[Pkg-openssl-devel] Bug#611054: Bug#611054: /usr/bin/openssl without gost engine

Dmitry Eremin-Solenikov dbaryshkov at gmail.com
Fri Aug 30 16:38:21 UTC 2013


On 08/30/2013 08:33 PM, Kurt Roeckx wrote:
> On Fri, Aug 30, 2013 at 08:28:44PM +0400, Dmitry Eremin-Solenikov wrote:
>> On 08/24/2013 09:41 PM, Kurt Roeckx wrote:
>>> On Fri, Jul 26, 2013 at 06:29:54PM +0400, Dmitry Eremin-Solenikov wrote:
>>>> Package: libssl1.0.0
>>>> Version: 1.0.1e-3
>>>> Followup-For: Bug #611054
>>>>
>>>> Hello,
>>>>
>>>> I have tried the settings you have provided to enable GOST engine. Now I
>>>> surely can use GOST algorithms with openssl. E.g. I can securely connect
>>>> to www.cryptopro.ru:443 via s_client.
>>>>
>>>> However this change (potentially) breaks other semi-unrelated packages.
>>>> First to name is dnsutils:
>>>
>>> Can you look at:
>>> http://www.mail-archive.com/openssl-dev@openssl.org/msg32881.html
>>
>> Yes, this looks (more or less) like my problem. Good that upstream
>> acknowledges that it is a problem.
>>
>> For my problem I can not add dynamic_path to my config file as I
>> have multi-arch (amd64 vs i386) system and adding dynamic_path would
>> break 'other' libssl/libcrypto loading engines.
>
> Doesn't this work with multiarch?
> dynamic_path=gost

It does not work at all:

openssl engine
Error configuring OpenSSL
140212314072744:error:25066067:DSO support routines:DLFCN_LOAD:could not 
load the shared library:dso_dlfcn.c:185:filename(libgost.so): 
libgost.so: cannot open shared object file: No such file or directory
140212314072744:error:25070067:DSO support routines:DSO_load:could not 
load the shared library:dso_lib.c:244:
140212314072744:error:260B6084:engine routines:DYNAMIC_LOAD:dso not 
found:eng_dyn.c:450:
140212314072744:error:260BC066:engine 
routines:INT_ENGINE_CONFIGURE:engine configuration 
error:eng_cnf.c:204:section=gost_section, name=dynamic_path, value=gost
140212314072744:error:0E07606D:configuration file 
routines:MODULE_RUN:module initialization 
error:conf_mod.c:235:module=engines, value=engine_section, retcode=-1

-- 
With best wishes
Dmitry



More information about the Pkg-openssl-devel mailing list