Re: Trouble building bind with Openssl support

2014-02-12 Thread Tony Finch
Mark Andrews wrote: > > If you really want to go down this path then you need to copy over > the shared library which is dynamically loaded into named at runtime specifically lib/engines/libgost.so > or rebuild openssl to include the gost code in libcrypto. How do you do that? The documentation

Re: changing NSEC3 salt

2014-02-12 Thread Chris Thompson
On Feb 11 2014, David Newman wrote: [...] That's interesting. It seems to contradict Lucas' advice to "always use '1 0 10' for these [NSEC3] flags, as fewer aren't secure enough and more aren't any more secure." It's difficult to see how that can make sense. Increasing the number of iterations

bind-9.9.5 regression test error

2014-02-12 Thread Bruce Dubbs
I've been trying to run the regression tests for bind-9.9.5 and keep getting lots of timeouts and errors in the system/inline test. The procedure I'm using to build and run the tests is at http://www.linuxfromscratch.org/blfs/view/svn/server/bind.html For bind-9.9.4-P2, all the tests pass, but

Re: bind-9.9.5 regression test error

2014-02-12 Thread Christoph Moench-Tegeder
## Bruce Dubbs (bruce.du...@gmail.com): > I've been trying to run the regression tests for bind-9.9.5 and keep > getting lots of timeouts and errors in the system/inline test. I saw the same symptoms when packaging/testing bind-9.9.5. I traced the issue to processes blocking in read() from /dev/

Re: bind-9.9.5 regression test error

2014-02-12 Thread Bruce Dubbs
Christoph Moench-Tegeder wrote: ## Bruce Dubbs (bruce.du...@gmail.com): I've been trying to run the regression tests for bind-9.9.5 and keep getting lots of timeouts and errors in the system/inline test. I saw the same symptoms when packaging/testing bind-9.9.5. I traced the issue to processe

Re: bind-9.9.5 regression test error

2014-02-12 Thread Mark Andrews
In message <52fbd79b.4070...@gmail.com>, Bruce Dubbs writes: > Christoph Moench-Tegeder wrote: > > ## Bruce Dubbs (bruce.du...@gmail.com): > > > >> I've been trying to run the regression tests for bind-9.9.5 and keep > >> getting lots of timeouts and errors in the system/inline test. > > > > I saw

Re: bind-9.9.5 regression test error

2014-02-12 Thread Doug Barton
On 02/12/2014 11:16 AM, Christoph Moench-Tegeder wrote: ## Bruce Dubbs (bruce.du...@gmail.com): I've been trying to run the regression tests for bind-9.9.5 and keep getting lots of timeouts and errors in the system/inline test. I saw the same symptoms when packaging/testing bind-9.9.5. I trac

Re: changing NSEC3 salt

2014-02-12 Thread Doug Barton
On 02/12/2014 05:17 AM, Chris Thompson wrote: On Feb 11 2014, David Newman wrote: [...] That's interesting. It seems to contradict Lucas' advice to "always use '1 0 10' for these [NSEC3] flags, as fewer aren't secure enough and more aren't any more secure." It's difficult to see how that can

New BIND versions are available (-W1 versions)

2014-02-12 Thread Michael McNally
Recent maintenance releases of BIND (BIND 9.9.5, 9.8.7, and 9.6-ESV-R11) were found to contain a defect preventing the included dig, nslookup, and host utilities from exiting properly when run on Microsoft Windows systems. Only Windows systems were affected. To address this regression, which was

Re: bind-9.9.5 regression test error

2014-02-12 Thread Christoph Moench-Tegeder
## Doug Barton (do...@dougbarton.us): > If you don't have enough random bits on your system to run these simple > tests, your /dev/random is seriously underpopulated, and likely a > security risk. You should definitely not put BIND in production compiled > with the option you mention above. Ou