[Bug 1494869] [NEW] OPENSSL_CONF confuses dig, host, nslookup

[Launchpad Bug Tracker]

You have been subscribed to a public bug:


HI,

during the development of my project testssl.sh users encountered a bug
which was tracked down to the awkward situation that if the environment
variable OPENSSL_CONF is defined in a certain way DNS resultion fails

Steps tp reproduce under 14.04 LTS:
--snip
prompt% export OPENSSL_CONF=gost.conf
prompt% cat OPENSSL_CONF
# testssl config file for openssl

openssl_conf            = openssl_def

[ openssl_def ]
engines                 = engine_section

[ engine_section ]
gost = gost_section

[ gost_section ]
engine_id = gost
default_algorithms = ALL
CRYPT_PARAMS = id-Gost28147-89-CryptoPro-A-ParamSet

prompt% host -t a testssl.sh                                       
GOST engine already loaded
11-Sep-2015 18:30:58.591 ENGINE_by_id failed (crypto failure)
11-Sep-2015 18:30:58.591 error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:417:id=gost
prompt%
--snap

similar with nslookup or dig. See also
https://github.com/drwetter/testssl.sh/issues/134 .

Cheers, Dirk

** Affects: bind9 (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: bot-comment
-- 
OPENSSL_CONF confuses dig, host, nslookup
https://bugs.launchpad.net/bugs/1494869
You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in Ubuntu.