Improved SSL Error Logging [RT #29932]

Noel Butler noel.butler at ausics.net
Thu Dec 6 01:03:24 UTC 2012


Hi Shane, Mark, Evan

On Tue, 2012-10-16 at 08:22 +0200, Shane Kerr wrote:

> Noel,
> 
> These changes are in our review queue now, so will go in future
> releases.
> 
> Cheers,
> 


I guess this was not pushed in?  After update to 9.9.2-p1  the old
logging returned, eg:

<huge snip>
Dec  6 10:47:30 ns1 named[9671]: RSA_verify failed
Dec  6 10:47:30 ns1 named[9671]: error:04077068:rsa
routines:RSA_verify:bad signature:rsa_sign.c:263:
Dec  6 10:47:30 ns1 named[9671]: sucessfully validated after lower
casing signer 'US'
Dec  6 10:47:30 ns1 named[9671]: RSA_verify failed
Dec  6 10:47:30 ns1 named[9671]: error:04077068:rsa
routines:RSA_verify:bad signature:rsa_sign.c:263:
Dec  6 10:47:30 ns1 named[9671]: sucessfully validated after lower
casing signer 'US'
Dec  6 10:50:09 ns1 named[9671]: RSA_verify failed
Dec  6 10:50:09 ns1 named[9671]: error:04077068:rsa
routines:RSA_verify:bad signature:rsa_sign.c:263:
Dec  6 10:50:09 ns1 named[9671]: sucessfully validated after lower
casing signer 'CO'
Dec  6 10:50:09 ns1 named[9671]: RSA_verify failed
Dec  6 10:50:09 ns1 named[9671]: error:04077068:rsa
routines:RSA_verify:bad signature:rsa_sign.c:263:
Dec  6 10:50:09 ns1 named[9671]: sucessfully validated after lower
casing signer 'CO'
<snip>




> --
> Shane Kerr
> ISC
> 
> On Saturday, 2012-10-13 11:07:01 +1000, 
> Noel Butler <noel.butler at ausics.net> wrote:
> > Thanks Mark,
> > 
> > These changes have been committed for future patch releases?
> > 
> > 
> > Cheers
> > 
> > On Fri, 2012-10-12 at 12:16 +1100, Mark Andrews wrote:
> > 
> > 
> > > 
> > > Just drop the log level to ISC_LOG_DEBUG(1) and recompile.
> > > 
> > > Search for "sucessfully validated after lower casing" in
> > > lib/dns/dnssec.c 
> > 
> > 
> 


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20121206/f2009b2e/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: This is a digitally signed message part
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20121206/f2009b2e/attachment.bin>


More information about the bind-users mailing list