https://bugzilla.novell.com/show_bug.cgi?id=815180 https://bugzilla.novell.com/show_bug.cgi?id=815180#c0 Summary: BIND9: DNSSEC validating resolver spams log file Classification: openSUSE Product: openSUSE 12.3 Version: Final Platform: x86-64 OS/Version: openSUSE 12.3 Status: RESOLVED Severity: Normal Priority: P5 - None Component: Network AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: suse+build@de-korte.org QAContact: qa-bugs@suse.de Found By: --- Blocker: --- Arjen de Korte changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |DUPLICATE User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:20.0) Gecko/20100101 Firefox/20.0 After enabling DNSSEC validation in BIND 9, the logs are now spammed with entries like 2013-04-14T10:49:08.853565+02:00 mail named[1030]: RSA_verify failed 2013-04-14T10:49:08.854698+02:00 mail named[1030]: error:04091068:rsa routines:INT_RSA_VERIFY:bad signature:rsa_sign.c:291: 2013-04-14T10:49:08.856909+02:00 mail named[1030]: sucessfully validated after lower casing signer 'US' 2013-04-14T10:49:08.859272+02:00 mail named[1030]: RSA_verify failed 2013-04-14T10:49:08.861649+02:00 mail named[1030]: error:04091068:rsa routines:INT_RSA_VERIFY:bad signature:rsa_sign.c:291: 2013-04-14T10:49:08.863744+02:00 mail named[1030]: sucessfully validated after lower casing signer 'US' 2013-04-14T10:49:08.865570+02:00 mail named[1030]: RSA_verify failed 2013-04-14T10:49:08.867168+02:00 mail named[1030]: error:04091068:rsa routines:INT_RSA_VERIFY:bad signature:rsa_sign.c:291: 2013-04-14T10:49:08.868671+02:00 mail named[1030]: sucessfully validated after lower casing signer 'US' 2013-04-14T10:49:08.870261+02:00 mail named[1030]: RSA_verify failed 2013-04-14T10:49:08.871815+02:00 mail named[1030]: error:04091068:rsa routines:INT_RSA_VERIFY:bad signature:rsa_sign.c:291: 2013-04-14T10:49:08.873465+02:00 mail named[1030]: sucessfully validated after lower casing signer 'US' This seems to be a known issue with recent versions of BIND according to the following message: http://www.mail-archive.com/bind-users@lists.isc.org/msg14759.html Currently, the resolver is quite noisy... Reproducible: Always Steps to Reproduce: 1. 2. 3. --- Comment #1 from Arjen de Korte 2013-04-14 21:06:25 UTC --- Apparently something went wrong here. Since after submitting, I got an error response from the server, I submitted this bug report again twice. It turns out there are now three identical reports. Please remove/close bug reports 815180 and 815181. *** This bug has been marked as a duplicate of bug 815179 *** http://bugzilla.novell.com/show_bug.cgi?id=815179 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.