Re: openssl fallout(?)

[Thomas Klausner <tk%giga.or.at@localhost>]

On Wed, Feb 14, 2018 at 04:32:09PM +1100, Geoff Wing wrote:
> Hi,
> anyone else seeing this sort of stuff?

Yes.

14-Feb-2018 11:15:38.286 ENGINE_by_id failed (crypto failure)
14-Feb-2018 11:15:38.286 error:25070067:DSO support routines:DSO_load:could not load the shared library:/usr/src/crypto/external/bsd/openssl/dist/crypto/dso/dso_lib.c:161:
14-Feb-2018 11:15:38.286 error:260B6084:engine routines:dynamic_load:dso not found:/usr/src/crypto/external/bsd/openssl/dist/crypto/engine/eng_dyn.c:414:
14-Feb-2018 11:15:38.286 error:2606A074:engine routines:ENGINE_by_id:no such engine:/usr/src/crypto/external/bsd/openssl/dist/crypto/engine/eng_list.c:339:id=gost
dig: dst_lib_init: crypto failure

 Thomas
 
> 	% dig www.netbsd.org.
> 	14-Feb-2018 16:05:39.436 ENGINE_by_id failed (crypto failure)
> 	14-Feb-2018 16:05:39.436 error:25070067:DSO support routines:DSO_load:could not load the shared library:/usr/src/crypto/external/bsd/openssl/dist/crypto/dso/dso_lib.c:161:
> 	14-Feb-2018 16:05:39.436 error:260B6084:engine routines:dynamic_load:dso not found:/usr/src/crypto/external/bsd/openssl/dist/crypto/engine/eng_dyn.c:414:
> 	14-Feb-2018 16:05:39.436 error:2606A074:engine routines:ENGINE_by_id:no such engine:/usr/src/crypto/external/bsd/openssl/dist/crypto/engine/eng_list.c:339:id=gost
> 	dig: dst_lib_init: crypto failure
> 	%
> 
> ktrace shows near the end it opening /etc/openssl/openssl.cnf (successfully)
> then trying /usr/lib/openssl/gost.so (failing).  
> 
> ktrace of dig with previous openssl didn't look for gost.  Is this something
> which should be disabled in the openssl(?) config if we don't distribute it?
> 
> Regards,
> Geoff
>