On 07.06.2016 20:13, Martin wrote:
> Hi Markus,
> 
> It's a pretty basic Powerdns installation with a MySQL backend. We're
> using one cryptokey for our domain names to serve DNSSEC to the world.
> Keys are signed with RSASHA256, and Powerdns generates domain name
> specific keys using this global key on the fly.
> 
> You could start by installing the latest pdns-server and
> pdns-backend-mysql packages together with the latest libbotan package
> and see if pdns starts using 100% CPU.

Hi Martin,

I installed pdns-server and the mysql backend but apparently there are
more steps involved to reproduce the issue. Can you or Christian provide
some minimal instructions how to setup a powerdns server with DNSSEC? I
have searched for some online documentation and tutorials but without
knowing your exact setup this is rather futile.

> Upgrading libbotan doesn't break pdns instantly, only after you restart
> pdns. That probably makes sense, but, just saying.

Yes, that makes sense. The old process is still available in your memory
and must be replaced by restarting the server.

Regards,

Markus


Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to