* Patrick Ben Koetter <[email protected]>: > * Wietse Venema <[email protected]>: > > Patrick Ben Koetter: > > > Greetings, > > > > > > I am experiencing troubles enabling outbound DANE on a RHEL 6.5 system: > > > > > > warning: sys4.de: dane configured, but no requisite library support > > > > > > <http://postfix.1071664.n5.nabble.com/Client-side-DANE-minimum-openssl-version-td67768.html> > > > suggests, the underlying openssl library is too old. Viktor writes at > > > least > > > openssl 1.0.0 would be required. > > > > > > The machine in questions runs OpenSSL 1.0.1e-fips. This is where I got > > > stuck. > > > > Why the hell are you using FIPS? > > Because I like pain? Probably because the packet manager pulled it from some > repo. I'll have a look.
The FIPS version has been pulled from RedHats own repositories: # yum info openssl.x86_64 Name : openssl Arch : x86_64 Version : 1.0.1e Release : 16.el6_5.14 Size : 4.0 M Repo : installed >From repo : rhel-6-server-rpms Summary : A general purpose cryptography library with TLS implementation URL : http://www.openssl.org/ License : OpenSSL Description : The OpenSSL toolkit provides support for secure communications between : machines. OpenSSL includes a certificate management tool and shared : libraries which provide various cryptographic algorithms and : protocols. Using only RedHat repositories, this is the only one available: # yum list available openssl Loaded plugins: product-id, subscription-manager This system is receiving updates from Red Hat Subscription Management. rhel-6-server-eus-rpms | 3.7 kB 00:00 rhel-6-server-realtime-rpms | 3.8 kB 00:00 rhel-6-server-rpms | 3.7 kB 00:00 rhel-ha-for-rhel-6-server-eus-rpms | 3.7 kB 00:00 rhel-ha-for-rhel-6-server-rpms | 3.7 kB 00:00 rhel-hpn-for-rhel-6-server-rpms | 3.7 kB 00:00 rhel-lb-for-rhel-6-server-eus-rpms | 3.7 kB 00:00 rhel-lb-for-rhel-6-server-rpms | 3.7 kB 00:00 rhel-rs-for-rhel-6-server-eus-rpms | 3.7 kB 00:00 rhel-rs-for-rhel-6-server-rpms | 3.7 kB 00:00 rhel-sap-for-rhel-6-server-rpms | 3.7 kB 00:00 rhel-sap-hana-for-rhel-6-server-rpms | 2.8 kB 00:00 rhel-scalefs-for-rhel-6-server-rpms | 3.7 kB 00:00 rhel-server-6-rhds-9-rpms | 3.1 kB 00:00 rhel-server-dts-6-eus-rpms | 2.8 kB 00:00 rhel-server-dts-6-rpms | 2.9 kB 00:00 rhel-server-dts2-6-eus-rpms | 2.8 kB 00:00 rhel-server-dts2-6-rpms | 2.6 kB 00:00 rhel-sfs-for-rhel-6-server-eus-rpms | 3.4 kB 00:00 rhel-sjis-for-rhel-6-server-rpms | 3.1 kB 00:00 Available Packages openssl.i686 1.0.1e-16.el6_5.14 rhel-6-server-eus-rpms Excuse my ignorance, but what's wrong with a FIPS version of openssl? It seems as if I missed something everone else knows. p@rick -- [*] sys4 AG https://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein
