Thanks for the response. My understanding is that, when you use native pkcs#11 it is not dependent on the openssl engine. But yes the bind is chrooted. I tried to run it without chroot and still got the same issue. The private key reference file created by dnsseckey-fromlabel has the Engine defined as "Engine: cGtjczExAA=="
-- arun On Thu, Jan 21, 2016 at 1:01 PM, Tony Finch <[email protected]> wrote: > Arun N S <[email protected]> wrote: > > > > but with dynamic signing the logs were showing > > "dns_dnssec_findmatchingkeys: error reading key file > > Kexample.com.+008+01234.private: no engine" > > > > any idea? > > Wild guess (I know nothing about PKCS#11): are you running chrooted, and > if so is the relevant OpenSSL engine plugin in usr/lib/engines in the > chroot? > > Tony. > -- > f.anthony.n.finch <[email protected]> http://dotat.at/ > Forth, Tyne, Dogger: South 4 or 5, backing southeast 6 or 7, perhaps gale 8 > later. Moderate or rough, occasionally slight at first. Showers, then rain. > Good, occasionally moderate. >
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/bind-users
