Bug#820974: does not start, ENGINE_by_id failed (crypto failure)

[Ben Hutchings]

On Tue, 2016-05-17 at 07:25 +0200, Marc Haber wrote:
> On Sat, May 14, 2016 at 06:32:47PM -0400, Robert Edmonds wrote:
> > 
> > From: Robert Edmonds <edmo...@debian.org>
> > Subject: Bug#820974: does not start, ENGINE_by_id failed (crypto failure)
> > To: Marc Haber <mh+debian-b...@zugschlus.de>, 820...@bugs.debian.org
> > Reply-To: Robert Edmonds <edmo...@debian.org>, 820...@bugs.debian.org
> > Date: Sat, 14 May 2016 18:32:47 -0400
> > 
> > Marc Haber wrote:
> > > 
> > > On Thu, Apr 14, 2016 at 10:43:52AM +0200, Thomas Leuxner wrote:
> > > > 
> > > > * Marc Haber <mh+debian-packa...@zugschlus.de> 2016.04.14 10:07:
> > > > 
> > > > > 
> > > > > Apr 14 10:05:32 fan named[8795]: ENGINE_by_id failed (crypto failure)
> > > > > Apr 14 10:05:32 fan named[8795]: error:25070067:DSO support 
> > > > > routines:DSO_load:could not load the shared library:dso_lib.c:233:
> > > > > Apr 14 10:05:32 fan named[8795]: error:260B6084:engine 
> > > > > routines:DYNAMIC_LOAD:dso not found:eng_dyn.c:467:
> > > > > Apr 14 10:05:32 fan named[8795]: error:2606A074:engine 
> > > > > routines:ENGINE_by_id:no such engine:eng_list.c:390:id=gost
> > > > > Apr 14 10:05:32 fan named[8795]: initializing DST: crypto failure
> > > > > Apr 14 10:05:32 fan named[8795]: exiting (due to fatal error)
> > > > It tries to load an OpenSSL library which it can't find in a chroot 
> > > > configuration. In your setup this may be mitigated by placing the 
> > > > library in the chroot:
> > > > 
> > > > /var/local/chroot/bind/usr/lib/x86_64-linux-gnu/openssl-1.0.2/engines/libgost.so
> > > I consider this a bug. All other shared libraries get loaded before
> > > bind chroots itself. Placing a library inside the chroot will cause
> > > update issues since one needs to take manual care to update the
> > > in-chroot copy as well.
> > This looks similar to #696661.
> yes, it is exactly the same issue. Since the patch suggested by Ben
> Hutchings is still present in the package, there must be some
> regression. I am therefore Ccing Ben and Bastian, maybe they can take
> a look.

I've forgotten all the context I had for that fix, so I don't intend to
look at this bug.

Ben.

-- 
Ben Hutchings
Lowery's Law:
             If it jams, force it. If it breaks, it needed replacing anyway.

signature.asc
Description: This is a digitally signed message part