bind-9.11.0-P2 on Debian 9.0 (stretch)

[Wolfgang Riedel]

Hi Folks,

Just wonder if someone had success compiling bind-9.11.0-P2 on Debian 9.0 (stretch)?

1) OpenSSL dependency dance

I removed OpenSSL 1.1 and compiled OpenSSL 1.0.2e from source

openssl version
OpenSSL 1.0.2e 3 Dec 2015

2) configure

./configure --prefix=/usr --mandir=/usr/share/man --infodir=/usr/share/info --sysconfdir=/etc/bind --localstatedir=/var --enable-threads --enable-largefile --with-libtool --enable-shared --enable-static --with-openssl=/usr  --with-gnu-ld --with-dlz-postgres=no --with-dlz-mysql=no --with-dlz-bdb=yes --with-dlz-filesystem=yes  --with-dlz-stub=yes CFLAGS=-fno-strict-aliasing --enable-rrl --enable-newstats --enable-rrl

===============================================================================
Configuration summary:
-------------------------------------------------------------------------------
Optional features enabled:
    Multiprocessing support (--enable-threads)
    GOST algorithm support (encoding: raw) (--with-gost)
    ECDSA algorithm support (--with-ecdsa)
    Print backtrace on crash (--enable-backtrace)
    Use symbol table for backtrace, named only (--enable-symtable)
    Use GNU libtool (--with-libtool)
    Dynamically loadable zone (DLZ) drivers:
        Berkeley DB (--with-dlz-bdb)
        Filesystem (--with-dlz-filesystem)
        Stub (--with-dlz-stub)

Features disabled or unavailable on this platform:
    Large-system tuning (--with-tuning)
    Allow 'dnstap' packet logging (--enable-dnstap)
    GeoIP access control (--with-geoip)
    GSS-API (--with-gssapi)
    Allow 'fixed' rrset-order (--enable-fixed-rrset)
    PKCS#11/Cryptoki support (--with-pkcs11)
    Native PKCS#11/Cryptoki support (--enable-native-pkcs11)
    Use libseccomp system call filtering (--enable-seccomp)
    Very verbose query trace logging (--enable-querytrace)
    Automated Testing Framework (--with-atf)
    Python tools (--with-python)
    XML statistics (--with-libxml2)
    JSON statistics (--with-libjson)
    HTTP zlib compression (--with-zlib)
    LMDB database to store configuration for 'addzone' zones (--with-lmdb)

Unrecognized options:
    --enable-rrl, --enable-newstats, --enable-rrl
-------------------------------------------------------------------------------
For more detail, use --enable-full-report.
===============================================================================


3. make:

/usr/bin/ld: //lib64/libcrypto.a(a_object.o): relocation R_X86_64_PC32 against symbol `ASN1_OBJECT_free' can not be used when making a shared object; recompile with -fPIC
/usr/bin/ld: final link failed: Bad value
collect2: error: ld returned 1 exit status
Makefile:519: recipe for target 'libisc.la' failed
make[2]: *** [libisc.la] Error 1
make[2]: Leaving directory '/opt/f1/isc-bind/bind-9.11.0-P2/lib/isc'
Makefile:78: recipe for target 'subdirs' failed
make[1]: *** [subdirs] Error 1
make[1]: Leaving directory '/opt/f1/isc-bind/bind-9.11.0-P2/lib'
Makefile:83: recipe for target 'subdirs' failed
make: *** [subdirs] Error 1


Any idea what I am missing?

Thank you!

--
With best regards,
Wolfgang Riedel
________________________________________________________________
Wolfgang Riedel | Principal Engineer | CCIE#13804 | VCP #42559

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20170126/baa1718b/attachment-0002.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: make.log
Type: application/octet-stream
Size: 7854 bytes
Desc: not available
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20170126/baa1718b/attachment-0001.obj>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20170126/baa1718b/attachment-0003.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 832 bytes
Desc: Message signed with OpenPGP
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20170126/baa1718b/attachment-0001.bin>