Thanks for your response. So, I was at the right track, but the version of
SoftHSM2 that is currently released, does not yoet support a migration from
SoftHSM v1. I will wait for a new release of SoftHSM that will support the
migration. Any idea when we can expect the next release of SoftHSM2?
Fred.Zwarts.
-----Oorspronkelijk bericht-----
From: Rickard Bellgrim
Sent: Sunday, January 10, 2016 8:07 AM
To: Fred Zwarts, KVI, Groningen
Cc: Rick van Rein ; [email protected] List
Subject: Re: [Opendnssec-user] Migrating to SoftHSM2
2015-12-23T09:27:09.152565+01:00 kvivs20 ods-signerd: [hsm] sign init:
CKR_GENERAL_ERROR
2015-12-23T09:27:09.152600+01:00 kvivs20 ods-signerd: [hsm] error signing
rrset with libhsm
2015-12-23T09:27:09.152635+01:00 kvivs20 ods-signerd: [rrset] unable to sign
RRset[99]: lhsm_sign() failed
2015-12-23T09:27:09.152671+01:00 kvivs20 ods-signerd:
SecureDataManager.cpp(359): Invalid IV in encrypted data
2015-12-23T09:27:09.152706+01:00 kvivs20 ods-signerd: [hsm] sign init:
CKR_GENERAL_ERROR
2015-12-23T09:27:09.152741+01:00 kvivs20 ods-signerd: [hsm] error signing
rrset with libhsm
2015-12-23T09:27:09.152780+01:00 kvivs20 ods-signerd: [rrset] unable to sign
RRset[28]: lhsm_sign() failed
2015-12-23T09:27:09.152817+01:00 kvivs20 ods-signerd: [worker[2]] sign zone
KVI.nl failed: 673 RRsets failed
2015-12-23T09:27:09.152852+01:00 kvivs20 ods-signerd: [worker[2]] CRITICAL:
failed to sign zone KVI.nl: General error
2015-12-23T09:27:09.152887+01:00 kvivs20 ods-signerd: [worker[2]] backoff
task [sign] for zone KVI.nl with 60 seconds
Do you have any idea what can be done for further diagnosis, or for repair?
The issue was fixed in https://github.com/opendnssec/SoftHSMv2/pull/163
The fix has not been released, but is merged into the develop branch on
GitHub.
// Rickard
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
