Same issue here.. just tried to update to bind 9.8.1 in testing and it failed with the 'initializing DST: openssl failure' error.
I'm running openssl 1.0.0g, and the temporary fix did not work for me (it seems to be related to chrooted bind and I'm not using that - it's just a bog standard install). Strace shows it loading the infamous libgost.so file correctly, then dying. I have found no way past this error.. could the logging be improved? 'openssl failure' isn't exactly informative. Tony open("/usr/lib/ssl/openssl.cnf", O_RDONLY) = 8 fstat(8, {st_mode=S_IFREG|0644, st_size=10835, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f117e4fe000 read(8, "#\n# OpenSSL example configuratio"..., 4096) = 4096 read(8, "Netscape crash on BMPStrings or "..., 4096) = 4096 read(8, " this to avoid interpreting an e"..., 4096) = 2643 read(8, "", 4096) = 0 close(8) = 0 munmap(0x7f117e4fe000, 4096) = 0 futex(0x7f117cef50ec, FUTEX_WAKE_PRIVATE, 2147483647) = 0 open("/usr/lib/openssl-1.0.0/engines/libgost.so", O_RDONLY) = 8 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\220X\0\0\0\0\0\0"..., 832) = 832 fstat(8, {st_mode=S_IFREG|0644, st_size=95568, ...}) = 0 mmap(NULL, 2190728, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f11791f1000 mprotect(0x7f1179207000, 2093056, PROT_NONE) = 0 mmap(0x7f1179406000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x15000) = 0x7f1179406000 close(8) = 0 munmap(0x7f11791f1000, 2190728) = 0 gettimeofday({1329160359, 137859}, NULL) = 0 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3661, ...}) = 0 write(2, "13-Feb-2012 19:12:39.137 initial"..., 5913-Feb-2012 19:12:39.137 initializing DST: openssl failure ) = 59 gettimeofday({1329160359, 138046}, NULL) = 0 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3661, ...}) = 0 write(2, "13-Feb-2012 19:12:39.138 exiting"..., 5413-Feb-2012 19:12:39.138 exiting (due to fatal error) ) = 54 exit_group(1) = ? -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org