MIME-Version: 1.0
In-Reply-To: <20160318000613.GA19060@mix.mmjgroup.com>
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Disposition: inline
X-RT-Interface: Web
References: <20160318000613.GA19060@mix.mmjgroup.com>
 <RT-Ticket-41966@isc.org>
Content-Type: text/plain; charset="utf-8"
Message-ID: <rt-4.2.8-83008-1458310839-914.41966-0-0@isc.org>
Content-Transfer-Encoding: binary
X-RT-Original-Encoding: utf-8
RT-Send-CC:
X-RT-Encrypt: 0
X-RT-Sign: 0
Content-Length: 369

On Fri Mar 18 00:06:19 2016, lamont@mmjgroup.com wrote:
> Because openssl init may load additional libraries, it should be done
> before the chroot.

=> IMHO bind should be configured without gost (this was done
a long time ago the first time someone raised this issue) or OpenSSL
configured with static engines (using DSOs is a bad idea) as it is
explained for WIN32.