configure option --disable-crypto-rand unsupported in 9.12.2?

Daniel Stirnimann daniel.stirnimann at
Thu Jul 12 09:35:09 UTC 2018

Dear all,

I have the configure option "--disable-crypto-rand" for some BIND 9.12
builds. Building BIND with this option fails for the latest BIND 9.12.2:

BUILDSTDERR: openssl_link.c: In function 'dst__openssl_init':
BUILDSTDERR: openssl_link.c:274:2: error: 're' undeclared (first use in
this function)
BUILDSTDERR:   re = ENGINE_get_default_RAND();
BUILDSTDERR: openssl_link.c:274:2: note: each undeclared identifier is
reported only once for each function it appears in
BUILDSTDERR: make[2]: *** [openssl_link.lo] Error 1
make[2]: Leaving directory `/builddir/build/BUILD/bind-9.12.2/lib/dns'
make[1]: Leaving directory `/builddir/build/BUILD/bind-9.12.2/lib'

If I remove "--disable-crypto-rand" for building BIND 9.12.2 it works.

I wonder whether the following change in BIND 9.13 already made it into
BIND 9.12.2 (its not listed in CHANGES for BIND 9.12.2)?

 4936.   [func]   Always use OpenSSL or PKCS#11 random data providers,
            and remove the --{enable,disable}-crypto-rand configure
            options. [GL #165]


More information about the bind-users mailing list