On Fri Mar 18 00:06:19 2016, lamont@mmjgroup.com wrote: > Because openssl init may load additional libraries, it should be done > before the chroot. => IMHO bind should be configured without gost (this was done a long time ago the first time someone raised this issue) or OpenSSL configured with static engines (using DSOs is a bad idea) as it is explained for WIN32.