* Mirko Gebauer: > "/usr/lib/ssl/openssl.cnf" is a symlink to "/etc/ssl/openssl.cnf", > both provided by the package "openssl". Unfortunately, on the > respective machine, "/etc/ssl/openssl.cnf" is modified and not > world-readable as it is by default after installing the "openssl" > package.
Thanks for tracking this down. I suspect that this is due to the OPENSSL_config() call, but I need to check this in a debugger to be sure. However, OpenSSL's documentation says this: OPENSSL_config() configures OpenSSL using the standard openssl.cnf configuration file name using config_name. If config_name is NULL then the default name openssl_conf will be used. Any errors are ignored. BIND uses the NULL argument, as far as I can tell. So this might be an OpenSSL bug. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org