bind-9.10.1,openssl-1.0.1h,softhsm-1.3.7 build problems
sibu
sibxol at btconnect.com
Thu Oct 9 13:56:38 UTC 2014
Greetings,
I am trying to compile bind-0.10.1 for use with softhsm-1.3.7 and
openssl-1.0.1h. My computer has these:-
--os linux 64bit cblfs
--CPU amd64
I followed the instructions for building bind-9.10.1 given here:-
( https://kb.isc.org/article/AA-01031 )
- i.e. for the build of openssl-1.0.1h I used the patch for openssl-1.0.1h
(bundled in /bin/pkcs11 of the
bind-9.10.1 archive. For this I passed these to configure -:-
./Configure linux-x86_64 \
-pthread \
--with-pkll-libname=/opt/dns/usr/lib/softhsm/libsofthsm.so \
--with-pk11-flavor=sign-only \
--prefix=/opt/dns/usr
no patching-errors, nor make-errors nor test-errors were reported.
HOWEVER when executing the diagnostic tests for correctly built openssl
ie. 'apps/openssl engine pkcs11' this happens:-
#-------------------------------------------------
WARNING: can't open config file: /opt/dns/usr/ssl/openssl.cnf
139752258475688:error:25066067:DSO support routines:DLFCN_LOAD:could not load
the shared
library:dso_dlfcn.c:187:filename(/opt/dns/usr/lib/engines/libpkcs11.so):
/opt/dns/usr/lib/engines/libpkcs11.so: cannot open shared object file: No such
file or directory
139752258475688:error:25070067:DSO support routines:DSO_load:could not load
the shared library:dso_lib.c:244:
139752258475688:error:260B6084:engine routines:DYNAMIC_LOAD:dso not
found:eng_dyn.c:450:
139752258475688:error:2606A074:engine routines:ENGINE_by_id:no such
engine:eng_list.c:418:id=pkcs11
#-------------------------------------------------
I have no reference to /opt/dns/usr/lib/engines/libpkcs11.so in the
./Configure options and the reference to
/opt/dns/usr/lib/softhsm/libsofthsm.so seems to have been ignored
I also tied setting the envars:-
SOFTHSM_CONF=/opt/dns/softhsm.conf
LD_LIBRARY_PATH=/opt/dns/usr/lib/softhsm:${LD_LIBRARY_PATH}
before executing 'apps/openssl engine pkcs11' command
but these made no difference.
Advice will be appreciated
sincerely
sibuXolo
ps I posted yesterday but did not see my mail returned so I figured the list-
mailserver was unwell
More information about the bind-users
mailing list