Intermittent Zone Signing Failures

2012-06-02 Thread David Kreindler
Running BIND 9.9.1, 9.9.0 or 9.7.6 on AIX 5.2, we are experiencing intermittent failures signing zones, both with named and with dnssec-signzone. We first noticed the problem when BIND 9.9.1's inline signing resulted in zones with missing RRSIGs. When we turned off "auto-dnssec maintain" & "inl

Re: Intermittent Zone Signing Failures

2012-06-02 Thread David Kreindler
Switching from openssl-1.0.1 to openssl-0.9.8 seems to have fixed the problem. On 2 Jun 2012, at 9:57 AM, David Kreindler wrote: > Running BIND 9.9.1, 9.9.0 or 9.7.6 on AIX 5.2, we are experiencing > intermittent failures signing zones, both with named and with dnssec-signzone. > > We first not