0

I used bind 9.8 on gentoo for monthes. After updating the system, bind is now at 9.12.3_p4 but it does not start anymore unless I comment dnssec-validation auto.

I get nothing in named.log.

I get this in message.log :

Jun 27 17:08:16 ns3079610 named[29268]: obtaining root key for view _default from '/etc/bind/bind.keys'
    Jun 27 17:08:16 ns3079610 named[29268]: obtaining root key for view _default from '/etc/bind/bind.keys'
    Jun 27 17:08:16 ns3079610 named[29268]: /etc/bind/bind.keys:28: ignoring managed key for '.': no crypto support
    Jun 27 17:08:16 ns3079610 named[29268]: root key not loaded
    Jun 27 17:08:16 ns3079610 named[29268]: loading configuration: failure
    Jun 27 17:08:16 ns3079610 named[29268]: exiting (due to fatal error)
    Jun 27 17:08:16 ns3079610 /etc/init.d/named[29266]: start-stop-daemon: failed to start `/usr/sbin/named'
    Jun 27 17:08:16 ns3079610 /etc/init.d/named[29242]: ERROR: named failed to start

Thanks for any help.

Improve this question
3
  • 1
    'no crypto support' sounds like you missed a compile option.
    – Gerald Schneider
    Commented Jun 27, 2019 at 15:29
  • Thanks, Gerald, I missed this point. I added ssl in uses clauses and I recompiled bind. It works like a charm. I think old bind versions have ssl enabled by default cause I never needed to explicitly set ssl uses clause.
    – user2244705
    Commented Jun 27, 2019 at 16:11
  • I posted my comment as an answer, so you can accept it and mark the question as solved. I'll expand it later regarding the use flags when I'm not on my phone.
    – Gerald Schneider
    Commented Jun 27, 2019 at 16:13

1 Answer 1

Reset to default
2

The error message

no crypto support

sounds like you missed a compile option.

Run emerge --info | grep ^USE. You should find ssl in there. If not, you have to add it:

Open /etc/portage/make.conf with an editor.

Add ssl to the USE variable:

USE="ldap ssl"

Recompile the package:

emerge bind

Now you should be able to start it.

Improve this answer
1
  • I'll expand it later +1 when you expand this. Now it solves the problem, but is not really useful as an answer for anyone seeing it in the future.
    – Esa Jokinen
    Commented Jun 29, 2019 at 6:18

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .