
            Reporter:
            vanrein Rick van Rein
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: