OpenSSL 1.0.1m problems with BIND 9.9.7

John Thurston john.thurston at alaska.gov
Wed Mar 25 23:13:42 CET 2015


I thought it might be time to update the openSSL on my BIND servers. I 
was using 1.0.1L. The update was to be to 1.0.1M. But when I do so, BIND 
refuses to start. When I turn up debugging on the named process, I see 
that it fails with
> 25-Mar-2015 13:49:21.756 initializing DST: crypto failure
> 25-Mar-2015 13:49:21.756 exiting (due to fatal error)

Has anyone else seen similar problems with the most recent openssl?

-- 
    Do things because you should, not just because you can.

John Thurston    907-465-8591
John.Thurston at alaska.gov
Enterprise Technology Services
Department of Administration
State of Alaska

:: Environment ::

Solaris 10 on SPARC

SunOS nstest 5.10 Generic_150400-17 sun4v sparc sun4v

:: Packages prior to update ::
package                   installed
CSWbind                   9.9.7,REV=2015.02.26
CSWbindutils              9.9.7,REV=2015.02.26
CSWcacertificates         20120511,REV=2012.05.11
CSWcas-cpsampleconf       1.50,REV=2015.01.17
CSWcas-cptemplates        1.49,REV=2013.03.13
CSWcas-crontab            1.48,REV=2012.09.02
CSWcas-etcservices        1.42,REV=2011.02.16
CSWcas-etcshells          1.45,REV=2011.07.12
CSWcas-inetd              1.42,REV=2010.11.26
CSWcas-initsmf            1.50,REV=2015.01.17
CSWcas-migrateconf        1.50,REV=2015.01.17
CSWcas-postmsg            1.42,REV=2010.11.26
CSWcas-preserveconf       1.50,REV=2015.01.17
CSWcas-pycompile          1.49,REV=2013.07.29
CSWcas-sslcert            1.48,REV=2012.10.17
CSWcas-texhash            1.49,REV=2013.02.19
CSWcas-texinfo            1.42,REV=2010.11.26
CSWcas-usergroup          1.50,REV=2015.01.17
CSWcommon                 1.5,REV=2010.12.11
CSWcswclassutils          1.49,REV=2013.03.13
CSWcswpki                 1.1,REV=2013.01.11
CSWggettext-data          0.18.1.1,p,REV=2011.03.15
CSWgnupg                  1.4.12,REV=2012.01.30
CSWiconv                  1.14,REV=2011.08.08
CSWisaexec                0.2,REV=2009.03.26
CSWlibbind                9.9.7,REV=2015.02.26
CSWlibbz2-1-0             1.0.6,REV=2011.08.18
CSWlibcharset1            1.14,REV=2011.08.07
CSWlibcom-err3            1.12.1,REV=2014.03.14
CSWlibcurl4               7.28.1,REV=2013.05.21
CSWlibexpat1              2.1.0,REV=2013.01.01
CSWlibgcc-s1              4.9.2,REV=2014.11.07
CSWlibgssapi-krb5-2       1.9.2,REV=2013.05.14
CSWlibiconv2              1.14,REV=2011.08.07
CSWlibidn11               1.26,REV=2013.01.01
CSWlibintl8               0.18.1.1,p,REV=2011.03.15
CSWlibk5crypto3           1.12.1,REV=2014.03.14
CSWlibkrb5-3              1.12.1,REV=2014.03.14
CSWlibkrb5support0        1.12.1,REV=2014.03.14
CSWliblber2-3-0           2.3_1,REV=2012.02.01
CSWliblber2-4-2           2.4.32,REV=2012.11.05
CSWlibldap-r2-3-0         2.3_1,REV=2012.02.01
CSWlibldap-r2-4-2         2.4.32,REV=2012.11.05
CSWlibldap2-3-0           2.3_1,REV=2012.02.01
CSWlibldap2-4-2           2.4.32,REV=2012.11.05
CSWliblzma5               5.0.5,REV=2013.07.05
CSWlibncurses5            5.9,REV=2011.11.21
CSWlibncursesw5           5.9,REV=2011.11.21
CSWlibnet                 1.0.2a,REV=2011.09.29
CSWlibpanel5              5.9,REV=2011.11.21
CSWlibpanelw5             5.9,REV=2011.11.21
CSWlibreadline6           6.2,REV=2011.07.02
CSWlibsasl2-2             2.1.25,REV=2012.05.06
CSWlibsocks               1.2.1,REV=2010.08.31
CSWlibssl0-9-8            0.9.8ze,REV=2015.02.09
CSWlibssl1-0-0            1.0.1l,REV=2015.02.08
CSWlibverto0              1.12.1,REV=2014.03.14
CSWlibxml2-2              2.9.1,REV=2013.08.16
CSWlibz1                  1.2.8,REV=2013.09.23
CSWnano                   2.2.6,REV=2011.04.07
CSWncurses                5.9,REV=2011.11.21
CSWoldaprt                2.4.32,REV=2012.11.10
CSWopenssl-utils          1.0.1i,REV=2014.08.08
CSWpkgutil                2.6.5,REV=2012.08.15
CSWsudo                   1.8.6p8,REV=2013.04.27
CSWterminfo               5.9,REV=2014.11.28
CSWterminfo-rxvt-unicode  9.20,REV=2014.10.31
CSWzlib                   1.2.7,REV=2012.06.14

:: Packages changed during update ::
package                   installed
CSWlibssl1-0-0            1.0.1m,REV=2015.03.21
CSWopenssl-utils          1.0.1m,REV=2015.03.21

:: Result of launching named with -d 4 and -g ::
> root at nstest:~> /opt/csw/sbin/named -u named -4 -U 32 -d 6 -c /etc/opt/csw/pkg/CSWbind/bind -g
> 25-Mar-2015 13:49:21.683 starting BIND 9.9.7 -u named -4 -U 32 -d 6 -c /etc/opt/csw/pkg/CSWbind/bind -g
> 25-Mar-2015 13:49:21.684 built with '--prefix=/opt/csw' '--exec_prefix=/opt/csw' '--bindir=/opt/csw/bin' '--sbindir=/opt/csw/sbin' '--libexecdir=/opt/csw/libexec' '--datadir=/opt/csw/share' '--sharedstatedir=/opt/csw/share' '--localstatedir=/var/opt/csw' '--libdir=/opt/csw/lib' '--infodir=/opt/csw/share/info' '--includedir=/opt/csw/include' '--mandir=/opt/csw/share/man' '--with-libtool' '--with-openssl=/opt/csw' '--enable-threads' '--enable-largefile' '--sysconfdir=/etc/opt/csw' '--localstatedir=/var/opt/csw/named' '--enable-rrl' 'CC=/opt/csw/bin/gcc-4.9' 'CFLAGS=-O2 -pipe -mcpu=v9 -Wa,-xarch=v8plus' 'LDFLAGS=-mcpu=v9 -Wa,-xarch=v8plus -L/opt/csw/lib' 'CPPFLAGS=-I/opt/csw/include'
> 25-Mar-2015 13:49:21.684 ----------------------------------------------------
> 25-Mar-2015 13:49:21.684 BIND 9 is maintained by Internet Systems Consortium,
> 25-Mar-2015 13:49:21.684 Inc. (ISC), a non-profit 501(c)(3) public-benefit
> 25-Mar-2015 13:49:21.684 corporation.  Support and training for BIND 9 are
> 25-Mar-2015 13:49:21.684 available at https://www.isc.org/support
> 25-Mar-2015 13:49:21.684 ----------------------------------------------------
> 25-Mar-2015 13:49:21.685 found 128 CPUs, using 128 worker threads
> 25-Mar-2015 13:49:21.685 using 32 UDP listeners per interface
> 25-Mar-2015 13:49:21.704 using up to 4096 sockets
> 25-Mar-2015 13:49:21.704 Registering DLZ_dlopen driver
> 25-Mar-2015 13:49:21.704 Registering SDLZ driver 'dlopen'
> 25-Mar-2015 13:49:21.704 Registering DLZ driver 'dlopen'
> 25-Mar-2015 13:49:21.709 decrement_reference: delete from rbt: b30f8 .
> 25-Mar-2015 13:49:21.754 ENGINE_by_id failed (crypto failure)
> 25-Mar-2015 13:49:21.754 error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:389:id=gost
> 25-Mar-2015 13:49:21.756 initializing DST: crypto failure
> 25-Mar-2015 13:49:21.756 exiting (due to fatal error)




More information about the users mailing list