Matthijs, Thanks for the note, when I run it through ldns-read-zone, it prints following:
# ldns-read-zone ie.zone.2015080509 Syntax error, could not parse the RR's rdata at 505631 # ldns-read-zone -v read zone version 1.6.17 (ldns version 1.6.17) I’ve had a look at the line via vim (showing unprintable characters) there’s nothing visually distinctive about it compare to other DS records so I’m at loss to explain what’s going on. Now the above is on RHEL 6.7, as a matter of interest I decided to give it a shot on RHEL7 text box I have. The error is somewhat different, though still equally terse: # ldns-verify-zone ie.zone.2015080509 General memory error at 505631 # ldns-verify-zone -v verify-zone version 1.6.16 (ldns version 1.6.16) Regards -Paul -- Paul Duffy Network Operations IE Domain Registry Ltd Tel: +353 (1) 2365416 Fax: +353 (1) 2300365 Web: www.iedr.ie ------------------------------------------------------------------------------------ Registered Office: Fourth Floor, Block 2, Harbour Square, Dun Laoghaire, Co. Dublin. Registered in Ireland. No: 315315 ------------------------------------------------------------------------------------ ------------------------------------------------------------------------------------ The enclosed document is CONFIDENTIAL to addressee and IE Domain Registry Ltd. The intended addressee is NOT AUTHORISED to copy, distribute, disclose or otherwise use the information disclosed. Please also note that this information should not be edited or redistributed in any way. ------------------------------------------------------------------------------------ > On 6 Aug 2015, at 11:47, Matthijs Mekking <[email protected]> wrote: > > Hi Paul, > > Try running the zone or RR through ldns-read-zone or some other ldns > example tool (OpenDNSSEC uses ldns to read in zones), maybe that will > help to gain some clue. > > Best regards, > Matthijs > > On 06-08-15 12:16, Paul Duffy wrote: >> Hi, >> >> Yesterday I ran into an issue when it came to signing zone. We had added >> a new DS record into our zone, when it came to signing the zone it >> choked when it hit this record: >> >> ods-signerd: [adapter] error parsing RR at line 505591 (Syntax >> error, could not parse the RR's rdata): snafu.ie >> <http://snafu.ie>.#011IN#011DS#01135791 5 1 >> 8B1EEDA983F93F36F69D4D165F079P51C8071B1D >> >> >> Now as far as I can tell there was nothing invalid per-say which this >> compare to any of the other DS’s that are in the zone. I had ran through >> a number of verification steps beforehand and verified that the DS match >> with what was published on the client domain’s (redacted - changed to >> snafu.ie <http://snafu.ie>) own name servers. When I got them to roll >> their KSK and submit new DS record it worked fine and didn’t cause any >> issue with ODS, so I’m bit perplexed. Any feedback/help would be >> appreciated. >> >> (ods-signerd 1.4.6) >> >> -Paul >> >> -- >> Paul Duffy >> Network Operations >> IE Domain Registry Ltd >> Tel: +353 (1) 2365416 >> Fax: +353 (1) 2300365 >> Web: www.iedr.ie <http://www.iedr.ie> >> >> ------------------------------------------------------------------------------------ >> Registered Office: Fourth Floor, Block 2, Harbour Square, >> Dun Laoghaire, Co. Dublin. Registered in Ireland. No: 315315 >> ------------------------------------------------------------------------------------ >> ------------------------------------------------------------------------------------ >> The enclosed document is CONFIDENTIAL to addressee and >> IE Domain Registry Ltd. The intended addressee is NOT >> AUTHORISED to copy, distribute, disclose or otherwise use >> the information disclosed. Please also note that this >> information should not be edited or redistributed in any way. >> ------------------------------------------------------------------------------------ >> >> >> >> >> >> >> _______________________________________________ >> Opendnssec-user mailing list >> [email protected] >> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user >> > > _______________________________________________ > Opendnssec-user mailing list > [email protected] > https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
