about the effect of installing with "--without-openssl"

Evan Hunt each at isc.org
Sun Aug 26 08:58:39 UTC 2018

On Sat, Aug 25, 2018 at 10:44:22PM -0500, takahiro wrote:
> "If I don't use DNSSEC,TSIG,DNS COOKIE, It' no problem that compile without
> openssl."
> Is my understanding correct?

In all versions of BIND up to 9.12, it is possible to compile BIND without
openssl by using "configure --without-openssl".

There will be features you can't use. They're good features, and in my
opinion disabling them is a mistake, but you are allowed to do so.

In BIND 9.13, the option to disable these features no longer exists.

Evan Hunt -- each at isc.org
Internet Systems Consortium, Inc.

More information about the bind-users mailing list