* Mirko Gebauer:

> "/usr/lib/ssl/openssl.cnf" is a symlink to "/etc/ssl/openssl.cnf",
> both provided by the package "openssl". Unfortunately, on the
> respective machine, "/etc/ssl/openssl.cnf" is modified and not
> world-readable as it is by default after installing the "openssl"
> package.

Thanks for tracking this down.  I suspect that this is due to the
OPENSSL_config() call, but I need to check this in a debugger to be
sure.

However, OpenSSL's documentation says this:

       OPENSSL_config() configures OpenSSL using the standard
       openssl.cnf configuration file name using config_name. If
       config_name is NULL then the default name openssl_conf will be
       used. Any errors are ignored.

BIND uses the NULL argument, as far as I can tell.  So this might be
an OpenSSL bug.



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to