ports/133130: unbound : does not start during boot

[Erwan David]

>Number:         133130
>Category:       ports
>Synopsis:       unbound : does not start during boot
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Mar 27 16:50:04 UTC 2009
>Closed-Date:
>Last-Modified:
>Originator:     Erwan David
>Release:        7.1-RELEASE-p4
>Organization:
>Environment:
FreeBSD nez-casse.depot.rail.eu.org 7.1-RELEASE-p4 FreeBSD 7.1-RELEASE-p4 #0: Sun Mar 22 09:43:46 UTC 2009     root at amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC  amd64

>Description:
At boot, unbound fails to start with the following error messages

Mar 26 22:31:01 nez-casse unbound: [653:0] notice: init module 0: validator
Mar 26 22:31:01 nez-casse unbound: [653:0] notice: init module 1: iterator
Mar 26 22:31:01 nez-casse unbound: [653:0] notice: openssl has no entropy, seeding with time and pid
Mar 26 22:31:01 nez-casse unbound: [653:0] error: Error for server-cert-file: /unbound_server.pem
Mar 26 22:31:01 nez-casse unbound: [653:0] error: Error in SSL_CTX use_certificate_file crypto error:0200100D:system
library:fopen:Permission denied
Mar 26 22:31:01 nez-casse unbound: [653:0] error: and additionally crypto error:20074002:BIO routines:FILE_CTRL:system lib
Mar 26 22:31:01 nez-casse unbound: [653:0] error: and additionally crypto error:140AD002:SSL
routines:SSL_CTX_use_certificate_file:system lib
Mar 26 22:31:01 nez-casse unbound: [653:0] error: util/alloc.c at 131 could not pthread_spin_destroy(&alloc->lock): Invalid
argument
Mar 26 22:31:01 nez-casse unbound: [653:0] fatal error: Could not initialize main thread

/unbound_server.pem is not mentionned in /usr/local/etc/unbound/unbound.conf

However after boot /usr/local/etc/rc.d/unbound start works without any
problem.

Except one must restart all daemons which relies on a working DNS
(apache, etc) at start time.

This beahvious was seen under 7.1-Release-p2 also

>How-To-Repeat:
Install unbound, reboot
>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: