Hi François, I'm OpenDNSSec port maintainer. I'd like to move the discussion off the list since it's port-specific, please reply directy, you can find my e-mail in the output of `pkg_info opendnssec | grep Maintainer`.
I need the following info: 1. Contents of /etc/opendnssec/conf.xml Please remove PIN or any other sensitive information. 2. Contents of /etc/softhsm2.conf 3. Output of `ls -al $tokendir`, where $tokendir is the location, specified in directories.tokendir line of your /etc/softhsm2.conf 4. Output of `ls -al $hsmdatastore`, where $hsmdatastore is the location specified in <Datastore> section of your /etc/opendnssec/conf.xml Did you read /usr/local/share/doc/pkg-readmes/opendnssec? I tried to make it comprehensive enough to get started. -- With best regards, Pavel Korovin On 04/06, François RONVAUX via Opendnssec-user wrote: > Hello, > > My server runs OpenBSD v6.8 with the softwares from the official OpenBSD > packages repositories : OpenDNSSEC v 2.1.6.p0 and SoftHSM2 v2.6.1p0. > > I follow this guide (that is not very old) : > https://toutetrien.lithio.fr/article/signer-sa-zone-dns-avec-opendnssec > > When I lauch the service with "rcctl start opendnssec", I get this in the > log... > ods-enforcerd: [engine] fail to start enforcerd completely > ods-enforcerd: setup failed: HSM error > ods-enforcerd: [engine] enforcer shutdown > ods-enforcerd: [engine] enforcerd (pid: 92618) stopped with exitcode 3 _______________________________________________ Opendnssec-user mailing list Opendnssec-user@lists.opendnssec.org https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
