Re: Crypto failure Issues

2015-07-27 Thread Tony Finch
Mark Andrews wrote: > > And the issue almost certainly is not providing a complete enough > change root environment. Gost dynamically loads the crypto engine > after named starts. I have a lot of sympathy for anyone who encounters this problem because it took me a long time to work out what the

Re: Crypto failure Issues

2015-07-27 Thread Mark Andrews
And the issue almost certainly is not providing a complete enough change root environment. Gost dynamically loads the crypto engine after named starts. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

RE: Crypto failure Issues

2015-07-27 Thread Stewart, Larry C Sr CTR DISA JITC (US)
: Stewart, Larry C Sr CTR DISA JITC (US) Cc: bind-users@lists.isc.org Subject: RE: Crypto failure Issues Stewart, Larry C Sr CTR DISA JITC (US) wrote: > Thank you that was the trick. What impact does that have on crypto > operations used by BIND? GOST is the Russian equivalent of NIST

RE: Crypto failure Issues

2015-07-27 Thread Tony Finch
Stewart, Larry C Sr CTR DISA JITC (US) wrote: > Thank you that was the trick. What impact does that have on crypto > operations used by BIND? GOST is the Russian equivalent of NIST. They publish cryptography standards, amongst other things. There are RFCs describing how to use GOST crypto with T

RE: Crypto failure Issues

2015-07-27 Thread Stewart, Larry C Sr CTR DISA JITC (US)
...@hermes.cam.ac.uk] On Behalf Of Tony Finch Sent: Monday, July 27, 2015 8:27 AM To: Stewart, Larry C Sr CTR DISA JITC (US) Cc: bind-users@lists.isc.org Subject: Re: Crypto failure Issues Stewart, Larry C Sr CTR DISA JITC (US) wrote: > I am having issues with bind failing to start due t

Re: Crypto failure Issues

2015-07-27 Thread Tony Finch
Stewart, Larry C Sr CTR DISA JITC (US) wrote: > I am having issues with bind failing to start due to a crypto failure > when I compile with the --with-openssl option when I have openssl > version 1.0.2d or 1.0.2c > > Is anyone aware of any compatibility issues between bind and openssl > version 1

RE: Crypto failure Issues

2015-07-27 Thread Stewart, Larry C Sr CTR DISA JITC (US)
...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Ted Mittelstaedt Sent: Friday, July 24, 2015 12:28 PM To: bind-users@lists.isc.org Subject: Re: Crypto failure Issues Did you compile both openssl and bind or are you using a prebuilt binary? There are (apparently) problems with

Re: Crypto failure Issues

2015-07-24 Thread Ted Mittelstaedt
(US) Sent: Friday, July 24, 2015 9:22 AM To: bind-users@lists.isc.org Subject: Crypto failure Issues I am having issues with bind failing to start due to a crypto failure when I compile with the --with-openssl option when I have openssl version 1.0.2d or 1.0.2c Is anyone aware of any compatibil

RE: Crypto failure Issues

2015-07-24 Thread Stewart, Larry C Sr CTR DISA JITC (US)
y.c.stewart@mail.mil -Original Message- From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Stewart, Larry C Sr CTR DISA JITC (US) Sent: Friday, July 24, 2015 9:22 AM To: bind-users@lists.isc.org Subject: Crypto failure Issues I am having is

Crypto failure Issues

2015-07-24 Thread Stewart, Larry C Sr CTR DISA JITC (US)
I am having issues with bind failing to start due to a crypto failure when I compile with the --with-openssl option when I have openssl version 1.0.2d or 1.0.2c Is anyone aware of any compatibility issues between bind and openssl version 1.0.2? I have no issues when I use openssl version 0.9.8z