configure option --disable-crypto-rand unsupported in 9.12.2?

[Daniel Stirnimann]

Dear all,

I have the configure option "--disable-crypto-rand" for some BIND 9.12
builds. Building BIND with this option fails for the latest BIND 9.12.2:

BUILDSTDERR: openssl_link.c: In function 'dst__openssl_init':
BUILDSTDERR: openssl_link.c:274:2: error: 're' undeclared (first use in
this function)
BUILDSTDERR: re = ENGINE_get_default_RAND();
BUILDSTDERR: ^
BUILDSTDERR: openssl_link.c:274:2: note: each undeclared identifier is
reported only once for each function it appears in
BUILDSTDERR: make[2]: *** [openssl_link.lo] Error 1
make[2]: Leaving directory `/builddir/build/BUILD/bind-9.12.2/lib/dns'
make[1]: Leaving directory `/builddir/build/BUILD/bind-9.12.2/lib'

If I remove "--disable-crypto-rand" for building BIND 9.12.2 it works.

I wonder whether the following change in BIND 9.13 already made it into
BIND 9.12.2 (its not listed in CHANGES for BIND 9.12.2)?

4936. [func] Always use OpenSSL or PKCS#11 random data providers,
and remove the --{enable,disable}-crypto-rand configure
options. [GL #165]

Daniel
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
bind-***@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

[Michał Kępień]

Hi Daniel,

Post by Daniel Stirnimann
I have the configure option "--disable-crypto-rand" for some BIND 9.12
BUILDSTDERR: openssl_link.c:274:2: error: 're' undeclared (first use in
this function)
BUILDSTDERR: re = ENGINE_get_default_RAND();
BUILDSTDERR: ^
BUILDSTDERR: openssl_link.c:274:2: note: each undeclared identifier is
reported only once for each function it appears in
BUILDSTDERR: make[2]: *** [openssl_link.lo] Error 1
make[2]: Leaving directory `/builddir/build/BUILD/bind-9.12.2/lib/dns'
make[1]: Leaving directory `/builddir/build/BUILD/bind-9.12.2/lib'
If I remove "--disable-crypto-rand" for building BIND 9.12.2 it works.

Thanks for reporting this. It is a backporting error which has now been
fixed in the v9_12 branch, which means it will land in 9.12.3:

https://gitlab.isc.org/isc-projects/bind9/merge_requests/529

Sorry about the trouble!