Date: Wed, 23 Nov 2011 15:27:29 +0000 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: freebsd-questions@freebsd.org Subject: Re: BIND 9.8.1-P1 with OpenSSL 1.0.0 issues.. Message-ID: <4ECD10E1.7040803@infracaninophile.co.uk> In-Reply-To: <20111123090105.0891aa62@scorpio> References: <014201cca9de$ec1429c0$c43c7d40$@leadmon.net> <4ECCF2B5.3050704@infracaninophile.co.uk> <20111123090105.0891aa62@scorpio>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigAB469A8371352D888EFD3114
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
On 23/11/2011 14:01, Jerry wrote:
> On Wed, 23 Nov 2011 13:18:45 +0000
> Matthew Seaman articulated:
>=20
>> I've been using the attached patch with the dns/bind98 port and
>> openssl-1.0.x from ports for months. This disables using the GOST
>> cipher plugins -- which is no big deal as far as I'm concerned. GOST
>> ciphers are only supplied as plugin modules unlike all other ciphers
>> in openssl, which is a new thing with version 1.0.0 in ports. It's
>> that libgost.so plugin shlib not playing well with chroot that
>> apparently causes named to crash.
>=20
> Mathew, has anyone filed a PR either here or upstream regarding this
> phenomena?
I sent my patch to Doug Barton (bind maintainer in src/ports) but he
didn't accept it. Discussions I've seen around this are that the
OpenSSL guys say that it's not a bug from their side, and that bind is
doing it wrong. I believe the ISC guys are aware but I don't know if
they have a fix in the works or not. Possibly some advanced combination
of LDFLAGS at compile-time might sort things, but I really have no idea.=
Cheers,
Matthew
--=20
Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard
Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
JID: matthew@infracaninophile.co.uk Kent, CT11 9PW
--------------enigAB469A8371352D888EFD3114
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.16 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAk7NEOgACgkQ8Mjk52CukIxCQgCglVFu1SWavRG+j0vuPCdCrx9K
YgcAniw9yWVMlctp9qpaMV3hT2Utstq/
=oGWB
-----END PGP SIGNATURE-----
--------------enigAB469A8371352D888EFD3114--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4ECD10E1.7040803>