-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Paul,
If you are able to share that record (perhaps including the line before and after), we can have a look. Off list ofcourse is fine. Regards, Yuri On 06-08-15 13:54, Paul Duffy wrote: > Matthijs, > > Thanks for the note, when I run it through ldns-read-zone, it > prints following: > > # ldns-read-zone ie.zone.2015080509 Syntax error, could not parse > the RR's rdata at 505631 > > # ldns-read-zone -v read zone version 1.6.17 (ldns version 1.6.17) > > > I’ve had a look at the line via vim (showing unprintable > characters) there’s nothing visually distinctive about it compare > to other DS records so I’m at loss to explain what’s going on. > > Now the above is on RHEL 6.7, as a matter of interest I decided to > give it a shot on RHEL7 text box I have. The error is somewhat > different, though still equally terse: > > # ldns-verify-zone ie.zone.2015080509 General memory error at > 505631 > > # ldns-verify-zone -v verify-zone version 1.6.16 (ldns version > 1.6.16) > > > > Regards -Paul > > -- Paul Duffy Network Operations IE Domain Registry Ltd Tel: +353 > (1) 2365416 Fax: +353 (1) 2300365 Web: www.iedr.ie > <http://www.iedr.ie> > > ---------------------------------------------------------------------- - -------------- > > Registered Office: Fourth Floor, Block 2, Harbour Square, > Dun Laoghaire, Co. Dublin. Registered in Ireland. No: 315315 > ---------------------------------------------------------------------- - -------------- > > - ------------------------------------------------------------------------ - ------------ > The enclosed document is CONFIDENTIAL to addressee and IE Domain > Registry Ltd. The intended addressee is NOT AUTHORISED to copy, > distribute, disclose or otherwise use the information disclosed. > Please also note that this information should not be edited or > redistributed in any way. > ---------------------------------------------------------------------- - -------------- > > > > > >> On 6 Aug 2015, at 11:47, Matthijs Mekking >> <[email protected] <mailto:[email protected]>> wrote: >> >> Hi Paul, >> >> Try running the zone or RR through ldns-read-zone or some other >> ldns example tool (OpenDNSSEC uses ldns to read in zones), maybe >> that will help to gain some clue. >> >> Best regards, Matthijs >> >> On 06-08-15 12:16, Paul Duffy wrote: >>> Hi, >>> >>> Yesterday I ran into an issue when it came to signing zone. We >>> had added a new DS record into our zone, when it came to >>> signing the zone it choked when it hit this record: >>> >>> ods-signerd: [adapter] error parsing RR at line 505591 (Syntax >>> error, could not parse the RR's rdata): snafu.ie >>> <http://snafu.ie> <http://snafu.ie>.#011IN#011DS#01135791 5 1 >>> 8B1EEDA983F93F36F69D4D165F079P51C8071B1D >>> >>> >>> Now as far as I can tell there was nothing invalid per-say >>> which this compare to any of the other DS’s that are in the >>> zone. I had ran through a number of verification steps >>> beforehand and verified that the DS match with what was >>> published on the client domain’s (redacted - changed to >>> snafu.ie <http://snafu.ie> <http://snafu.ie>) own name >>> servers. When I got them to roll their KSK and submit new DS >>> record it worked fine and didn’t cause any issue with ODS, so >>> I’m bit perplexed. Any feedback/help would be appreciated. >>> >>> (ods-signerd 1.4.6) >>> >>> -Paul >>> >>> -- Paul Duffy Network Operations IE Domain Registry Ltd Tel: >>> +353 (1) 2365416 Fax: +353 (1) 2300365 Web: www.iedr.ie >>> <http://www.iedr.ie> <http://www.iedr.ie> >>> >>> -------------------------------------------------------------------- - ---------------- >>> >>> Registered Office: Fourth Floor, Block 2, Harbour Square, >>> Dun Laoghaire, Co. Dublin. Registered in Ireland. No: 315315 >>> -------------------------------------------------------------------- - ---------------- >>> >>> - ------------------------------------------------------------------------ - ------------ >>> The enclosed document is CONFIDENTIAL to addressee and IE >>> Domain Registry Ltd. The intended addressee is NOT AUTHORISED >>> to copy, distribute, disclose or otherwise use the information >>> disclosed. Please also note that this information should not be >>> edited or redistributed in any way. >>> -------------------------------------------------------------------- - ---------------- >>> >>> >>> >>> >>> >>> >>> >>> _______________________________________________ >>> Opendnssec-user mailing list >>> [email protected] >>> <mailto:[email protected]> >>> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user >>> >> >> _______________________________________________ Opendnssec-user >> mailing list [email protected] >> <mailto:[email protected]> >> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user > > > > _______________________________________________ Opendnssec-user > mailing list [email protected] > https://lists.opendnssec.org/mailman/listinfo/opendnssec-user > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlXDT4EACgkQI3PTR4mhaviDrwCffvo2hOT+3GfTVsfx1747JiZ9 QFYAnRJjVxhtQOaXqXLLzpEWaaQMRa2s =UM80 -----END PGP SIGNATURE----- _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
