tags #820974 patch
retitle #820974 does not start chrooted, ENGINE_by_id failed (crypto failure)
thanks
On Sat, May 14, 2016 at 06:32:47PM -0400, Robert Edmonds wrote:
> I would guess that named would not try to load the OpenSSL GOST engine
> at all if BIND is configured and built with --without-gost. Given the
> very few number of domains that are DNSSEC signed with GOST (compared
> even to RSA or ECDSA) and the problems that have to be patched around
> that are caused by OpenSSL engines I wonder if the Debian bind9 package
> should be built with --without-gost.
The following one-liner makes bind9 run chrooted again without copying
libraries into the chroot
diff --git a/debian/rules b/debian/rules
index 80a33383b..fc9d3400f 100755
--- a/debian/rules
+++ b/debian/rules
@@ -61,6 +61,7 @@ stamps/configure: stamps/prepare
--with-libtool \
--enable-shared \
--enable-static \
+ --with-gost=no \
--with-openssl=/usr \
--with-gssapi=/usr \
--with-gnu-ld \
Greetings
Marc
--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany | lose things." Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature | How to make an American Quilt | Fax: *49 6224 1600421
