SSL Problem with -git master-2.2 tip (24 June 16)

[Timo Sirainen]

On 30 Jun 2016, at 01:22, Reuben Farrelly <reuben-dovecot at reub.net> wrote:
> 
> On 30/06/2016 8:17 AM, Timo Sirainen wrote:
> 
>> On 30 Jun 2016, at 01:09, Reuben Farrelly <reuben-dovecot at reub.net> wrote:
>>> On 30/06/2016 1:40 AM, Timo Sirainen wrote:
>>> 
>>>> On 24 Jun 2016, at 01:51, Reuben Farrelly <reuben-dovecot at reub.net> wrote:
>>>>> Current master-2.2 branch of Dovecot compiles for me on Gentoo x86_64 but experiences symbol errors when starting up:
>>>>> 
>>>>> Jun 24 08:38:00 thunderstorm dovecot: lmtp(8180): Fatal: Couldn't load required plugin /usr/lib64/dovecot/libssl_iostream_openssl.so: dlopen() failed: /usr/lib64/dovecot/libssl_iostream_openssl.so: undefined symbol: SSL_COMP_free_compression_methods
>>>>> Jun 24 08:38:00 thunderstorm dovecot: master: Error: service(lmtp): command startup failed, throttling for 16 secs
>>>>> 
>>>>> I suspect that this is because I have libressl installed on my systems instead of OpenSSL.
>>>> Fixed: https://github.com/dovecot/core/commit/be2be317de8059c135bea0ec698045f0f7475d6e
>>> Thanks.  Better but perhaps not quite right yet - I'm now seeing lots of these messages logged:
>>> 
>>> Jun 30 08:07:22 thunderstorm.reub.net dovecot: doveadm: Warning: CRYPTO_set_mem_functions() was called too late
>> Are you using Ubuntu 16.04? That and maybe some other latest OpenSSL versions are a bit broken. Anyway, disabled the warning for now: https://github.com/dovecot/core/commit/a0f2b68fe41b9565a42c4854c2450c0fd8b3a8d9
>> 
>> It doesn't matter much that the function fails.
> 
> No.  This was with Gentoo x86_64 with LibreSSL 2.4.1 (not OpenSSL).   It appears to be a cosmetic problem though.
> 
> Compiling now - if it's still a problem I'll re-post (otherwise assume it's all OK).

I guess LibreSSL should also fix it. I reported it to Ubuntu: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1594748

There's an upstream bug about it: https://rt.openssl.org/Ticket/Display.html?id=4559

But for some reason it's now marked as "rejected"...