From owner-freebsd-questions@FreeBSD.ORG Wed Nov 23 13:56:07 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 63540106566B for ; Wed, 23 Nov 2011 13:56:07 +0000 (UTC) (envelope-from jedwards@bsdftw.org) Received: from mail.bsdftw.org (unknown [IPv6:2001:470:c630:3000::]) by mx1.freebsd.org (Postfix) with ESMTP id 40A6A8FC12 for ; Wed, 23 Nov 2011 13:56:07 +0000 (UTC) Received: from webmail.bsdftw.org (unknown [64.253.104.155]) by mail.bsdftw.org (Postfix) with ESMTP id C669376F1; Wed, 23 Nov 2011 08:56:05 -0500 (EST) Received: from 75.149.97.29 (SquirrelMail authenticated user jedwards) by webmail.bsdftw.org with HTTP; Wed, 23 Nov 2011 08:56:06 -0500 Message-ID: In-Reply-To: <4ECCF2B5.3050704@infracaninophile.co.uk> References: <014201cca9de$ec1429c0$c43c7d40$@leadmon.net> <4ECCF2B5.3050704@infracaninophile.co.uk> Date: Wed, 23 Nov 2011 08:56:06 -0500 From: "James Edwards" To: "Matthew Seaman" User-Agent: SquirrelMail/1.4.22 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Cc: freebsd-questions@freebsd.org Subject: Re: BIND 9.8.1-P1 with OpenSSL 1.0.0 issues.. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Nov 2011 13:56:07 -0000 On Wed, November 23, 2011 08:18, Matthew Seaman wrote: > I've been using the attached patch with the dns/bind98 port and > openssl-1.0.x from ports for months. This disables using the GOST > cipher plugins -- which is no big deal as far as I'm concerned. GOST > ciphers are only supplied as plugin modules unlike all other ciphers in > openssl, which is a new thing with version 1.0.0 in ports. It's that > libgost.so plugin shlib not playing well with chroot that apparently > causes named to crash. > > Cheers, > > Matthew > > -- > Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard > Flat 3 > PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate > JID: matthew@infracaninophile.co.uk Kent, CT11 9PW > You, sir, are correct about the chroot. Bind 9.8.1 and OpenSSL 1.0.0 don't play nicely in a chroot environment. This also isn't limited to FreeBSD, as I experienced the problem on Solaris 10. James