>> Does anyone successfully run OpenDNSSEC 2.x with SoftHSM 2.x >> while using sqlite3 as the SoftHSM backend and with a >> WorkerThreads setting in OpenDNSSEC larger than 1? > > Hi Håvard, > > We're one of them. ~80 domains under FreeBSD 12.2-RELEASE: > > opendnssec2-2.1.7 > softhsm2-2.6.1_2 > sqlite3-3.34.1,1 > > WorkerThreads is set to 4 (which is a default value IINM).
Hmm, OK, thanks for that. Just to be super clear: does your softhsm2.conf file say "objectstore.backend = db"? If "yes", that then probably means that in our case we have an undiagnosed platform-related hard-to-debug issue with that combination, where the actual diagnosis is hampered by the lack of useful error messages available from libhsm within OpenDNSSEC 2.1.8. Not too pleasant, but we found a workaround which works for us: use the "file" SoftHSM backend instead. We finally made the leap, BTW, and upgraded our production OpenDNSSEC setup from 1.4.14 to 2.1.8, plus upgraded SoftHSM from 1.3.7 to 2.6.1 at the same time. Looks good so far (knock on wood!) We're running this on NetBSD/amd64 9.0. > I don't recall any issues but perhaps 80 domains is a small value. Maybe, but from looking at the logs and trying to debug this, I got the sense the number of zones doesn't really make all that much of a difference for this problem. Thanks again, - Håvard _______________________________________________ Opendnssec-user mailing list Opendnssec-user@lists.opendnssec.org https://lists.opendnssec.org/mailman/listinfo/opendnssec-user