Message-ID: References: In-Reply-To: Content-Disposition: inline X-RT-Original-Encoding: utf-8 Content-Transfer-Encoding: binary X-Mailer: MIME-tools 5.508 (Entity 5.508) X-RT-Interface: Web MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" RT-Send-CC: Content-Length: 781 You are too buried in your world view. The proposed change won't work for Redhat and they would have to patch the BIND anyway, because the packagers need a single binary that would work on normal and FIPS-only system. So, unless you have a solution that would actually work for these guys maybe you should stop throwing monkey wrenches into the works and come up with a solution that would be actually useful instead of proposing what other people want. The whole crypto API is broken if it cannot catch the errors from the crypto library, but the change to do so would be too intrusive, so we need to come up with a solution that would work for those people instead of yelling "this is wrong". That's not helpful to ISC and definitely not helpful to RedHat or other packagers.