I enabeld some extra debug but stil not clear: Jan 7 13:34:27 Scripting ods-enforcerd: [cmdhandler] create socket /run/opendnssec/enforcer.sock Jan 7 13:34:27 Scripting ods-enforcerd: [file] create and chown /run/opendnssec with user=4294967295 group=4294967295 Jan 7 13:34:27 Scripting ods-enforcerd: [file] create and chown /run/opendnssec/enforcer.sock with user=4294967295 group=4294967295 Jan 7 13:34:27 Scripting ods-enforcerd: [file] create and chown /var/lib/opendnssec/enforcer with user=4294967295 group=4294967295 Jan 7 13:34:27 Scripting ods-enforcerd: [engine] drop privileges Jan 7 13:34:27 Scripting ods-enforcerd: [engine] running as pid 9430 Jan 7 13:34:27 Scripting ods-enforcerd: create worker[1] Jan 7 13:34:27 Scripting ods-enforcerd: create worker[2] Jan 7 13:34:27 Scripting ods-enforcerd: create worker[3] Jan 7 13:34:27 Scripting ods-enforcerd: create worker[4] Jan 7 13:34:27 Scripting ods-enforcerd: [util] writing pid 9430 to pidfile /run/opendnssec/enforcerd.pid Jan 7 13:34:27 Scripting ods-enforcerd: [file] open file file=/run/opendnssec/enforcerd.pid mode=writing Jan 7 13:34:27 Scripting ods-enforcerd: [file] openfile /run/opendnssec/enforcerd.pid count 1 Jan 7 13:34:27 Scripting ods-enforcerd: [engine] enforcer started Jan 7 13:34:27 Scripting ods-enforcerd: [engine] start command handler Jan 7 13:34:27 Scripting ods-enforcerd: [engine] start workers Jan 7 13:34:27 Scripting ods-enforcerd: [cmdhandler] start Jan 7 13:34:27 Scripting ods-enforcerd: [autostart_cmd] autostart Jan 7 13:34:27 Scripting ods-enforcerd: [scheduler] schedule task [hsmkeygen] for all policies Jan 7 13:34:27 Scripting ods-enforcerd: [scheduler] signal now Jan 7 13:34:27 Scripting ods-enforcerd: [scheduler] schedule task [resalt] for policies Jan 7 13:34:27 Scripting ods-enforcerd: [scheduler] signal now Jan 7 13:34:27 Scripting ods-enforcerd: [scheduler] schedule task [enforce] for next zone Jan 7 13:34:27 Scripting ods-enforcerd: [scheduler] signal now Jan 7 13:34:27 Scripting ods-enforcerd: [engine] taking a break Jan 7 13:34:27 Scripting ods-enforcerd: [worker[1]]: report for duty Jan 7 13:34:27 Scripting ods-enforcerd: [scheduler] signal now Jan 7 13:34:27 Scripting ods-enforcerd: [worker[1]] start working Jan 7 13:34:27 Scripting ods-enforcerd: [worker[1]]: perform task [enforce] for next zone Jan 7 13:34:27 Scripting ods-enforcerd: [worker[2]]: report for duty Jan 7 13:34:27 Scripting ods-enforcerd: [scheduler] signal now Jan 7 13:34:27 Scripting ods-enforcerd: SELECT zone.id, zone.rev, zone.policyId, zone.name, zone.signconfNeedsWriting, zone.signconfPath, zone.nextChange, zone.ttlEndDs, zone.ttlEndDk, zone.ttlEndRs, zone.rollKskNow, zone.rollZskNow, zone.rollCskNow, zone.inputAdapterType, zone.inputAdapterUri, zone.outputAdapterType, zone.outputAdapterUri, zone.nextKskRoll, zone.nextZskRoll, zone.nextCskRoll FROM zone Jan 7 13:34:27 Scripting ods-enforcerd: [worker[2]] start working Jan 7 13:34:27 Scripting ods-enforcerd: [worker[2]]: perform task [hsmkeygen] for all policies Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate_all_task] generate for all policies [duration: 0] Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate_all] generating keys Jan 7 13:34:27 Scripting ods-enforcerd: SELECT policy.id, policy.rev, policy.name, policy.description, policy.signaturesResign, policy.signaturesRefresh, policy.signaturesJitter, policy.signaturesInceptionOffset, policy.signaturesValidityDefault, policy.signaturesValidityDenial, policy.signaturesValidityKeyset, policy.signaturesMaxZoneTtl, policy.denialType, policy.denialOptout, policy.denialTtl, policy.denialResalt, policy.denialAlgorithm, policy.denialIterations, policy.denialSaltLength, policy.denialSalt, policy.denialSaltLastChange, policy.keysTtl, policy.keysRetireSafety, policy.keysPublishSafety, policy.keysShared, policy.keysPurgeAfter, policy.zonePropagationDelay, policy.zoneSoaTtl, policy.zoneSoaMinimum, policy.zoneSoaSerial, policy.parentRegistrationDelay, policy.parentPropagationDelay, policy.parentDsTtl, policy.parentSoaTtl, policy.parentSoaMinimum, policy.passthrough FROM policy Jan 7 13:34:27 Scripting ods-enforcerd: [worker[3]]: report for duty Jan 7 13:34:27 Scripting ods-enforcerd: [scheduler] no alarm set Jan 7 13:34:27 Scripting ods-enforcerd: [worker[3]] start working Jan 7 13:34:27 Scripting ods-enforcerd: [worker[3]]: perform task [resalt] for policies Jan 7 13:34:27 Scripting ods-enforcerd: [worker[4]]: report for duty Jan 7 13:34:27 Scripting ods-enforcerd: SELECT policy.id, policy.rev, policy.name, policy.description, policy.signaturesResign, policy.signaturesRefresh, policy.signaturesJitter, policy.signaturesInceptionOffset, policy.signaturesValidityDefault, policy.signaturesValidityDenial, policy.signaturesValidityKeyset, policy.signaturesMaxZoneTtl, policy.denialType, policy.denialOptout, policy.denialTtl, policy.denialResalt, policy.denialAlgorithm, policy.denialIterations, policy.denialSaltLength, policy.denialSalt, policy.denialSaltLastChange, policy.keysTtl, policy.keysRetireSafety, policy.keysPublishSafety, policy.keysShared, policy.keysPurgeAfter, policy.zonePropagationDelay, policy.zoneSoaTtl, policy.zoneSoaMinimum, policy.zoneSoaSerial, policy.parentRegistrationDelay, policy.parentPropagationDelay, policy.parentDsTtl, policy.parentSoaTtl, policy.parentSoaMinimum, policy.passthrough FROM policy WHERE policy.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT policy.id, policy.rev, policy.name, policy.description, policy.signaturesResign, policy.signaturesRefresh, policy.signaturesJitter, policy.signaturesInceptionOffset, policy.signaturesValidityDefault, policy.signaturesValidityDenial, policy.signaturesValidityKeyset, policy.signaturesMaxZoneTtl, policy.denialType, policy.denialOptout, policy.denialTtl, policy.denialResalt, policy.denialAlgorithm, policy.denialIterations, policy.denialSaltLength, policy.denialSalt, policy.denialSaltLastChange, policy.keysTtl, policy.keysRetireSafety, policy.keysPublishSafety, policy.keysShared, policy.keysPurgeAfter, policy.zonePropagationDelay, policy.zoneSoaTtl, policy.zoneSoaMinimum, policy.zoneSoaSerial, policy.parentRegistrationDelay, policy.parentPropagationDelay, policy.parentDsTtl, policy.parentSoaTtl, policy.parentSoaMinimum, policy.passthrough FROM policy WHERE policy.denialType = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT policyKey.id, policyKey.rev, policyKey.policyId, policyKey.role, policyKey.algorithm, policyKey.bits, policyKey.lifetime, policyKey.repository, policyKey.standby, policyKey.manualRollover, policyKey.rfc5011, policyKey.minimize FROM policyKey WHERE policyKey.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate] repository SoftHSM role KSK Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM hsmKey WHERE hsmKey.policyId = ? AND hsmKey.state = ? AND hsmKey.bits = ? AND hsmKey.algorithm = ? AND hsmKey.role = ? AND hsmKey.isRevoked = ? AND hsmKey.keyType = ? AND hsmKey.repository = ? Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] update zone: test.local Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updatePolicy: policyName: LAB Jan 7 13:34:27 Scripting ods-enforcerd: SELECT policyKey.id, policyKey.rev, policyKey.policyId, policyKey.role, policyKey.algorithm, policyKey.bits, policyKey.lifetime, policyKey.repository, policyKey.standby, policyKey.manualRollover, policyKey.rfc5011, policyKey.minimize FROM policyKey WHERE policyKey.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM zone WHERE zone.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: [policy_resalt_task] policies have been updated Jan 7 13:34:27 Scripting ods-enforcerd: [worker[3]] finished working Jan 7 13:34:27 Scripting ods-enforcerd: [scheduler] schedule task [resalt] for policies Jan 7 13:34:27 Scripting ods-enforcerd: [scheduler] SIGALRM set Jan 7 13:34:27 Scripting ods-enforcerd: [worker[3]]: report for duty Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyData.id, keyData.rev, keyData.zoneId, keyData.hsmKeyId, keyData.algorithm, keyData.inception, keyData.role, keyData.introducing, keyData.shouldRevoke, keyData.standby, keyData.activeZsk, keyData.publish, keyData.activeKsk, keyData.dsAtParent, keyData.keytag, keyData.minimize FROM keyData WHERE keyData.zoneId = ? Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate] repository SoftHSM role ZSK Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM hsmKey WHERE hsmKey.policyId = ? AND hsmKey.state = ? AND hsmKey.bits = ? AND hsmKey.algorithm = ? AND hsmKey.role = ? AND hsmKey.isRevoked = ? AND hsmKey.keyType = ? AND hsmKey.repository = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM zone WHERE zone.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT hsmKey.id, hsmKey.rev, hsmKey.policyId, hsmKey.locator, hsmKey.state, hsmKey.bits, hsmKey.algorithm, hsmKey.role, hsmKey.inception, hsmKey.isRevoked, hsmKey.keyType, hsmKey.repository, hsmKey.backup FROM hsmKey WHERE hsmKey.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT policyKey.id, policyKey.rev, policyKey.policyId, policyKey.role, policyKey.algorithm, policyKey.bits, policyKey.lifetime, policyKey.repository, policyKey.standby, policyKey.manualRollover, policyKey.rfc5011, policyKey.minimize FROM policyKey WHERE policyKey.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT hsmKey.id, hsmKey.rev, hsmKey.policyId, hsmKey.locator, hsmKey.state, hsmKey.bits, hsmKey.algorithm, hsmKey.role, hsmKey.inception, hsmKey.isRevoked, hsmKey.keyType, hsmKey.repository, hsmKey.backup FROM hsmKey WHERE hsmKey.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate] repository SoftHSM role KSK Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM hsmKey WHERE hsmKey.policyId = ? AND hsmKey.state = ? AND hsmKey.bits = ? AND hsmKey.algorithm = ? AND hsmKey.role = ? AND hsmKey.isRevoked = ? AND hsmKey.keyType = ? AND hsmKey.repository = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT hsmKey.id, hsmKey.rev, hsmKey.policyId, hsmKey.locator, hsmKey.state, hsmKey.bits, hsmKey.algorithm, hsmKey.role, hsmKey.inception, hsmKey.isRevoked, hsmKey.keyType, hsmKey.repository, hsmKey.backup FROM hsmKey WHERE hsmKey.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: message repeated 6 times: [ SELECT hsmKey.id, hsmKey.rev, hsmKey.policyId, hsmKey.locator, hsmKey.state, hsmKey.bits, hsmKey.algorithm, hsmKey.role, hsmKey.inception, hsmKey.isRevoked, hsmKey.keyType, hsmKey.repository, hsmKey.backup FROM hsmKey WHERE hsmKey.id = ?] Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM zone WHERE zone.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT hsmKey.id, hsmKey.rev, hsmKey.policyId, hsmKey.locator, hsmKey.state, hsmKey.bits, hsmKey.algorithm, hsmKey.role, hsmKey.inception, hsmKey.isRevoked, hsmKey.keyType, hsmKey.repository, hsmKey.backup FROM hsmKey WHERE hsmKey.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT hsmKey.id, hsmKey.rev, hsmKey.policyId, hsmKey.locator, hsmKey.state, hsmKey.bits, hsmKey.algorithm, hsmKey.role, hsmKey.inception, hsmKey.isRevoked, hsmKey.keyType, hsmKey.repository, hsmKey.backup FROM hsmKey WHERE hsmKey.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate] repository SoftHSM role ZSK Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM hsmKey WHERE hsmKey.policyId = ? AND hsmKey.state = ? AND hsmKey.bits = ? AND hsmKey.algorithm = ? AND hsmKey.role = ? AND hsmKey.isRevoked = ? AND hsmKey.keyType = ? AND hsmKey.repository = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT hsmKey.id, hsmKey.rev, hsmKey.policyId, hsmKey.locator, hsmKey.state, hsmKey.bits, hsmKey.algorithm, hsmKey.role, hsmKey.inception, hsmKey.isRevoked, hsmKey.keyType, hsmKey.repository, hsmKey.backup FROM hsmKey WHERE hsmKey.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: message repeated 2 times: [ SELECT hsmKey.id, hsmKey.rev, hsmKey.policyId, hsmKey.locator, hsmKey.state, hsmKey.bits, hsmKey.algorithm, hsmKey.role, hsmKey.inception, hsmKey.isRevoked, hsmKey.keyType, hsmKey.repository, hsmKey.backup FROM hsmKey WHERE hsmKey.id = ?] Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyDependency.id, keyDependency.rev, keyDependency.zoneId, keyDependency.fromKeyDataId, keyDependency.toKeyDataId, keyDependency.type FROM keyDependency WHERE keyDependency.zoneId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyData.id, keyData.rev, keyData.zoneId, keyData.hsmKeyId, keyData.algorithm, keyData.inception, keyData.role, keyData.introducing, keyData.shouldRevoke, keyData.standby, keyData.activeZsk, keyData.publish, keyData.activeKsk, keyData.dsAtParent, keyData.keytag, keyData.minimize FROM keyData WHERE keyData.zoneId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT hsmKey.id, hsmKey.rev, hsmKey.policyId, hsmKey.locator, hsmKey.state, hsmKey.bits, hsmKey.algorithm, hsmKey.role, hsmKey.inception, hsmKey.isRevoked, hsmKey.keyType, hsmKey.repository, hsmKey.backup FROM hsmKey WHERE hsmKey.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyState.id, keyState.rev, keyState.keyDataId, keyState.type, keyState.state, keyState.lastChange, keyState.minimize, keyState.ttl FROM keyState WHERE keyState.keyDataId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM zone WHERE zone.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT hsmKey.id, hsmKey.rev, hsmKey.policyId, hsmKey.locator, hsmKey.state, hsmKey.bits, hsmKey.algorithm, hsmKey.role, hsmKey.inception, hsmKey.isRevoked, hsmKey.keyType, hsmKey.repository, hsmKey.backup FROM hsmKey WHERE hsmKey.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT policyKey.id, policyKey.rev, policyKey.policyId, policyKey.role, policyKey.algorithm, policyKey.bits, policyKey.lifetime, policyKey.repository, policyKey.standby, policyKey.manualRollover, policyKey.rfc5011, policyKey.minimize FROM policyKey WHERE policyKey.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyState.id, keyState.rev, keyState.keyDataId, keyState.type, keyState.state, keyState.lastChange, keyState.minimize, keyState.ttl FROM keyState WHERE keyState.keyDataId = ? Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate] repository SoftHSM role KSK Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM hsmKey WHERE hsmKey.policyId = ? AND hsmKey.state = ? AND hsmKey.bits = ? AND hsmKey.algorithm = ? AND hsmKey.role = ? AND hsmKey.isRevoked = ? AND hsmKey.keyType = ? AND hsmKey.repository = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT hsmKey.id, hsmKey.rev, hsmKey.policyId, hsmKey.locator, hsmKey.state, hsmKey.bits, hsmKey.algorithm, hsmKey.role, hsmKey.inception, hsmKey.isRevoked, hsmKey.keyType, hsmKey.repository, hsmKey.backup FROM hsmKey WHERE hsmKey.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyState.id, keyState.rev, keyState.keyDataId, keyState.type, keyState.state, keyState.lastChange, keyState.minimize, keyState.ttl FROM keyState WHERE keyState.keyDataId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM zone WHERE zone.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT hsmKey.id, hsmKey.rev, hsmKey.policyId, hsmKey.locator, hsmKey.state, hsmKey.bits, hsmKey.algorithm, hsmKey.role, hsmKey.inception, hsmKey.isRevoked, hsmKey.keyType, hsmKey.repository, hsmKey.backup FROM hsmKey WHERE hsmKey.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate] repository SoftHSM role ZSK Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM hsmKey WHERE hsmKey.policyId = ? AND hsmKey.state = ? AND hsmKey.bits = ? AND hsmKey.algorithm = ? AND hsmKey.role = ? AND hsmKey.isRevoked = ? AND hsmKey.keyType = ? AND hsmKey.repository = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyState.id, keyState.rev, keyState.keyDataId, keyState.type, keyState.state, keyState.lastChange, keyState.minimize, keyState.ttl FROM keyState WHERE keyState.keyDataId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT hsmKey.id, hsmKey.rev, hsmKey.policyId, hsmKey.locator, hsmKey.state, hsmKey.bits, hsmKey.algorithm, hsmKey.role, hsmKey.inception, hsmKey.isRevoked, hsmKey.keyType, hsmKey.repository, hsmKey.backup FROM hsmKey WHERE hsmKey.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM zone WHERE zone.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyState.id, keyState.rev, keyState.keyDataId, keyState.type, keyState.state, keyState.lastChange, keyState.minimize, keyState.ttl FROM keyState WHERE keyState.keyDataId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT policyKey.id, policyKey.rev, policyKey.policyId, policyKey.role, policyKey.algorithm, policyKey.bits, policyKey.lifetime, policyKey.repository, policyKey.standby, policyKey.manualRollover, policyKey.rfc5011, policyKey.minimize FROM policyKey WHERE policyKey.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT hsmKey.id, hsmKey.rev, hsmKey.policyId, hsmKey.locator, hsmKey.state, hsmKey.bits, hsmKey.algorithm, hsmKey.role, hsmKey.inception, hsmKey.isRevoked, hsmKey.keyType, hsmKey.repository, hsmKey.backup FROM hsmKey WHERE hsmKey.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate] repository SoftHSM role KSK Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM hsmKey WHERE hsmKey.policyId = ? AND hsmKey.state = ? AND hsmKey.bits = ? AND hsmKey.algorithm = ? AND hsmKey.role = ? AND hsmKey.isRevoked = ? AND hsmKey.keyType = ? AND hsmKey.repository = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyState.id, keyState.rev, keyState.keyDataId, keyState.type, keyState.state, keyState.lastChange, keyState.minimize, keyState.ttl FROM keyState WHERE keyState.keyDataId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM zone WHERE zone.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT hsmKey.id, hsmKey.rev, hsmKey.policyId, hsmKey.locator, hsmKey.state, hsmKey.bits, hsmKey.algorithm, hsmKey.role, hsmKey.inception, hsmKey.isRevoked, hsmKey.keyType, hsmKey.repository, hsmKey.backup FROM hsmKey WHERE hsmKey.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate] repository SoftHSM role ZSK Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM hsmKey WHERE hsmKey.policyId = ? AND hsmKey.state = ? AND hsmKey.bits = ? AND hsmKey.algorithm = ? AND hsmKey.role = ? AND hsmKey.isRevoked = ? AND hsmKey.keyType = ? AND hsmKey.repository = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyState.id, keyState.rev, keyState.keyDataId, keyState.type, keyState.state, keyState.lastChange, keyState.minimize, keyState.ttl FROM keyState WHERE keyState.keyDataId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM zone WHERE zone.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone: processing test.local with policyName LAB Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyDependency.id, keyDependency.rev, keyDependency.zoneId, keyDependency.fromKeyDataId, keyDependency.toKeyDataId, keyDependency.type FROM keyDependency WHERE keyDependency.zoneId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT policyKey.id, policyKey.rev, policyKey.policyId, policyKey.role, policyKey.algorithm, policyKey.bits, policyKey.lifetime, policyKey.repository, policyKey.standby, policyKey.manualRollover, policyKey.rfc5011, policyKey.minimize FROM policyKey WHERE policyKey.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone: processing key a91529a6115e99a514197aca707e39b9 4 Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone: processing key 549bf53b44b04b19a22d7b208f1885c3 1 Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone: May ZSK 549bf53b44b04b19a22d7b208f1885c3 DNSKEY in state omnipresent transition to unretentive? Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone Policy says we can (1/3) Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyData.id, keyData.rev, keyData.zoneId, keyData.hsmKeyId, keyData.algorithm, keyData.inception, keyData.role, keyData.introducing, keyData.shouldRevoke, keyData.standby, keyData.activeZsk, keyData.publish, keyData.activeKsk, keyData.dsAtParent, keyData.keytag, keyData.minimize FROM keyData WHERE keyData.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate] repository SoftHSM role KSK Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM hsmKey WHERE hsmKey.policyId = ? AND hsmKey.state = ? AND hsmKey.bits = ? AND hsmKey.algorithm = ? AND hsmKey.role = ? AND hsmKey.isRevoked = ? AND hsmKey.keyType = ? AND hsmKey.repository = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyState.id, keyState.rev, keyState.keyDataId, keyState.type, keyState.state, keyState.lastChange, keyState.minimize, keyState.ttl FROM keyState WHERE keyState.keyDataId = ? Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone: May ZSK 549bf53b44b04b19a22d7b208f1885c3 RRSIG in state unretentive transition to hidden? Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone Policy says we can (1/3) Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyData.id, keyData.rev, keyData.zoneId, keyData.hsmKeyId, keyData.algorithm, keyData.inception, keyData.role, keyData.introducing, keyData.shouldRevoke, keyData.standby, keyData.activeZsk, keyData.publish, keyData.activeKsk, keyData.dsAtParent, keyData.keytag, keyData.minimize FROM keyData WHERE keyData.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM zone WHERE zone.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyState.id, keyState.rev, keyState.keyDataId, keyState.type, keyState.state, keyState.lastChange, keyState.minimize, keyState.ttl FROM keyState WHERE keyState.keyDataId = ? Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate] repository SoftHSM role ZSK Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM hsmKey WHERE hsmKey.policyId = ? AND hsmKey.state = ? AND hsmKey.bits = ? AND hsmKey.algorithm = ? AND hsmKey.role = ? AND hsmKey.isRevoked = ? AND hsmKey.keyType = ? AND hsmKey.repository = ? Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone: processing key 6738b5dcea086c30106fdf89c7502a10 4 Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone: May KSK 6738b5dcea086c30106fdf89c7502a10 DS in state omnipresent transition to unretentive? Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone Policy says we can (1/3) Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone: May KSK 6738b5dcea086c30106fdf89c7502a10 DNSKEY in state omnipresent transition to unretentive? Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone Policy says we can (1/3) Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone: May KSK 6738b5dcea086c30106fdf89c7502a10 RRSIGDNSKEY in state omnipresent transition to unretentive? Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone Policy says we can (1/3) Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone: processing key c6d70fba0fb270e07dd24e9bf9fa7731 1 Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone: May ZSK c6d70fba0fb270e07dd24e9bf9fa7731 DNSKEY in state omnipresent transition to unretentive? Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone Policy says we can (1/3) Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyData.id, keyData.rev, keyData.zoneId, keyData.hsmKeyId, keyData.algorithm, keyData.inception, keyData.role, keyData.introducing, keyData.shouldRevoke, keyData.standby, keyData.activeZsk, keyData.publish, keyData.activeKsk, keyData.dsAtParent, keyData.keytag, keyData.minimize FROM keyData WHERE keyData.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyState.id, keyState.rev, keyState.keyDataId, keyState.type, keyState.state, keyState.lastChange, keyState.minimize, keyState.ttl FROM keyState WHERE keyState.keyDataId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM zone WHERE zone.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyData.id, keyData.rev, keyData.zoneId, keyData.hsmKeyId, keyData.algorithm, keyData.inception, keyData.role, keyData.introducing, keyData.shouldRevoke, keyData.standby, keyData.activeZsk, keyData.publish, keyData.activeKsk, keyData.dsAtParent, keyData.keytag, keyData.minimize FROM keyData WHERE keyData.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT policyKey.id, policyKey.rev, policyKey.policyId, policyKey.role, policyKey.algorithm, policyKey.bits, policyKey.lifetime, policyKey.repository, policyKey.standby, policyKey.manualRollover, policyKey.rfc5011, policyKey.minimize FROM policyKey WHERE policyKey.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyState.id, keyState.rev, keyState.keyDataId, keyState.type, keyState.state, keyState.lastChange, keyState.minimize, keyState.ttl FROM keyState WHERE keyState.keyDataId = ? Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate] repository SoftHSM role KSK Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM hsmKey WHERE hsmKey.policyId = ? AND hsmKey.state = ? AND hsmKey.bits = ? AND hsmKey.algorithm = ? AND hsmKey.role = ? AND hsmKey.isRevoked = ? AND hsmKey.keyType = ? AND hsmKey.repository = ? Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone: May ZSK c6d70fba0fb270e07dd24e9bf9fa7731 RRSIG in state unretentive transition to hidden? Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone Policy says we can (1/3) Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyData.id, keyData.rev, keyData.zoneId, keyData.hsmKeyId, keyData.algorithm, keyData.inception, keyData.role, keyData.introducing, keyData.shouldRevoke, keyData.standby, keyData.activeZsk, keyData.publish, keyData.activeKsk, keyData.dsAtParent, keyData.keytag, keyData.minimize FROM keyData WHERE keyData.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyState.id, keyState.rev, keyState.keyDataId, keyState.type, keyState.state, keyState.lastChange, keyState.minimize, keyState.ttl FROM keyState WHERE keyState.keyDataId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM zone WHERE zone.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyData.id, keyData.rev, keyData.zoneId, keyData.hsmKeyId, keyData.algorithm, keyData.inception, keyData.role, keyData.introducing, keyData.shouldRevoke, keyData.standby, keyData.activeZsk, keyData.publish, keyData.activeKsk, keyData.dsAtParent, keyData.keytag, keyData.minimize FROM keyData WHERE keyData.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate] repository SoftHSM role ZSK Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM hsmKey WHERE hsmKey.policyId = ? AND hsmKey.state = ? AND hsmKey.bits = ? AND hsmKey.algorithm = ? AND hsmKey.role = ? AND hsmKey.isRevoked = ? AND hsmKey.keyType = ? AND hsmKey.repository = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyState.id, keyState.rev, keyState.keyDataId, keyState.type, keyState.state, keyState.lastChange, keyState.minimize, keyState.ttl FROM keyState WHERE keyState.keyDataId = ? Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone: processing key 4ad5c47d20fb2a256bc427dccae2f580 1 Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone: May ZSK 4ad5c47d20fb2a256bc427dccae2f580 DNSKEY in state omnipresent transition to unretentive? Jan 7 13:34:27 Scripting ods-enforcerd: [enforcer] updateZone Policy says we can (1/3) Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyData.id, keyData.rev, keyData.zoneId, keyData.hsmKeyId, keyData.algorithm, keyData.inception, keyData.role, keyData.introducing, keyData.shouldRevoke, keyData.standby, keyData.activeZsk, keyData.publish, keyData.activeKsk, keyData.dsAtParent, keyData.keytag, keyData.minimize FROM keyData WHERE keyData.id = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM zone WHERE zone.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT keyState.id, keyState.rev, keyState.keyDataId, keyState.type, keyState.state, keyState.lastChange, keyState.minimize, keyState.ttl FROM keyState WHERE keyState.keyDataId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT policyKey.id, policyKey.rev, policyKey.policyId, policyKey.role, policyKey.algorithm, policyKey.bits, policyKey.lifetime, policyKey.repository, policyKey.standby, policyKey.manualRollover, policyKey.rfc5011, policyKey.minimize FROM policyKey WHERE policyKey.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate] repository SoftHSM role KSK Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM hsmKey WHERE hsmKey.policyId = ? AND hsmKey.state = ? AND hsmKey.bits = ? AND hsmKey.algorithm = ? AND hsmKey.role = ? AND hsmKey.isRevoked = ? AND hsmKey.keyType = ? AND hsmKey.repository = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM zone WHERE zone.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate] repository SoftHSM role ZSK Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM hsmKey WHERE hsmKey.policyId = ? AND hsmKey.state = ? AND hsmKey.bits = ? AND hsmKey.algorithm = ? AND hsmKey.role = ? AND hsmKey.isRevoked = ? AND hsmKey.keyType = ? AND hsmKey.repository = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM zone WHERE zone.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT policyKey.id, policyKey.rev, policyKey.policyId, policyKey.role, policyKey.algorithm, policyKey.bits, policyKey.lifetime, policyKey.repository, policyKey.standby, policyKey.manualRollover, policyKey.rfc5011, policyKey.minimize FROM policyKey WHERE policyKey.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate] repository SoftHSM role KSK Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM hsmKey WHERE hsmKey.policyId = ? AND hsmKey.state = ? AND hsmKey.bits = ? AND hsmKey.algorithm = ? AND hsmKey.role = ? AND hsmKey.isRevoked = ? AND hsmKey.keyType = ? AND hsmKey.repository = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM zone WHERE zone.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate] repository SoftHSM role ZSK Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM hsmKey WHERE hsmKey.policyId = ? AND hsmKey.state = ? AND hsmKey.bits = ? AND hsmKey.algorithm = ? AND hsmKey.role = ? AND hsmKey.isRevoked = ? AND hsmKey.keyType = ? AND hsmKey.repository = ? Jan 7 13:34:27 Scripting ods-enforcerd: SELECT COUNT(*) FROM zone WHERE zone.policyId = ? Jan 7 13:34:27 Scripting ods-enforcerd: [hsm_key_factory_generate_all_task] generate for all policies done Jan 7 13:34:27 Scripting ods-enforcerd: [worker[2]] finished working Jan 7 13:34:27 Scripting ods-enforcerd: [worker[2]]: report for duty Jan 7 13:34:27 Scripting kernel: [ 4931.783357] ods-enforcerd[9433]: segfault at 7f2b6c2c2ff8 ip 00007f2b7046829c sp 00007f2b6c2c2ff0 error 6 in libc-2.23.so[7f2b703e7000+1bf000]
Van: Bas van den Dikkenberg Verzonden: zaterdag 7 januari 2017 12:21 Aan: opendnssec-user@lists.opendnssec.org Onderwerp: segfault error 6 in libc-2.23.so Hello, >From today opendnsec enforcerd won't start all i get is : [ 267.837057] ods-enforcerd[2414]: segfault at 7fa32a56dff8 ip 00007fa32ef1429c sp 00007fa32a56dff0 error 6 in libc-2.23.so[7fa32ee93000+1bf000] Any one an idee
_______________________________________________ Opendnssec-user mailing list Opendnssec-user@lists.opendnssec.org https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
