-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For the record, there was a stray non hex digit in the rdata. Which ldns righfully refuses to parse.
//Yuri On 06-08-15 14:13, Yuri Schaeffer wrote: > Hi Paul, > > If you are able to share that record (perhaps including the line > before and after), we can have a look. Off list ofcourse is fine. > > Regards, Yuri > > On 06-08-15 13:54, Paul Duffy wrote: >> Matthijs, > >> Thanks for the note, when I run it through ldns-read-zone, it >> prints following: > >> # ldns-read-zone ie.zone.2015080509 Syntax error, could not >> parse the RR's rdata at 505631 > >> # ldns-read-zone -v read zone version 1.6.17 (ldns version >> 1.6.17) > > >> I’ve had a look at the line via vim (showing unprintable >> characters) there’s nothing visually distinctive about it >> compare to other DS records so I’m at loss to explain what’s >> going on. > >> Now the above is on RHEL 6.7, as a matter of interest I decided >> to give it a shot on RHEL7 text box I have. The error is >> somewhat different, though still equally terse: > >> # ldns-verify-zone ie.zone.2015080509 General memory error at >> 505631 > >> # ldns-verify-zone -v verify-zone version 1.6.16 (ldns version >> 1.6.16) > > > >> Regards -Paul > >> -- Paul Duffy Network Operations IE Domain Registry Ltd Tel: >> +353 (1) 2365416 Fax: +353 (1) 2300365 Web: www.iedr.ie >> <http://www.iedr.ie> > >> --------------------------------------------------------------------- - - > >> - -------------- > > > Registered Office: Fourth Floor, Block 2, Harbour Square, >> Dun Laoghaire, Co. Dublin. Registered in Ireland. No: 315315 >> --------------------------------------------------------------------- - - > >> - -------------- > > > ---------------------------------------------------------------------- - -- > > - ------------ >> The enclosed document is CONFIDENTIAL to addressee and IE Domain >> Registry Ltd. The intended addressee is NOT AUTHORISED to copy, >> distribute, disclose or otherwise use the information disclosed. >> Please also note that this information should not be edited or >> redistributed in any way. >> --------------------------------------------------------------------- - - > >> - -------------- > > > > > >>> On 6 Aug 2015, at 11:47, Matthijs Mekking >>> <[email protected] <mailto:[email protected]>> >>> wrote: >>> >>> Hi Paul, >>> >>> Try running the zone or RR through ldns-read-zone or some >>> other ldns example tool (OpenDNSSEC uses ldns to read in >>> zones), maybe that will help to gain some clue. >>> >>> Best regards, Matthijs >>> >>> On 06-08-15 12:16, Paul Duffy wrote: >>>> Hi, >>>> >>>> Yesterday I ran into an issue when it came to signing zone. >>>> We had added a new DS record into our zone, when it came to >>>> signing the zone it choked when it hit this record: >>>> >>>> ods-signerd: [adapter] error parsing RR at line 505591 >>>> (Syntax error, could not parse the RR's rdata): snafu.ie >>>> <http://snafu.ie> <http://snafu.ie>.#011IN#011DS#01135791 5 1 >>>> 8B1EEDA983F93F36F69D4D165F079P51C8071B1D >>>> >>>> >>>> Now as far as I can tell there was nothing invalid per-say >>>> which this compare to any of the other DS’s that are in the >>>> zone. I had ran through a number of verification steps >>>> beforehand and verified that the DS match with what was >>>> published on the client domain’s (redacted - changed to >>>> snafu.ie <http://snafu.ie> <http://snafu.ie>) own name >>>> servers. When I got them to roll their KSK and submit new DS >>>> record it worked fine and didn’t cause any issue with ODS, >>>> so I’m bit perplexed. Any feedback/help would be >>>> appreciated. >>>> >>>> (ods-signerd 1.4.6) >>>> >>>> -Paul >>>> >>>> -- Paul Duffy Network Operations IE Domain Registry Ltd Tel: >>>> +353 (1) 2365416 Fax: +353 (1) 2300365 Web: www.iedr.ie >>>> <http://www.iedr.ie> <http://www.iedr.ie> >>>> >>>> ------------------------------------------------------------------- - - > >>>> - ---------------- >>>> >>>> > Registered Office: Fourth Floor, Block 2, Harbour Square, >>>> Dun Laoghaire, Co. Dublin. Registered in Ireland. No: 315315 >>>> >>>> ------------------------------------------------------------------- - - > >>>> - ---------------- >>>> >>>> > ---------------------------------------------------------------------- - -- > > - ------------ >>>> The enclosed document is CONFIDENTIAL to addressee and IE >>>> Domain Registry Ltd. The intended addressee is NOT >>>> AUTHORISED to copy, distribute, disclose or otherwise use the >>>> information disclosed. Please also note that this information >>>> should not be edited or redistributed in any way. >>>> ------------------------------------------------------------------- - - > >>>> - ---------------- >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> > _______________________________________________ >>>> Opendnssec-user mailing list >>>> [email protected] >>>> <mailto:[email protected]> >>>> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user >>>> >>> >>> >>>> _______________________________________________ Opendnssec-user >>> mailing list [email protected] >>> <mailto:[email protected]> >>> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user > > > >> _______________________________________________ Opendnssec-user >> mailing list [email protected] >> https://lists.opendnssec.org/mailman/listinfo/opendnssec-user > > _______________________________________________ Opendnssec-user > mailing list [email protected] > https://lists.opendnssec.org/mailman/listinfo/opendnssec-user > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlXDcg0ACgkQI3PTR4mhavhY6ACgkgSkH1EMTXYqmEGGiIkY1k1E ScQAoJsFM70AtdJeOYoNNVHnMdBIWKLC =cUia -----END PGP SIGNATURE----- _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
