• Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • rhel-7.9
    • bind
    • None
    • Moderate
    • rhel-sst-cs-net-perf-services
    • ssg_core_services
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • Red Hat Enterprise Linux
    • None
    • None
    • None
    • x86_64
    • None

      BIND 9.11.4-P2-RedHat-9.11.4-26.P2.el7_9.14

      When signing a zone with a ECDSA dnssec-signzone hangs.
      /usr/sbin/dnssec-signzone -N unixtime -k Kexample.com.+013+36340.key -o example.com example.com Kexample.com.+013+55624.key

      The dsset-file is made correctly, but upon signing the zone the program hangs.

      last lines of strace-output

      clone(child_stack=0x7ff905ddeeb0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tidptr=0x7ff905ddf9d0, tls=0x7ff905ddf700, child_tidptr=0x7ff905ddf9d0) = 2980
      open("/proc/self/task/2980/comm", O_RDWR) = 5
      write(5, "isc-worker0001", 14) = 14
      close(5) = 0
      write(2, "dnssec-signzone: ", 17) = 17
      write(2, "no existing signatures for examp"..., 45) = 45
      write(2, "dnssec-signzone: ", 17) = 17
      write(2, "example.com/NSEC:\n", 19) = 19
      write(2, "dnssec-signzone: ", 17) = 17
      write(2, "\tsigning with dnskey example.co"..., 56) = 56
      read(3, 0x7fff04db22e0, 32) = -1 EAGAIN (Hulpbron is tijdelijk onbeschikbaar)
      select(4, [3], [], NULL, NULL <unfinished ...>) = ?

      Upgrading to Bind-9.18 with the isc-bind copr-package fixed the problem.
      Please update the maintained bind-version so everyone can sign with ECDSA-keys as this is coming to be the standard.
      In CentOS-8 this bug is also resolved.

              pemensik@redhat.com Petr Mensik
              info@webservice.be Pascal Nobus (Inactive)
              Petr Mensik Petr Mensik
              rhel-cs-infra-services-qe rhel-cs-infra-services-qe rhel-cs-infra-services-qe rhel-cs-infra-services-qe
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: