On Fri, 2019-04-26 at 10:41 +1000, Nick Edwards wrote:
> lots of things failing in recent times, even with CentOS, mostly
> because of openssl min version changes, and most recently even latest
> releases wont build now because of a change in min python versions
> *sigh*, i'm just going to leave it as is, thats all we can do.
openssl version needs to be equal or above 1.0.0. If your UNIX
or Linux openssl version is below 1.0.0, you can change/patch
lib/dns/openssl_link.c and change OPENSSL_VERSION_NUMBER >=
0x10000000L into a lower openssl version. I used the following
patch to build 9.11.7 :
--- bind-9.11.7/lib/dns/openssl_link.c 2019-05-10 07:03:58.000000000 +0200
+++ bind-9.11.7.lock_callback/lib/dns/openssl_link.c 2019-05-22 20:05:28.7479
62152 +0200
@@ -103,6 +103,18 @@
}
#endif
+#if OPENSSL_VERSION_NUMBER >= 0x00907000L && OPENSSL_VERSION_NUMBER < 0x1000000
0L || defined(LIBRESSL_VERSION_NUMBER)
+static void
+lock_callback(int mode, int type, const char *file, int line) {
+ UNUSED(file);
+ UNUSED(line);
+ if ((mode & CRYPTO_LOCK) != 0)
+ LOCK(&locks[type]);
+ else
+ UNLOCK(&locks[type]);
+}
+#endif
+
#if OPENSSL_VERSION_NUMBER >= 0x10000000L && OPENSSL_VERSION_NUMBER < 0x1010000
0L || defined(LIBRESSL_VERSION_NUMBER)
static void
lock_callback(int mode, int type, const char *file, int line) {
However the question arises whether 9.11.6-P1 and 9.11.7 really
require openssl version 0x10000000L or higher, and, when building
9.11.7 say using OpenSSL 0.9.8k and --without-python, might otherwise
some unexpected features of bind stop working correctly?
What i've experienced is that when going from 9.9.9P6 to 9.11.7, and
using bind in recursive mode, i.e. your workstation uses
bind-9.11.7 as a caching nameserver to browse the internet, my laptop
suddenly started to make al lot more noise and was heating up
substantially. After going back to 9.11.6-P1 the heating of my laptop
also went away.
--
Robert M. Stockmann - RHCE
Network Engineer - UNIX/Linux Specialist
crashrecovery.org st...@stokkie.net
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
