Improved SSL Error Logging [RT #29932]
Noel Butler
noel.butler at ausics.net
Thu Dec 6 01:03:24 UTC 2012
Hi Shane, Mark, Evan
On Tue, 2012-10-16 at 08:22 +0200, Shane Kerr wrote:
> Noel,
>
> These changes are in our review queue now, so will go in future
> releases.
>
> Cheers,
>
I guess this was not pushed in? After update to 9.9.2-p1 the old
logging returned, eg:
<huge snip>
Dec 6 10:47:30 ns1 named[9671]: RSA_verify failed
Dec 6 10:47:30 ns1 named[9671]: error:04077068:rsa
routines:RSA_verify:bad signature:rsa_sign.c:263:
Dec 6 10:47:30 ns1 named[9671]: sucessfully validated after lower
casing signer 'US'
Dec 6 10:47:30 ns1 named[9671]: RSA_verify failed
Dec 6 10:47:30 ns1 named[9671]: error:04077068:rsa
routines:RSA_verify:bad signature:rsa_sign.c:263:
Dec 6 10:47:30 ns1 named[9671]: sucessfully validated after lower
casing signer 'US'
Dec 6 10:50:09 ns1 named[9671]: RSA_verify failed
Dec 6 10:50:09 ns1 named[9671]: error:04077068:rsa
routines:RSA_verify:bad signature:rsa_sign.c:263:
Dec 6 10:50:09 ns1 named[9671]: sucessfully validated after lower
casing signer 'CO'
Dec 6 10:50:09 ns1 named[9671]: RSA_verify failed
Dec 6 10:50:09 ns1 named[9671]: error:04077068:rsa
routines:RSA_verify:bad signature:rsa_sign.c:263:
Dec 6 10:50:09 ns1 named[9671]: sucessfully validated after lower
casing signer 'CO'
<snip>
> --
> Shane Kerr
> ISC
>
> On Saturday, 2012-10-13 11:07:01 +1000,
> Noel Butler <noel.butler at ausics.net> wrote:
> > Thanks Mark,
> >
> > These changes have been committed for future patch releases?
> >
> >
> > Cheers
> >
> > On Fri, 2012-10-12 at 12:16 +1100, Mark Andrews wrote:
> >
> >
> > >
> > > Just drop the log level to ISC_LOG_DEBUG(1) and recompile.
> > >
> > > Search for "sucessfully validated after lower casing" in
> > > lib/dns/dnssec.c
> >
> >
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20121206/f2009b2e/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: This is a digitally signed message part
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20121206/f2009b2e/attachment.bin>
More information about the bind-users
mailing list