configure option --disable-crypto-rand unsupported in 9.12.2?

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

configure option --disable-crypto-rand unsupported in 9.12.2?

Daniel Stirnimann
Dear all,

I have the configure option "--disable-crypto-rand" for some BIND 9.12
builds. Building BIND with this option fails for the latest BIND 9.12.2:

BUILDSTDERR: openssl_link.c: In function 'dst__openssl_init':
BUILDSTDERR: openssl_link.c:274:2: error: 're' undeclared (first use in
this function)
BUILDSTDERR:   re = ENGINE_get_default_RAND();
BUILDSTDERR:   ^
BUILDSTDERR: openssl_link.c:274:2: note: each undeclared identifier is
reported only once for each function it appears in
BUILDSTDERR: make[2]: *** [openssl_link.lo] Error 1
make[2]: Leaving directory `/builddir/build/BUILD/bind-9.12.2/lib/dns'
make[1]: Leaving directory `/builddir/build/BUILD/bind-9.12.2/lib'

If I remove "--disable-crypto-rand" for building BIND 9.12.2 it works.

I wonder whether the following change in BIND 9.13 already made it into
BIND 9.12.2 (its not listed in CHANGES for BIND 9.12.2)?

 4936.   [func]   Always use OpenSSL or PKCS#11 random data providers,
            and remove the --{enable,disable}-crypto-rand configure
            options. [GL #165]

Daniel
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/bind-users
Reply | Threaded
Open this post in threaded view
|

Re: configure option --disable-crypto-rand unsupported in 9.12.2?

Michał Kępień
Hi Daniel,

> I have the configure option "--disable-crypto-rand" for some BIND 9.12
> builds. Building BIND with this option fails for the latest BIND 9.12.2:
>
> BUILDSTDERR: openssl_link.c: In function 'dst__openssl_init':
> BUILDSTDERR: openssl_link.c:274:2: error: 're' undeclared (first use in
> this function)
> BUILDSTDERR:   re = ENGINE_get_default_RAND();
> BUILDSTDERR:   ^
> BUILDSTDERR: openssl_link.c:274:2: note: each undeclared identifier is
> reported only once for each function it appears in
> BUILDSTDERR: make[2]: *** [openssl_link.lo] Error 1
> make[2]: Leaving directory `/builddir/build/BUILD/bind-9.12.2/lib/dns'
> make[1]: Leaving directory `/builddir/build/BUILD/bind-9.12.2/lib'
>
> If I remove "--disable-crypto-rand" for building BIND 9.12.2 it works.

Thanks for reporting this.  It is a backporting error which has now been
fixed in the v9_12 branch, which means it will land in 9.12.3:

    https://gitlab.isc.org/isc-projects/bind9/merge_requests/529

Sorry about the trouble!

--
Best regards,
Michał Kępień
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/bind-users