Hi Markus,
It's a pretty basic Powerdns installation with a MySQL backend. We're
using one cryptokey for our domain names to serve DNSSEC to the world.
Keys are signed with RSASHA256, and Powerdns generates domain name
specific keys using this global key on the fly.
You could start by installing the latest pdns-server and
pdns-backend-mysql packages together with the latest libbotan package
and see if pdns starts using 100% CPU.
Upgrading libbotan doesn't break pdns instantly, only after you restart
pdns. That probably makes sense, but, just saying.
Thanks,
Martin
Hello,
pdns 3.4.1-4+deb8u5 was a no-change rebuild against botan1.10
1.10.8-2+deb8u1. If there is a regression it must be in botan1.10.
I have never used pdns before. Could you share you configuration with
us? How can we reproduce this issue?
Regards,
Markus