[Pkg-openssl-devel] Bug#611054: Bug#611054: /usr/bin/openssl without gost engine
Dmitry Eremin-Solenikov
dbaryshkov at gmail.com
Fri Aug 30 16:38:21 UTC 2013
On 08/30/2013 08:33 PM, Kurt Roeckx wrote:
> On Fri, Aug 30, 2013 at 08:28:44PM +0400, Dmitry Eremin-Solenikov wrote:
>> On 08/24/2013 09:41 PM, Kurt Roeckx wrote:
>>> On Fri, Jul 26, 2013 at 06:29:54PM +0400, Dmitry Eremin-Solenikov wrote:
>>>> Package: libssl1.0.0
>>>> Version: 1.0.1e-3
>>>> Followup-For: Bug #611054
>>>>
>>>> Hello,
>>>>
>>>> I have tried the settings you have provided to enable GOST engine. Now I
>>>> surely can use GOST algorithms with openssl. E.g. I can securely connect
>>>> to www.cryptopro.ru:443 via s_client.
>>>>
>>>> However this change (potentially) breaks other semi-unrelated packages.
>>>> First to name is dnsutils:
>>>
>>> Can you look at:
>>> http://www.mail-archive.com/openssl-dev@openssl.org/msg32881.html
>>
>> Yes, this looks (more or less) like my problem. Good that upstream
>> acknowledges that it is a problem.
>>
>> For my problem I can not add dynamic_path to my config file as I
>> have multi-arch (amd64 vs i386) system and adding dynamic_path would
>> break 'other' libssl/libcrypto loading engines.
>
> Doesn't this work with multiarch?
> dynamic_path=gost
It does not work at all:
openssl engine
Error configuring OpenSSL
140212314072744:error:25066067:DSO support routines:DLFCN_LOAD:could not
load the shared library:dso_dlfcn.c:185:filename(libgost.so):
libgost.so: cannot open shared object file: No such file or directory
140212314072744:error:25070067:DSO support routines:DSO_load:could not
load the shared library:dso_lib.c:244:
140212314072744:error:260B6084:engine routines:DYNAMIC_LOAD:dso not
found:eng_dyn.c:450:
140212314072744:error:260BC066:engine
routines:INT_ENGINE_CONFIGURE:engine configuration
error:eng_cnf.c:204:section=gost_section, name=dynamic_path, value=gost
140212314072744:error:0E07606D:configuration file
routines:MODULE_RUN:module initialization
error:conf_mod.c:235:module=engines, value=engine_section, retcode=-1
--
With best wishes
Dmitry
More information about the Pkg-openssl-devel
mailing list