https://bugzilla.novell.com/show_bug.cgi?id=815180
https://bugzilla.novell.com/show_bug.cgi?id=815180#c0
Summary: BIND9: DNSSEC validating resolver spams log file
Classification: openSUSE
Product: openSUSE 12.3
Version: Final
Platform: x86-64
OS/Version: openSUSE 12.3
Status: RESOLVED
Severity: Normal
Priority: P5 - None
Component: Network
AssignedTo: bnc-team-screening@forge.provo.novell.com
ReportedBy: suse+build@de-korte.org
QAContact: qa-bugs@suse.de
Found By: ---
Blocker: ---
Arjen de Korte changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |DUPLICATE
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:20.0) Gecko/20100101
Firefox/20.0
After enabling DNSSEC validation in BIND 9, the logs are now spammed with
entries like
2013-04-14T10:49:08.853565+02:00 mail named[1030]: RSA_verify failed
2013-04-14T10:49:08.854698+02:00 mail named[1030]: error:04091068:rsa
routines:INT_RSA_VERIFY:bad signature:rsa_sign.c:291:
2013-04-14T10:49:08.856909+02:00 mail named[1030]: sucessfully validated after
lower casing signer 'US'
2013-04-14T10:49:08.859272+02:00 mail named[1030]: RSA_verify failed
2013-04-14T10:49:08.861649+02:00 mail named[1030]: error:04091068:rsa
routines:INT_RSA_VERIFY:bad signature:rsa_sign.c:291:
2013-04-14T10:49:08.863744+02:00 mail named[1030]: sucessfully validated after
lower casing signer 'US'
2013-04-14T10:49:08.865570+02:00 mail named[1030]: RSA_verify failed
2013-04-14T10:49:08.867168+02:00 mail named[1030]: error:04091068:rsa
routines:INT_RSA_VERIFY:bad signature:rsa_sign.c:291:
2013-04-14T10:49:08.868671+02:00 mail named[1030]: sucessfully validated after
lower casing signer 'US'
2013-04-14T10:49:08.870261+02:00 mail named[1030]: RSA_verify failed
2013-04-14T10:49:08.871815+02:00 mail named[1030]: error:04091068:rsa
routines:INT_RSA_VERIFY:bad signature:rsa_sign.c:291:
2013-04-14T10:49:08.873465+02:00 mail named[1030]: sucessfully validated after
lower casing signer 'US'
This seems to be a known issue with recent versions of BIND according to the
following message:
http://www.mail-archive.com/bind-users@lists.isc.org/msg14759.html
Currently, the resolver is quite noisy...
Reproducible: Always
Steps to Reproduce:
1.
2.
3.
--- Comment #1 from Arjen de Korte 2013-04-14 21:06:25 UTC ---
Apparently something went wrong here. Since after submitting, I got an error
response from the server, I submitted this bug report again twice. It turns out
there are now three identical reports. Please remove/close bug reports 815180
and 815181.
*** This bug has been marked as a duplicate of bug 815179 *** http://bugzilla.novell.com/show_bug.cgi?id=815179
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
