In message <0808710b26e7e541ad135be9553cfb6896c1b3a...@hq-ec-02.ba.ad.ssa.gov>, "Khuu, Linh MicroTech" writes: > I just turned on the dnssec-validation today, and I saw lots of messages: > > 13-Apr-2010 15:17:17.122 dnssec: debug 3: validating @202be918: 3e77469i4= > 8du24agcu5ftfumd6iocmrk.org NSEC3: verify rdataset (keyid=3D47948): You mus= > t use the keyboard to create entropy, since your system is lacking > /dev/random (or equivalent)
This is like the linker stuffed up. "You must ... (or equivalent)" is not the textual description of a result code. It is a message that can be emitted by the command line tools used to generate keys. Named doesn't call this bit of code. If you are using shared libraries I would be checking that named is finding the right version of the shared library. > 13-Apr-2010 15:26:35.016 dnssec: debug 3: validating @202bd638: usps.gov DN= > SKEY: verify rdataset (keyid=3D10539): You must use the keyboard to create = > entropy, since your system is lacking > /dev/random (or equivalent) > > 13-Apr-2010 15:26:37.385 dnssec: debug 3: validating @202c0e28: usps.gov = > SOA: verify rdataset (keyid=3D43133): You must use the keyboard to create e= > ntropy, since your system is lacking > /dev/random (or equivalent) > > Is this a problem with dnssec on my DNS server? > > Linh Khuu > Network Security Specialist > MicroTech ESS Contract > Office: 410-966-0798 > Pager: 410-232-2350 > Email: linh.k...@ssa.gov > =20 -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
