Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
BIND
BIND
  • Project overview
    • Project overview
    • Details
    • Activity
    • Releases
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 583
    • Issues 583
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Merge Requests 110
    • Merge Requests 110
  • CI / CD
    • CI / CD
    • Pipelines
    • Jobs
    • Schedules
  • Operations
    • Operations
    • Incidents
    • Environments
  • Packages & Registries
    • Packages & Registries
    • Container Registry
  • Analytics
    • Analytics
    • CI / CD
    • Repository
    • Value Stream
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Members
    • Members
  • Collapse sidebar
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
  • ISC Open Source Projects
  • BINDBIND
  • Issues
  • #1103

Closed
Open
Opened Jun 23, 2019 by Lefteris@Tsintjelis

dnssec-keymgr needs clearer error for undefined policies

I am using FreeBSD 12 with bind binary port v9.11.8. v9.11.6P1 also had the same problem/bug(?).

I am using ECDSAP256SHA256 for ZSK and KSK. I have made a very simple policy that I am trying to automate by using dnssec-keymgr in crontab.

policy default {
        directory "/usr/local/etc/namedb/keys";
        algorithm ECDSAP256SHA256;
        pre-publish zsk 1w;
        post-publish zsk 1w;
        roll-period zsk 2mo;
};

zone example.com {
        policy default;
};

However, every time I run:

dnssec-keymgr -K /usr/local/etc/namedb/keys -r /dev/random

I always get this message:

Unable to apply policy: example.com/ECDSAP256SHA256: unsupported operand type(s) for +: 'float' and 'NoneType'

Edited Jun 23, 2019 by Evan Hunt
Assignee
Assign to
None
Milestone
None
Assign milestone
Time tracking
None
Due date
None
Reference: isc-projects/bind9#1103