>>>>> "Brian" == Brian May <[EMAIL PROTECTED]> writes:

    Brian> So the original problem looks very much like a bug in the
    Brian> GNU TLS libraries too me.

My guess is that the original problem isn't so much due to a bug in
any application or library, but the fact that the two versions of the
TLS libraries end up getting pulled into one application.

For example:

$ ldd /usr/bin/gq | grep -E '(ssl|crypt|tls)'
                                                 libssl.so.0.9.8 => 
/usr/lib/i686/cmov/libssl.so.0.9.8 (0xb7f11000)
                                                 libcrypto.so.0.9.8 => 
/usr/lib/i686/cmov/libcrypto.so.0.9.8 (0xb7dd6000)
                                                 libresolv.so.2 => 
/lib/tls/i686/cmov/libresolv.so.2 (0xb7d8e000)
                                                 libm.so.6 => 
/lib/tls/i686/cmov/libm.so.6 (0xb793b000)
                                                 libdl.so.2 => 
/lib/tls/i686/cmov/libdl.so.2 (0xb770b000)
                                                 libc.so.6 => 
/lib/tls/i686/cmov/libc.so.6 (0xb749c000)
                                                 libcrypt.so.1 => 
/lib/tls/i686/cmov/libcrypt.so.1 (0xb746e000)
                                                 libgnutls.so.13 => 
/usr/lib/libgnutls.so.13 (0xb73e9000)
                                                 libpthread.so.0 => 
/lib/tls/i686/cmov/libpthread.so.0 (0xb73d6000)
                                                 librt.so.1 => 
/lib/tls/i686/cmov/librt.so.1 (0xb73cd000)
                                                 libgcrypt.so.11 => 
/usr/lib/libgcrypt.so.11 (0xb7287000)
                                                 libnsl.so.1 => 
/lib/tls/i686/cmov/libnsl.so.1 (0xb726d000)

apache2 links with openssl, so the same would apply to php
applications using the apache plugin.



when I recompiled openldap 2.1.30 and used the resultant ldapsearch,
it too links in both libraries, although this was not obvious until I
ran strace on the process - I think the sasl2 module was probably
pulling it in.


[EMAIL 
PROTECTED]:~/tmp/debian/other/aaa/openldap2-2.1.30/debian/build/clients/tools$ 
ldd .libs/ldapsearch 
                                                                                
linux-gate.so.1 =>  (0xb7fb6000)
                                                                                
libldap.so.2 => /usr/lib/libldap.so.2 (0xb7f6c000)
                                                                                
liblber.so.2 => /usr/lib/liblber.so.2 (0xb7f5f000)
                                                                                
libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0xb7f49000)
                                                                                
libgnutls.so.13 => /usr/lib/libgnutls.so.13 (0xb7edb000)
                                                                                
libcrypt.so.1 => /lib/tls/i686/cmov/libcrypt.so.1 (0xb7ead000)
                                                                                
libresolv.so.2 => /lib/tls/i686/cmov/libresolv.so.2 (0xb7e9a000)
                                                                                
libdl.so.2 => /lib/tls/i686/cmov/libdl.so.2 (0xb7e96000)
                                                                                
libc.so.6 => /lib/tls/i686/cmov/libc.so.6 (0xb7d61000)
                                                                                
libpthread.so.0 => /lib/tls/i686/cmov/libpthread.so.0 (0xb7d4e000)
                                                                                
libtasn1.so.3 => /usr/lib/libtasn1.so.3 (0xb7d3b000)
                                                                                
libz.so.1 => /usr/lib/libz.so.1 (0xb7d27000)
                                                                                
libgcrypt.so.11 => /usr/lib/libgcrypt.so.11 (0xb7cd6000)
                                                                                
libgpg-error.so.0 => /usr/lib/libgpg-error.so.0 (0xb7cd1000)
                                                                                
/lib/ld-linux.so.2 (0xb7fb7000)
                                                                                
libnsl.so.1 => /lib/tls/i686/cmov/libnsl.so.1 (0xb7cbb000)



open("/usr/lib/libkrb5support.so.0", O_RDONLY) = 4
open("/usr/lib/sasl2/libgssapiv2.la", O_RDONLY) = 4
open("/usr/lib/sasl2/libcrammd5.la", O_RDONLY) = 4
open("/usr/lib/sasl2/libcrammd5.so.2", O_RDONLY) = 4
open("/usr/lib/sasl2/libdigestmd5.la", O_RDONLY) = 4
open("/usr/lib/sasl2/libdigestmd5.so.2", O_RDONLY) = 4
open("/home/brian/.local/lib/libcrypto.so.0.9.8", O_RDONLY) = -1 ENOENT (No 
such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 4
open("/usr/lib/i686/cmov/libcrypto.so.0.9.8", O_RDONLY) = 4



This is evil :-(
-- 
Brian May <[EMAIL PROTECTED]>


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to