Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: binary X-RT-Interface: Web Message-ID: MIME-Version: 1.0 In-Reply-To: X-RT-Original-Encoding: utf-8 Content-Disposition: inline References: X-Mailer: MIME-tools 5.508 (Entity 5.508) RT-Send-CC: Content-Length: 1420 BTW on Fedora 27 with OPENSSL_FORCE_FIPS_MODE set to 1 in the environment (easier than to boot in FIPS mode): ./named -g -c /dev/null 24-Dec-2017 15:17:29.432 starting BIND 9.12.0rc1 24-Dec-2017 15:17:29.432 running on Linux x86_64 4.14.7-300.fc27.x86_64 #1 SMP Mon Dec 18 16:06:12 UTC 2017 24-Dec-2017 15:17:29.432 built with '--enable-full-report' '--enable-developer' 24-Dec-2017 15:17:29.432 running as: named -g -c /dev/null 24-Dec-2017 15:17:29.432 ---------------------------------------------------- 24-Dec-2017 15:17:29.432 BIND 9 is maintained by Internet Systems Consortium, 24-Dec-2017 15:17:29.432 Inc. (ISC), a non-profit 501(c)(3) public-benefit 24-Dec-2017 15:17:29.432 corporation. Support and training for BIND 9 are 24-Dec-2017 15:17:29.432 available at https://www.isc.org/support 24-Dec-2017 15:17:29.432 ---------------------------------------------------- 24-Dec-2017 15:17:29.432 found 2 CPUs, using 2 worker threads 24-Dec-2017 15:17:29.432 using 1 UDP listener per interface 24-Dec-2017 15:17:29.432 using up to 4096 sockets 24-Dec-2017 15:17:29.433 md5.c:58: fatal error: 24-Dec-2017 15:17:29.433 RUNTIME_CHECK(EVP_DigestInit(ctx->ctx, EVP_md5()) == 1) failed 24-Dec-2017 15:17:29.433 exiting (due to fatal error in library) Abort (core dumped) a side bin9 branch rt46724 built with MD5 disabled (*) works well. (*) "#define PK11_MD5_DISABLE" in lib/isc/include/pk11/site.h