OpenSSL 1.0.1m problems with BIND 9.9.7
John Thurston
john.thurston at alaska.gov
Wed Mar 25 23:13:42 CET 2015
I thought it might be time to update the openSSL on my BIND servers. I
was using 1.0.1L. The update was to be to 1.0.1M. But when I do so, BIND
refuses to start. When I turn up debugging on the named process, I see
that it fails with
> 25-Mar-2015 13:49:21.756 initializing DST: crypto failure
> 25-Mar-2015 13:49:21.756 exiting (due to fatal error)
Has anyone else seen similar problems with the most recent openssl?
--
Do things because you should, not just because you can.
John Thurston 907-465-8591
John.Thurston at alaska.gov
Enterprise Technology Services
Department of Administration
State of Alaska
:: Environment ::
Solaris 10 on SPARC
SunOS nstest 5.10 Generic_150400-17 sun4v sparc sun4v
:: Packages prior to update ::
package installed
CSWbind 9.9.7,REV=2015.02.26
CSWbindutils 9.9.7,REV=2015.02.26
CSWcacertificates 20120511,REV=2012.05.11
CSWcas-cpsampleconf 1.50,REV=2015.01.17
CSWcas-cptemplates 1.49,REV=2013.03.13
CSWcas-crontab 1.48,REV=2012.09.02
CSWcas-etcservices 1.42,REV=2011.02.16
CSWcas-etcshells 1.45,REV=2011.07.12
CSWcas-inetd 1.42,REV=2010.11.26
CSWcas-initsmf 1.50,REV=2015.01.17
CSWcas-migrateconf 1.50,REV=2015.01.17
CSWcas-postmsg 1.42,REV=2010.11.26
CSWcas-preserveconf 1.50,REV=2015.01.17
CSWcas-pycompile 1.49,REV=2013.07.29
CSWcas-sslcert 1.48,REV=2012.10.17
CSWcas-texhash 1.49,REV=2013.02.19
CSWcas-texinfo 1.42,REV=2010.11.26
CSWcas-usergroup 1.50,REV=2015.01.17
CSWcommon 1.5,REV=2010.12.11
CSWcswclassutils 1.49,REV=2013.03.13
CSWcswpki 1.1,REV=2013.01.11
CSWggettext-data 0.18.1.1,p,REV=2011.03.15
CSWgnupg 1.4.12,REV=2012.01.30
CSWiconv 1.14,REV=2011.08.08
CSWisaexec 0.2,REV=2009.03.26
CSWlibbind 9.9.7,REV=2015.02.26
CSWlibbz2-1-0 1.0.6,REV=2011.08.18
CSWlibcharset1 1.14,REV=2011.08.07
CSWlibcom-err3 1.12.1,REV=2014.03.14
CSWlibcurl4 7.28.1,REV=2013.05.21
CSWlibexpat1 2.1.0,REV=2013.01.01
CSWlibgcc-s1 4.9.2,REV=2014.11.07
CSWlibgssapi-krb5-2 1.9.2,REV=2013.05.14
CSWlibiconv2 1.14,REV=2011.08.07
CSWlibidn11 1.26,REV=2013.01.01
CSWlibintl8 0.18.1.1,p,REV=2011.03.15
CSWlibk5crypto3 1.12.1,REV=2014.03.14
CSWlibkrb5-3 1.12.1,REV=2014.03.14
CSWlibkrb5support0 1.12.1,REV=2014.03.14
CSWliblber2-3-0 2.3_1,REV=2012.02.01
CSWliblber2-4-2 2.4.32,REV=2012.11.05
CSWlibldap-r2-3-0 2.3_1,REV=2012.02.01
CSWlibldap-r2-4-2 2.4.32,REV=2012.11.05
CSWlibldap2-3-0 2.3_1,REV=2012.02.01
CSWlibldap2-4-2 2.4.32,REV=2012.11.05
CSWliblzma5 5.0.5,REV=2013.07.05
CSWlibncurses5 5.9,REV=2011.11.21
CSWlibncursesw5 5.9,REV=2011.11.21
CSWlibnet 1.0.2a,REV=2011.09.29
CSWlibpanel5 5.9,REV=2011.11.21
CSWlibpanelw5 5.9,REV=2011.11.21
CSWlibreadline6 6.2,REV=2011.07.02
CSWlibsasl2-2 2.1.25,REV=2012.05.06
CSWlibsocks 1.2.1,REV=2010.08.31
CSWlibssl0-9-8 0.9.8ze,REV=2015.02.09
CSWlibssl1-0-0 1.0.1l,REV=2015.02.08
CSWlibverto0 1.12.1,REV=2014.03.14
CSWlibxml2-2 2.9.1,REV=2013.08.16
CSWlibz1 1.2.8,REV=2013.09.23
CSWnano 2.2.6,REV=2011.04.07
CSWncurses 5.9,REV=2011.11.21
CSWoldaprt 2.4.32,REV=2012.11.10
CSWopenssl-utils 1.0.1i,REV=2014.08.08
CSWpkgutil 2.6.5,REV=2012.08.15
CSWsudo 1.8.6p8,REV=2013.04.27
CSWterminfo 5.9,REV=2014.11.28
CSWterminfo-rxvt-unicode 9.20,REV=2014.10.31
CSWzlib 1.2.7,REV=2012.06.14
:: Packages changed during update ::
package installed
CSWlibssl1-0-0 1.0.1m,REV=2015.03.21
CSWopenssl-utils 1.0.1m,REV=2015.03.21
:: Result of launching named with -d 4 and -g ::
> root at nstest:~> /opt/csw/sbin/named -u named -4 -U 32 -d 6 -c /etc/opt/csw/pkg/CSWbind/bind -g
> 25-Mar-2015 13:49:21.683 starting BIND 9.9.7 -u named -4 -U 32 -d 6 -c /etc/opt/csw/pkg/CSWbind/bind -g
> 25-Mar-2015 13:49:21.684 built with '--prefix=/opt/csw' '--exec_prefix=/opt/csw' '--bindir=/opt/csw/bin' '--sbindir=/opt/csw/sbin' '--libexecdir=/opt/csw/libexec' '--datadir=/opt/csw/share' '--sharedstatedir=/opt/csw/share' '--localstatedir=/var/opt/csw' '--libdir=/opt/csw/lib' '--infodir=/opt/csw/share/info' '--includedir=/opt/csw/include' '--mandir=/opt/csw/share/man' '--with-libtool' '--with-openssl=/opt/csw' '--enable-threads' '--enable-largefile' '--sysconfdir=/etc/opt/csw' '--localstatedir=/var/opt/csw/named' '--enable-rrl' 'CC=/opt/csw/bin/gcc-4.9' 'CFLAGS=-O2 -pipe -mcpu=v9 -Wa,-xarch=v8plus' 'LDFLAGS=-mcpu=v9 -Wa,-xarch=v8plus -L/opt/csw/lib' 'CPPFLAGS=-I/opt/csw/include'
> 25-Mar-2015 13:49:21.684 ----------------------------------------------------
> 25-Mar-2015 13:49:21.684 BIND 9 is maintained by Internet Systems Consortium,
> 25-Mar-2015 13:49:21.684 Inc. (ISC), a non-profit 501(c)(3) public-benefit
> 25-Mar-2015 13:49:21.684 corporation. Support and training for BIND 9 are
> 25-Mar-2015 13:49:21.684 available at https://www.isc.org/support
> 25-Mar-2015 13:49:21.684 ----------------------------------------------------
> 25-Mar-2015 13:49:21.685 found 128 CPUs, using 128 worker threads
> 25-Mar-2015 13:49:21.685 using 32 UDP listeners per interface
> 25-Mar-2015 13:49:21.704 using up to 4096 sockets
> 25-Mar-2015 13:49:21.704 Registering DLZ_dlopen driver
> 25-Mar-2015 13:49:21.704 Registering SDLZ driver 'dlopen'
> 25-Mar-2015 13:49:21.704 Registering DLZ driver 'dlopen'
> 25-Mar-2015 13:49:21.709 decrement_reference: delete from rbt: b30f8 .
> 25-Mar-2015 13:49:21.754 ENGINE_by_id failed (crypto failure)
> 25-Mar-2015 13:49:21.754 error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:389:id=gost
> 25-Mar-2015 13:49:21.756 initializing DST: crypto failure
> 25-Mar-2015 13:49:21.756 exiting (due to fatal error)
More information about the users
mailing list