Re: verifier mode operating without rsa-sha256 support; terminating (SOLVED)

From: Rolf E. Sonneveld <R.E.Sonneveld_at_sonnection.nl>
Date: Fri, 28 Jun 2013 23:16:49 +0200

Hi, Murray,

On 06/28/2013 07:31 PM, Murray S. Kucherawy wrote:
> On Fri, 28 Jun 2013, Rolf E. Sonneveld wrote:
>> Any clues?
>
> I haven't had time to look yet, sorry.

for some reason the installation guide I made mentioned a configure
statement with an explicit ssl location:

$ configure ... --with-openssl=/usr/lib/x86_64-linux-gnu/openssl-1.0.0

This directory exists and is identical to that on the other system. I'm
not sure why 'openssl version' shows version 1.0.1. AFAICS, there is no
other version of openssl on the system:

# locate openssl | grep 1.0.1
(shows nothing)
# locate openssl | grep 1.0.0
/usr/lib/x86_64-linux-gnu/openssl-1.0.0
/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines
/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/lib4758cca.so
/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libaep.so
/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libatalla.so
/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libcapi.so
/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libchil.so
/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libcswift.so
/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libgmp.so
/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libgost.so
/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libnuron.so
/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libpadlock.so
/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libsureware.so
/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libubsec.so

Anyway, I left out the explicit path (i.e. I removed the --with-openssl
statement from the configure command) and that did it, I now get:

# /usr/local/opendkim-2.8.2/sbin/opendkim -V
opendkim: OpenDKIM Filter v2.8.2
         Compiled with OpenSSL 1.0.1 14 Mar 2012
         SMFI_VERSION 0x1000001
         Supported signing algorithms:
                 rsa-sha1
                 rsa-sha256
         Supported canonicalization algorithms:
                 relaxed
                 simple
         Active code options:
                 USE_DB
                 USE_JANSSON
                 USE_ODBX
                 _FFR_ATPS
                 _FFR_DKIM_REPUTATION
                 _FFR_IDENTITY_HEADER
                 _FFR_LDAP_CACHING
                 _FFR_REPUTATION
                 _FFR_STATS
         libopendkim 2.8.2: atps dkim_reputation debug

and opendkim starts successfully.

If anyone has an explanation of this, I'd appreciate it, but thanks
anyway for your support.

/rolf
Received on Fri Jun 28 2013 - 21:17:11 PST