#9026 Missing bind-pkcs11-utils causing failures in OpenDNSSec
Closed: fixed 2 years ago by antorres. Opened 2 years ago by fcami.

Ticket was cloned from Red Hat Bugzilla (product Fedora): Bug 2020207

+++ This bug was initially created as a clone of Bug #2020205 +++

Description of problem:
The test suite for OpenDNSSec is failing due to the missing bind-pkcs11-utils package.

Actual results:
Failure in the tests


Expected results:
Passing of the tests

Additional info:
The tests are passing in upstream as the aforementioned package is present.

Metadata Update from @fcami:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=2020207

2 years ago

Metadata Update from @fcami:
- Custom field changelog adjusted to Depend on bind-pkcs11-utils on all Fedora and RHEL versions. Fixes OpenDNSSec integration.
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/6074
- Issue assigned to fcami

2 years ago

Metadata Update from @fcami:
- Custom field changelog adjusted to OpenDNSSec integration: depend on bind-dnssec-utils on all Fedora release and RHEL == 9+. Switch to "/usr/sbin/dnssec-keyfromlabel -E pkcs11" instead of "/usr/sbin/dnssec-keyfromlabel-pkcs11" there too. (was: Depend on bind-pkcs11-utils on all Fedora and RHEL versions. Fixes OpenDNSSec integration.)

2 years ago

The problem is twofold.
First, Fedora and RHEL9 should use "/usr/sbin/dnssec-keyfromlabel -E pkcs11" instead of "/usr/sbin/dnssec-keyfromlabel-pkcs11".
Then, on Centos 9 Streams and RHEL9, only the first tool is provided, as part of bind-dnssec-utils, leading to a file not found error.

The solution then becomes:
- switch from one tool to another
- depend on bind-dnssec-utils
but ONLY on Fedora and RHEL==9+.

master:

  • 20f68d8 freeipa.spec: depend on bind-dnssec-utils

Metadata Update from @fcami:
- Custom field changelog adjusted to OpenDNSSec integration: depend on bind-dnssec-utils on all Fedora releases and RHEL == 9+. Switch to "/usr/sbin/dnssec-keyfromlabel -E pkcs11" instead of "/usr/sbin/dnssec-keyfromlabel-pkcs11" there too. (was: OpenDNSSec integration: depend on bind-dnssec-utils on all Fedora release and RHEL == 9+. Switch to "/usr/sbin/dnssec-keyfromlabel -E pkcs11" instead of "/usr/sbin/dnssec-keyfromlabel-pkcs11" there too.)

2 years ago

ipa-4-9:

  • f89d59b freeipa.spec: depend on bind-dnssec-utils

Metadata Update from @antorres:
- Custom field affects_doc adjusted to on
- Custom field knownissue adjusted to on
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Login to comment on this ticket.

Metadata