On Sat, Mar 21, 2015 at 06:48:23PM -0400, Wietse Venema wrote:
> Running openssl s_server and s_client from FreeBSD 10.1 ports
> successfully negotiates a sesion with zlib compression.
>
> As with the OP, Postfix when built with MySQL client has zlib
> explicitly linked in (my earlier test was done on a system where
> MySQL by mistake wasn't included in the build).
>
> Next step is to reproduce the smtpd crash.
On the OP's jailed VM running s_client and s_server from ports does
not yield a crash. Running s_client against smtpd(8) does (disabling
compression in tls_ssl_options suffices to avoid the problem).
With ktrace, I see that in Postfix the dynamic loading of libz
is a noop:
open()
fstat()
close()
the linker decides it already has the library mapped in. With
s_server, the library is actually read after fstat() as expected.
Neither OpenSSL nor Postfix have debugging symbols on that VM, so
further progress on my end is difficult. It is not clear why use
of the dynamically loaded libz works in s_server, but fails in
smtpd(8).
--
Viktor.
