On 2015-09-17, Research <resea...@nativemethods.com> wrote: > Hello, > > I am currently having issues compiling BIND 9.10.3 (released by ISC this week > to correct for DoS vulnerabilities), on my OpenBSD 5.7 test machine. I am > running the OpenBSD 5.7 release build with the 14 errata patches successfully > applied and with the userland also rebuilt.
9.10.3 is a feature release, it's in -current ports but I don't intend to backport to -stable yet. The security fixes are in 9.10.2-P4 which is in -stable ports. > I can successfully make configure, but when I attempt make build, I receive: > > …previous successful build messages removed... > > making all in /home/developer/bind-9.10.3/lib/samples > gcc -pthread -I/home/developer/bind-9.10.3 -I../.. -I./include > -I../dns/include -I/home/developer/bind-9.10.3/lib/dns/include > -I../../lib/dns/include -I/home/developer/bind-9.10.3/lib/isc/include > -I../../lib/isc -I../../lib/isc/include -I../../lib/isc/unix/include > -I../../lib/isc/pthreads/include -I../../lib/isc/x86_32/include > -I../../lib/irs/include -I../../lib/irs/include -D_REENTRANT > -DVERSION=\"9.10.3\" -DSYSCONFDIR=\"/etc/bind\" -g -O2 -W -Wall > -Wmissing-prototypes -Wcast-qual -Wwrite-strings -Wformat -Wpointer-arith > -fno-strict-aliasing -fno-delete-null-pointer-checks -c resolve.c > gcc -pthread -g -O2 -o resolve resolve.o ../irs/libirs.a ../dns/libdns.a > -lcrypto ../isccfg/libisccfg.a ../isc/libisc.a -lpthread > ../irs/libirs.a(getnameinfo.o)(.text+0x18f): In function `getnameinfo': > /home/developer/bind-9.10.3/lib/irs/getnameinfo.c:220: warning: strcpy() is > almost always misused, please use strlcpy() > ../dns/libdns.a(resolver.o)(.text+0x9774): In function > `dns_resolver_createfetch3': > /home/developer/bind-9.10.3/lib/dns/resolver.c:4155: warning: strcat() is > almost always misused, please use strlcat() > ../dns/libdns.a(name.o)(.text+0x426b): In function `dns_name_tofilenametext': > /home/developer/bind-9.10.3/lib/dns/name.c:1636: warning: sprintf() is often > misused, please use snprintf() > ../dns/libdns.a(openssldh_link.o)(.text+0xed5): In function > `openssldh_generate': > /home/developer/bind-9.10.3/lib/dns/openssldh_link.c:212: undefined reference > to `BN_GENCB_new' > ../dns/libdns.a(openssldh_link.o)(.text+0xf23):/home/developer/bind-9.10.3/lib/dns/openssldh_link.c:234: > undefined reference to `BN_GENCB_free' > ../dns/libdns.a(openssldh_link.o)(.text+0xffe):/home/developer/bind-9.10.3/lib/dns/openssldh_link.c:229: > undefined reference to `BN_GENCB_free' Our OPENSSL_VERSION_NUMBER #defines don't (and can't) directly map from libressl's api to openssl's. If you have a requirement to use 9.10.3 now then either run -current, backport my patches, or disable crypto support if you don't need it (untested but should work).
