https://bugzilla.novell.com/show_bug.cgi?id=815179
https://bugzilla.novell.com/show_bug.cgi?id=815179#c0
Summary: BIND9: DNSSEC validating resolver spams log file
Classification: openSUSE
Product: openSUSE 12.3
Version: Final
Platform: x86-64
OS/Version: openSUSE 12.3
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Network
AssignedTo: bnc-team-screening@forge.provo.novell.com
ReportedBy: suse+build@de-korte.org
QAContact: qa-bugs@suse.de
Found By: ---
Blocker: ---
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:20.0) Gecko/20100101
Firefox/20.0
After enabling DNSSEC validation in BIND 9, the logs are now spammed with
entries like
2013-04-14T10:49:08.853565+02:00 mail named[1030]: RSA_verify failed
2013-04-14T10:49:08.854698+02:00 mail named[1030]: error:04091068:rsa
routines:INT_RSA_VERIFY:bad signature:rsa_sign.c:291:
2013-04-14T10:49:08.856909+02:00 mail named[1030]: sucessfully validated after
lower casing signer 'US'
2013-04-14T10:49:08.859272+02:00 mail named[1030]: RSA_verify failed
2013-04-14T10:49:08.861649+02:00 mail named[1030]: error:04091068:rsa
routines:INT_RSA_VERIFY:bad signature:rsa_sign.c:291:
2013-04-14T10:49:08.863744+02:00 mail named[1030]: sucessfully validated after
lower casing signer 'US'
2013-04-14T10:49:08.865570+02:00 mail named[1030]: RSA_verify failed
2013-04-14T10:49:08.867168+02:00 mail named[1030]: error:04091068:rsa
routines:INT_RSA_VERIFY:bad signature:rsa_sign.c:291:
2013-04-14T10:49:08.868671+02:00 mail named[1030]: sucessfully validated after
lower casing signer 'US'
2013-04-14T10:49:08.870261+02:00 mail named[1030]: RSA_verify failed
2013-04-14T10:49:08.871815+02:00 mail named[1030]: error:04091068:rsa
routines:INT_RSA_VERIFY:bad signature:rsa_sign.c:291:
2013-04-14T10:49:08.873465+02:00 mail named[1030]: sucessfully validated after
lower casing signer 'US'
This seems to be a known issue with recent versions of BIND according to the
following message:
http://www.mail-archive.com/bind-users@lists.isc.org/msg14759.html
Currently, the resolver is quite noisy...
Reproducible: Always
Steps to Reproduce:
1.
2.
3.
--- Comment #1 from Arjen de Korte