BIND 9.11.6-P1 build fails on Solaris

[Robert M. Stockmann]

On Fri, 2019-04-26 at 10:41 +1000, Nick Edwards wrote:
> lots of things failing in recent times, even with CentOS, mostly
> because of openssl min version changes, and most recently even latest
> releases wont build now because of a change in min python versions
> *sigh*, i'm just going to leave it as is, thats all we can do.

openssl version needs to be equal or above 1.0.0. If your UNIX 
or Linux openssl version is below 1.0.0, you can change/patch 
lib/dns/openssl_link.c and change  OPENSSL_VERSION_NUMBER >= 
0x10000000L into a lower openssl version. I used the following
patch to build 9.11.7 :

--- bind-9.11.7/lib/dns/openssl_link.c  2019-05-10 07:03:58.000000000 +0200
+++ bind-9.11.7.lock_callback/lib/dns/openssl_link.c    2019-05-22 20:05:28.7479
62152 +0200
@@ -103,6 +103,18 @@
 }
 #endif
 
+#if OPENSSL_VERSION_NUMBER >= 0x00907000L && OPENSSL_VERSION_NUMBER < 0x1000000
0L || defined(LIBRESSL_VERSION_NUMBER)
+static void
+lock_callback(int mode, int type, const char *file, int line) {
+       UNUSED(file);
+       UNUSED(line);
+       if ((mode & CRYPTO_LOCK) != 0)
+               LOCK(&locks[type]);
+       else
+               UNLOCK(&locks[type]);
+}
+#endif
+
 #if OPENSSL_VERSION_NUMBER >= 0x10000000L && OPENSSL_VERSION_NUMBER < 0x1010000
0L || defined(LIBRESSL_VERSION_NUMBER)
 static void
 lock_callback(int mode, int type, const char *file, int line) {

However the question arises whether 9.11.6-P1 and 9.11.7 really 
require openssl version 0x10000000L or higher, and, when building 
9.11.7 say using OpenSSL 0.9.8k and --without-python, might otherwise 
some unexpected features of bind stop working correctly?

What i've experienced is that when going from 9.9.9P6 to 9.11.7, and 
using bind in recursive mode, i.e. your workstation uses 
bind-9.11.7 as a caching nameserver to browse the internet, my laptop 
suddenly started to make al lot more noise and was heating up 
substantially. After going back to 9.11.6-P1 the heating of my laptop 
also went away.

-- 
Robert M. Stockmann - RHCE
Network Engineer - UNIX/Linux Specialist
crashrecovery.org  stock at stokkie.net