<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr">Hello Willem-san<br></div><p>Thank you for your reply.</p><p>I installed unbound-1.9.0rc1 from the source. Starting unbound.conf with the default, failed to start.<br>Is there anything that you have to set at a minimum? How can I start it?</p><p>The following is the operation log.<br>------------------------------------<br># wget <a href="https://nlnetlabs.nl/downloads/unbound/unbound-1.9.0rc1.tar.gz" target="_blank">https://nlnetlabs.nl/downloads/unbound/unbound-1.9.0rc1.tar.gz</a><br># tar zxvf unbound-1.9.0rc1.tar.gz<br># ./configure<br># make<br># make install<br># rpm -q openssl-devel<br>openssl-devel-1.0.2k-16.el7.x86_64<br># rpm -q openssl-devel<br>openssl-devel-1.0.2k-16.el7.x86_64<br># /etc/rc.d/init.d/unbound start<br>Starting unbound (via systemctl): Job for unbound.service failed because the control process exited with error code. See "systemctl status unbound.service" and "journalctl -xe" for details.<br> [Fail] <br># systemctl status unbound.service<br>● unbound.service - LSB: unbound recursive Domain Name Server.<br> Loaded: loaded (/etc/rc.d/init.d/unbound; bad; vendor preset: disabled)<br> Active: failed (Result: exit-code) since 2019-02-01 16:01:19 JST; 36s ago<br> Docs: man:systemd-sysv-generator(8)<br> Process: 2148 ExecStart=/etc/rc.d/init.d/unbound start (code=exited, status=5)</p><p> 2月 01 16:01:18 <a href="http://example.com" target="_blank">example.com</a> systemd[1]: Starting LSB: unbound recursive Domain Name Server....<br> 2月 01 16:01:19 <a href="http://example.com" target="_blank">example.com</a> systemd[1]: unbound.service: control process exited, code=exited status=5<br> 2月 01 16:01:19 <a href="http://example.com" target="_blank">example.com</a> systemd[1]: Failed to start LSB: unbound recursive Domain Name Server..<br> 2月 01 16:01:19 <a href="http://example.com" target="_blank">example.com</a> systemd[1]: Unit unbound.service entered failed state.<br> 2月 01 16:01:19 <a href="http://example.com" target="_blank">example.com</a> systemd[1]: unbound.service failed.<br> <br># journalctl -xe<br>-- Unit session-1410.scope has begun starting up.<br> 2月 01 16:01:01 <a href="http://example.com" target="_blank">example.com</a> CROND[2111]: (root) CMD (run-parts /etc/cron.hourly)<br> 2月 01 16:01:01 <a href="http://example.com" target="_blank">example.com</a> run-parts(/etc/cron.hourly)[2115]: starting 0anacron<br> 2月 01 16:01:01 <a href="http://example.com" target="_blank">example.com</a> run-parts(/etc/cron.hourly)[2121]: finished 0anacron<br> 2月 01 16:01:01 <a href="http://example.com" target="_blank">example.com</a> run-parts(/etc/cron.hourly)[2123]: starting mcelog.cron<br> 2月 01 16:01:01 <a href="http://example.com" target="_blank">example.com</a> run-parts(/etc/cron.hourly)[2127]: finished mcelog.cron<br> 2月 01 16:01:18 <a href="http://example.com" target="_blank">example.com</a> polkitd[756]: Registered Authentication Agent for unix-process:2141:71567004 (system bus name :1.2995 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/Authe<br> 2月 01 16:01:18 <a href="http://example.com" target="_blank">example.com</a> systemd[1]: Starting LSB: unbound recursive Domain Name Server....<br>-- Subject: Unit unbound.service has begun start-up<br>-- Defined-By: systemd<br>-- Support: <a href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel" target="_blank">http://lists.freedesktop.org/mailman/listinfo/systemd-devel</a><br>--<br>-- Unit unbound.service has begun starting up.<br> 2月 01 16:01:19 <a href="http://example.com" target="_blank">example.com</a> systemd[1]: unbound.service: control process exited, code=exited status=5<br> 2月 01 16:01:19 <a href="http://example.com" target="_blank">example.com</a> systemd[1]: Failed to start LSB: unbound recursive Domain Name Server..<br>-- Subject: Unit unbound.service has failed<br>-- Defined-By: systemd<br>-- Support: <a href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel" target="_blank">http://lists.freedesktop.org/mailman/listinfo/systemd-devel</a><br>--<br>-- Unit unbound.service has failed.<br>--<br>-- The result is failed.<br> 2月 01 16:01:19 <a href="http://example.com" target="_blank">example.com</a> systemd[1]: Unit unbound.service entered failed state.<br> 2月 01 16:01:19 <a href="http://example.com" target="_blank">example.com</a> systemd[1]: unbound.service failed.<br> 2月 01 16:01:19 <a href="http://example.com" target="_blank">example.com</a> polkitd[756]: Unregistered Authentication Agent for unix-process:2141:71567004 (system bus name :1.2995, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale ja_JP.UTF-8) (disconne<br># tail -f /var/log/messages<br>Feb 1 16:01:18 example systemd: Starting LSB: unbound recursive Domain Name Server....<br>Feb 1 16:01:19 example systemd: unbound.service: control process exited, code=exited status=5<br>Feb 1 16:01:19 example systemd: Failed to start LSB: unbound recursive Domain Name Server..<br>Feb 1 16:01:19 example systemd: Unit unbound.service entered failed state.<br>Feb 1 16:01:19 example systemd: unbound.service failed.<br>------------------------------------</p><p>What is the solution?</p><p><br></p><div class="gmail_quote"><div class="gmail_attr" dir="ltr">2019年1月29日(火) 18:53 Willem Toorop via Unbound-users <<a href="mailto:unbound-users@nlnetlabs.nl" target="_blank">unbound-users@nlnetlabs.nl</a>>:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid">Hello 水上ナツ,<br>
<br>
You do not need ldns to compile unbound.<br>
The installation guide for Unbound is here:<br>
<br>
<a href="https://nlnetlabs.nl/documentation/unbound/howto-setup/" target="_blank" rel="noreferrer">https://nlnetlabs.nl/documentation/unbound/howto-setup/</a><br>
<br>
You could also try if your distribution has a pre-compiled binary. i.e.:<br>
<br>
yum install unbound<br>
<br>
<br>
-- Willem<br>
<br>
On 29-01-19 09:30, 水上ナツ via Unbound-users wrote:<br>
> Hello. It is my first post.<br>
> <br>
> Unbound is not detailed at all.<br>
> I want to install unbound.<br>
> However, when installing ldns the following log was output and it did<br>
> not work.<br>
> ------<br>
> Please upgrade OpenSSL to version> = 1.1.0 or rerun with - disable -<br>
> dane - verify or - disable - dane - ta -usage<br>
> ------<br>
> The following is the operation log.<br>
> <br>
> What is the solution?<br>
> ----------------------------------------------------<br>
> # wget <a href="https://www.nlnetlabs.nl/downloads/ldns/ldns-1.7.0-rc3.tar.gz" target="_blank" rel="noreferrer">https://www.nlnetlabs.nl/downloads/ldns/ldns-1.7.0-rc3.tar.gz</a><br>
> # tar zxvf ldns-1.7.0-rc3.tar.gz<br>
> # cd ldns-1.7.0-rc3/<br>
> # ./configure<br>
> ...<br>
> configure: error: OpenSSL does not support offline DANE verification<br>
> (Needed for the DANE-TA usage type). Please upgrade OpenSSL to version<br>
>>= 1.1.0 or rerun with --disable-dane-verify or --disable-dane-ta-usage<br>
> <br>
> # yum remove openssl<br>
> # wget <a href="https://www.openssl.org/source/openssl-1.1.1a.tar.gz" target="_blank" rel="noreferrer">https://www.openssl.org/source/openssl-1.1.1a.tar.gz</a><br>
> # tar zxvf openssl-1.1.1a.tar.gz<br>
> # cd openssl-1.1.1a/<br>
> # ./config<br>
> ...<br>
> **********************************************************************<br>
> *** ***<br>
> *** OpenSSL has been successfully configured ***<br>
> *** ***<br>
> *** If you encounter a problem while building, please open an ***<br>
> *** issue on GitHub <<a href="https://github.com/openssl/openssl/issues" target="_blank" rel="noreferrer">https://github.com/openssl/openssl/issues</a>> ***<br>
> *** and include the output from the following command: ***<br>
> *** ***<br>
> *** perl <a href="http://configdata.pm" target="_blank" rel="noreferrer">configdata.pm</a> <<a href="http://configdata.pm" target="_blank" rel="noreferrer">http://configdata.pm</a>><br>
> --dump ***<br>
> *** ***<br>
> *** (If you are new to OpenSSL, you might want to consult the ***<br>
> *** 'Troubleshooting' section in the INSTALL file first) ***<br>
> *** ***<br>
> **********************************************************************<br>
> # make<br>
> # make install<br>
> # cd ldns-1.7.0-rc3/<br>
> # ./configure<br>
> ...<br>
> configure: error: OpenSSL does not support offline DANE verification<br>
> (Needed for the DANE-TA usage type). Please upgrade OpenSSL to version<br>
>>= 1.1.0 or rerun with --disable-dane-verify or --disable-dane-ta-usage<br>
> # ./configure --disable-dane-verify<br>
> # make<br>
> ./libtool --tag=CC --quiet --mode=compile gcc -I. -I. -DHAVE_CONFIG_H<br>
> -DLDNS_TRUST_ANCHOR_FILE="\"/usr/local/etc/unbound/root.key\""<br>
> -Wunused-function -Wstrict-prototypes -Wwrite-strings -W -Wall -g -O2<br>
> -I/usr/local/include -c ./buffer.c -o buffer.lo<br>
> ./libtool --tag=CC --quiet --mode=compile gcc -I. -I. -DHAVE_CONFIG_H<br>
> -DLDNS_TRUST_ANCHOR_FILE="\"/usr/local/etc/unbound/root.key\""<br>
> -Wunused-function -Wstrict-prototypes -Wwrite-strings -W -Wall -g -O2<br>
> -I/usr/local/include -c ./dane.c -o dane.lo<br>
> ./libtool --tag=CC --quiet --mode=compile gcc -I. -I. -DHAVE_CONFIG_H<br>
> -DLDNS_TRUST_ANCHOR_FILE="\"/usr/local/etc/unbound/root.key\""<br>
> -Wunused-function -Wstrict-prototypes -Wwrite-strings -W -Wall -g -O2<br>
> -I/usr/local/include -c ./dname.c -o dname.lo<br>
> ./libtool --tag=CC --quiet --mode=compile gcc -I. -I. -DHAVE_CONFIG_H<br>
> -DLDNS_TRUST_ANCHOR_FILE="\"/usr/local/etc/unbound/root.key\""<br>
> -Wunused-function -Wstrict-prototypes -Wwrite-strings -W -Wall -g -O2<br>
> -I/usr/local/include -c ./dnssec.c -o dnssec.lo<br>
> ./dnssec.c: Within function 'ldns_convert_dsa_rrsig_asn12rdf':<br>
> ./dnssec.c: 1761: 12: Error: indirect reference to an incomplete type<br>
> pointer<br>
> R = dsasig -> r;<br>
> ^<br>
> ./dnssec.c: 1762: 12: Error: indirect reference to an incomplete type<br>
> pointer<br>
> S = dsasig -> s;<br>
> ^<br>
> ./dnssec.c: Within function 'ldns_convert_dsa_rrsig_rdf 2 asn 1':<br>
> ./dnssec.c: 1830: 8: Error: indirect reference to an incomplete type pointer<br>
> dsasig -> r = R;<br>
> ^<br>
> ./dnssec.c: 1831: 8: Error: indirect reference to an incomplete type pointer<br>
> dsasig -> s = S;<br>
> ^<br>
> ./dnssec.c: Within function 'ldns_convert_ecdsa_rrsig_asn1 len2rdf':<br>
> ./dnssec.c: 1870: 15: Error: indirect reference to an incomplete type<br>
> pointer<br>
> r = ecdsa_sig-> r;<br>
> ^<br>
> ./dnssec.c: 1871: 15: Error: indirect reference to an incomplete type<br>
> pointer<br>
> s = ecdsa_sig -> s;<br>
> ^<br>
> make: *** [dnssec.lo] Error 1<br>
> ----------------------------------------------------<br>
> <br>
> What is the solution?<br>
> <br>
<br>
</blockquote></div></div></div></div>