Hi,
I made a patch for this issue as attached one, it works well as below.
> henr...@hp115:~/pbuilder/build$ zonesigner --genkeys db.example.com
> db.example.com.signed
>
> if zonesigner appears hung, strike keys until the program completes
> (see the "Entropy" section in the man page for details)
>
> Generating key pair.....................++++++ .....................++++++
> Generating key pair....++++++ ....................++++++
> Generating key pair............................+++
> ......................................................................................+++
>
> dnssec-signzone: warning: db.example.com.zs:1: no TTL specified; using SOA
> MINTTL instead
> Verifying the zone using the following algorithms: RSASHA1.
> Zone signing complete:
> Algorithm: RSASHA1: KSKs: 1 active, 0 stand-by, 0 revoked
> ZSKs: 1 active, 1 stand-by, 0 revoked
>
> zone signed successfully
>
> db.example.com:
> KSK (cur) 05194 -b 2048 07/02/10 (db.example.com-signset-9)
> ZSK (cur) 62211 -b 1024 07/02/10 (db.example.com-signset-7)
> ZSK (pub) 21678 -b 1024 07/02/10 (db.example.com-signset-8)
>
> zone will expire in 4 weeks, 2 days, 0 seconds
> DO NOT delete the keys until this time has passed.
> You have new mail in /var/mail/henrich
Please apply part of this or I'll do delay-upload NMUed package to fix RC bugs.
Thanks!
--
Regards,
Hideki Yamane henrich @ debian.or.jp/org
http://wiki.debian.org/HidekiYamane
diff -u dnssec-tools-1.5/debian/rules dnssec-tools-1.5/debian/rules
--- dnssec-tools-1.5/debian/rules
+++ dnssec-tools-1.5/debian/rules
@@ -42,7 +42,8 @@
--without-validator \
--sysconfdir=/etc \
--with-perl-build-args='INSTALLDIRS=vendor INSTALLVENDORARCH=/usr/share/perl5/ VENDORARCHEXP=/usr/share/perl5/ PREFIX=/usr' \
- CFLAGS="$(CFLAGS)" LDFLAGS="-Wl,-z,defs"
+ CFLAGS="$(CFLAGS)" LDFLAGS="-Wl,-z,defs" \
+ --localstatedir=/var/lib/dnssec-tools
build: build-stamp
diff -u dnssec-tools-1.5/debian/changelog dnssec-tools-1.5/debian/changelog
--- dnssec-tools-1.5/debian/changelog
+++ dnssec-tools-1.5/debian/changelog
@@ -1,3 +1,12 @@
+dnssec-tools (1.5-1.1) unstable; urgency=low
+
+ * Non-maintainer upload.
+ * debian/rules
+ - set "--localstatedir=/var/lib/dnssec-tools" to fix FHS violation
+ (Closes: #587611, #587616)
+
+ -- Hideki Yamane <henr...@debian.org> Fri, 02 Jul 2010 16:33:24 +0900
+
dnssec-tools (1.5-1) unstable; urgency=low
* New Upstream Version (Closes: #533034)
