Uploaded image for project: 'Support'
  1. Support
  2. SUPPORT-279

Backup file parsing does not handle 'keyset 0'

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Open
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: OpenDNSSEC 2.1
    • Fix Version/s: None
    • Component/s: Configuration
    • Labels:
      None
    • Environment:

      RHEL9 x86_64, OpenDNSSEC 2.1.12 using rpmbuild, SoftHSM 2.61. from RHEL9 AppStream repo, mysqld 10.5.16-MariaDB, 4-core VM in ESXi, signer config is default 4 WorkerThreads, 1 SignerThread, mysql as enforcer backend

      Description

      Upon signer start, there's one line of error message per zone:

      ods-signerd[25482]: [duration] cannot create from string 0: P not found

      This is because files in /var/opendnssec/tmp read '...valid PT1209600S denial PT1209600S keyset 0 jitter PT60s ...'. The 'keyset 0' is invalid.

      The failing check (in 2.1.12) sources is in opendnssec-2.1.12/signer/src/signer/zone.c:873 .

      The signconfparser.c function parse_sc_sig_validity_keyset() maybe involved, but the comment clearly indicates the intent is to write it in duration format into backup files.

        Attachments

          Activity

            People

            Assignee:
            Unassigned
            Reporter:
            dogo Mikko Rantanen
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated: