From owner-freebsd-ports@freebsd.org Wed Nov 14 10:03:49 2018 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 143A911225CC for ; Wed, 14 Nov 2018 10:03:49 +0000 (UTC) (envelope-from ml@netfence.it) Received: from soth.netfence.it (net-2-44-121-52.cust.vodafonedsl.it [2.44.121.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mailserver.netfence.it", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 9701570327; Wed, 14 Nov 2018 10:03:39 +0000 (UTC) (envelope-from ml@netfence.it) Received: from alamar.ventu (alamar.local.netfence.it [10.1.2.18]) (authenticated bits=0) by soth.netfence.it (8.15.2/8.15.2) with ESMTPSA id wAE9inV2098565 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Wed, 14 Nov 2018 10:44:56 +0100 (CET) (envelope-from ml@netfence.it) X-Authentication-Warning: soth.netfence.it: Host alamar.local.netfence.it [10.1.2.18] claimed to be alamar.ventu Subject: Re: BIND update gone bad To: freebsd-ports@freebsd.org References: <20181114021512.GA21405@neutralgood.org> <9e884bc5-d048-9b19-e36b-fe53467695eb@fechner.net> From: Andrea Venturoli Cc: mat@FreeBSD.org, kpn@neutralgood.org, idefix@fechner.net Message-ID: <02c0cf8e-f8ef-0035-a1da-b1ef849d3ff0@netfence.it> Date: Wed, 14 Nov 2018 10:44:49 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:60.0) Gecko/20100101 Thunderbird/60.3.0 MIME-Version: 1.0 In-Reply-To: <9e884bc5-d048-9b19-e36b-fe53467695eb@fechner.net> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 9701570327 X-Spamd-Result: default: False [-1.47 / 200.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; NEURAL_HAM_MEDIUM(-0.68)[-0.677,0]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; NEURAL_HAM_LONG(-0.97)[-0.967,0]; MIME_GOOD(-0.10)[text/plain]; HAS_XAW(0.00)[]; TO_DN_NONE(0.00)[]; AUTH_NA(1.00)[]; DMARC_NA(0.00)[netfence.it]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MX_GOOD(-0.01)[mx.netfence.it,mx.netfence.it,mx.netfence.it,mx.netfence.it,mx.netfence.it,mx.netfence.it,mx.netfence.it,mx.netfence.it]; NEURAL_HAM_SHORT(-0.72)[-0.721,0]; R_SPF_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; IP_SCORE(0.00)[country: IT(0.02)]; ASN(0.00)[asn:30722, ipnet:2.44.0.0/16, country:IT]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_TLS_ALL(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-Rspamd-Server: mx1.freebsd.org X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Nov 2018 10:03:49 -0000 On 11/14/18 7:35 AM, Matthias Fechner wrote: > maybe an OPTION problem. > Make sure you disable the GOST option (in bind and openssl), I faced a > similar problem, but I thing this option was removed, but I think it is > a try worth. Hello. Just to say I've been hit by the same problem: fortunately I was building from ports, so I could easily move to the previous SVN revision, which fixed this. I don't find any GOST option in the latest dns/bind911; I'm using GSS_API_NONE and SSL is turned on. Also, I'm using openssl from base, so I've got no GOST option there either. Maybe a bug report should be filled about this? bye & Thanks av.