From owner-freebsd-ports@freebsd.org Wed Nov 14 10:12:19 2018 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DA65D1122846 for ; Wed, 14 Nov 2018 10:12:18 +0000 (UTC) (envelope-from mat@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [96.47.72.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 6AE8570A8B; Wed, 14 Nov 2018 10:12:18 +0000 (UTC) (envelope-from mat@FreeBSD.org) Received: from atuin.in.mat.cc (unknown [IPv6:2a01:678:42:ffff:3e15:c2ff:fec4:452e]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) (Authenticated sender: mat/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id A885829BEC; Wed, 14 Nov 2018 10:12:17 +0000 (UTC) (envelope-from mat@FreeBSD.org) Date: Wed, 14 Nov 2018 11:12:14 +0100 From: Mathieu Arnold To: Andrea Venturoli Cc: freebsd-ports@freebsd.org, mat@FreeBSD.org, idefix@fechner.net, kpn@neutralgood.org Subject: Re: BIND update gone bad Message-ID: <20181114101214.3gvoeygj7fnl36li@atuin.in.mat.cc> References: <20181114021512.GA21405@neutralgood.org> <9e884bc5-d048-9b19-e36b-fe53467695eb@fechner.net> <02c0cf8e-f8ef-0035-a1da-b1ef849d3ff0@netfence.it> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="li4sbptyguatlild" Content-Disposition: inline In-Reply-To: <02c0cf8e-f8ef-0035-a1da-b1ef849d3ff0@netfence.it> User-Agent: NeoMutt/20180716 X-Rspamd-Queue-Id: 6AE8570A8B X-Spamd-Result: default: False [-108.93 / 200.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; ALLOW_DOMAIN_WHITELIST(-100.00)[FreeBSD.org]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; DMARC_NA(0.00)[FreeBSD.org]; R_SPF_SOFTFAIL(0.00)[~all]; RCPT_COUNT_FIVE(0.00)[5]; MX_GOOD(-0.01)[cached: mx1.FreeBSD.org]; NEURAL_HAM_SHORT(-1.00)[-1.000,0]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; IP_SCORE(-3.72)[ip: (-9.77), ipnet: 96.47.64.0/20(-4.83), asn: 11403(-3.91), country: US(-0.10)]; ASN(0.00)[asn:11403, ipnet:96.47.64.0/20, country:US]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[] X-Rspamd-Server: mx1.freebsd.org X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Nov 2018 10:12:19 -0000 --li4sbptyguatlild Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Nov 14, 2018 at 10:44:49AM +0100, Andrea Venturoli wrote: > On 11/14/18 7:35 AM, Matthias Fechner wrote: >=20 > > maybe an OPTION problem. > > Make sure you disable the GOST option (in bind and openssl), I faced a > > similar problem, but I thing this option was removed, but I think it is > > a try worth. >=20 > Hello. >=20 > Just to say I've been hit by the same problem: fortunately I was building > from ports, so I could easily move to the previous SVN revision, which fi= xed > this. >=20 > I don't find any GOST option in the latest dns/bind911; I'm using > GSS_API_NONE and SSL is turned on. > Also, I'm using openssl from base, so I've got no GOST option there eithe= r. >=20 > Maybe a bug report should be filled about this? Fixed in r484916. --=20 Mathieu Arnold --li4sbptyguatlild Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAABCgB9FiEEOraXidLtEhBkQLpbOkUW81GDzkgFAlvr9P5fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDNB QjY5Nzg5RDJFRDEyMTA2NDQwQkE1QjNBNDUxNkYzNTE4M0NFNDgACgkQOkUW81GD zki4ZQ/+JIoC28epZw4gjYCYE1wb4i+Ng0lXUKmpq2Xi+t9Fh0blslfz3cKIQAZ2 C/tKvsqAtcQ9DowOWZIHrw6ndmdYBAKk/7ODnFCCLulTAKindIRb0l5plUIkYaUm QiPQMufAnaoQo6/GUa8TuDWO/msGyPeW+odrST0FQ5AQMwQWwnoe3JHmaauF/gIr B6ajSBTDAqp4RT2Zvn7WjCDyhGJp16DiitIOV9sm65LcVFAnH7AeMXpIdVNXKYoZ ODbANix9DvEqtnRxufps3hx0F4Y0EhHI3WoVYfQsQ6bMBjOdymKRarvjAIonBZO4 zACg2ofSBQQt1L51EJmeCTFcH5gZfAXKw0FfZZhmQT9oex8XdLSIUcJp+jTThnMQ u9GPPMl82RxKoYstmwYpWSdlZ72zGIT0UHimQg2Pco01pSk+jqfsz4C25+oNnn1i M/XfZGSgIdi88jWj32lu1wXQlrWtnhvB82euGeIMUNdKVaAO0B3vTw73blBcAAaO o7NN3uzZkLyuPQ08sq4DtVs1nocOL8nyUeji1g5a4K1lNaC3D7JRLkBzdD9nH/eW 27kDj4RW+cfAYJ56mkkx4s4PzoRwgQM7GOTYWr5qboGlyhfbK/I4CVdnRN8q6yK8 66hQhaYLa0bLPGUCg02ttlT8At2cIlzlbQ5rk86NSebgO/pogQA= =YgFm -----END PGP SIGNATURE----- --li4sbptyguatlild--