Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Message-ID: <rt-4.4.1-11937-1504890228-872.45019-0-0@isc.org>
In-Reply-To: <20170405123930.GA6306@jurassic>
References: <20170405123930.GA6306@jurassic> <RT-Ticket-45019@isc.org>
X-RT-Interface: Web
X-Mailer: MIME-tools 5.508 (Entity 5.508)
X-RT-Original-Encoding: utf-8
RT-Send-CC:
Content-Length: 301

The problem turned out to be that -lcrypto was being put in between libdns and
libisc, and needed to be after libisc.

The latest couple of commits in rt45019 address this. It's working for me now.

I haven't had time to test with pkcs11, native or otherwise, but I can try
to get to that later today.