Re: SSL Problem with -git master-2.2 tip (24 June 16)

[Timo Sirainen]

On 30 Jun 2016, at 01:22, Reuben Farrelly  wrote:
> 
> On 30/06/2016 8:17 AM, Timo Sirainen wrote:
> 
>> On 30 Jun 2016, at 01:09, Reuben Farrelly  wrote:
>>> On 30/06/2016 1:40 AM, Timo Sirainen wrote:
>>> 
 On 24 Jun 2016, at 01:51, Reuben Farrelly  wrote:
> Current master-2.2 branch of Dovecot compiles for me on Gentoo x86_64 but 
> experiences symbol errors when starting up:
> 
> Jun 24 08:38:00 thunderstorm dovecot: lmtp(8180): Fatal: Couldn't load 
> required plugin /usr/lib64/dovecot/libssl_iostream_openssl.so: dlopen() 
> failed: /usr/lib64/dovecot/libssl_iostream_openssl.so: undefined symbol: 
> SSL_COMP_free_compression_methods
> Jun 24 08:38:00 thunderstorm dovecot: master: Error: service(lmtp): 
> command startup failed, throttling for 16 secs
> 
> I suspect that this is because I have libressl installed on my systems 
> instead of OpenSSL.
 Fixed: 
 https://github.com/dovecot/core/commit/be2be317de8059c135bea0ec698045f0f7475d6e
>>> Thanks.  Better but perhaps not quite right yet - I'm now seeing lots of 
>>> these messages logged:
>>> 
>>> Jun 30 08:07:22 thunderstorm.reub.net dovecot: doveadm: Warning: 
>>> CRYPTO_set_mem_functions() was called too late
>> Are you using Ubuntu 16.04? That and maybe some other latest OpenSSL 
>> versions are a bit broken. Anyway, disabled the warning for now: 
>> https://github.com/dovecot/core/commit/a0f2b68fe41b9565a42c4854c2450c0fd8b3a8d9
>> 
>> It doesn't matter much that the function fails.
> 
> No.  This was with Gentoo x86_64 with LibreSSL 2.4.1 (not OpenSSL).   It 
> appears to be a cosmetic problem though.
> 
> Compiling now - if it's still a problem I'll re-post (otherwise assume it's 
> all OK).

I guess LibreSSL should also fix it. I reported it to Ubuntu: 
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1594748

There's an upstream bug about it: 
https://rt.openssl.org/Ticket/Display.html?id=4559

But for some reason it's now marked as "rejected"...

Re: SSL Problem with -git master-2.2 tip (24 June 16)

[Reuben Farrelly]

On 30/06/2016 8:17 AM, Timo Sirainen wrote:


On 30 Jun 2016, at 01:09, Reuben Farrelly  wrote:

On 30/06/2016 1:40 AM, Timo Sirainen wrote:


On 24 Jun 2016, at 01:51, Reuben Farrelly  wrote:

Current master-2.2 branch of Dovecot compiles for me on Gentoo x86_64 but 
experiences symbol errors when starting up:

Jun 24 08:38:00 thunderstorm dovecot: lmtp(8180): Fatal: Couldn't load required 
plugin /usr/lib64/dovecot/libssl_iostream_openssl.so: dlopen() failed: 
/usr/lib64/dovecot/libssl_iostream_openssl.so: undefined symbol: 
SSL_COMP_free_compression_methods
Jun 24 08:38:00 thunderstorm dovecot: master: Error: service(lmtp): command 
startup failed, throttling for 16 secs

I suspect that this is because I have libressl installed on my systems instead 
of OpenSSL.

Fixed: 
https://github.com/dovecot/core/commit/be2be317de8059c135bea0ec698045f0f7475d6e

Thanks.  Better but perhaps not quite right yet - I'm now seeing lots of these 
messages logged:

Jun 30 08:07:22 thunderstorm.reub.net dovecot: doveadm: Warning: 
CRYPTO_set_mem_functions() was called too late

Are you using Ubuntu 16.04? That and maybe some other latest OpenSSL versions 
are a bit broken. Anyway, disabled the warning for now: 
https://github.com/dovecot/core/commit/a0f2b68fe41b9565a42c4854c2450c0fd8b3a8d9

It doesn't matter much that the function fails.


No.  This was with Gentoo x86_64 with LibreSSL 2.4.1 (not OpenSSL).   It 
appears to be a cosmetic problem though.


Compiling now - if it's still a problem I'll re-post (otherwise assume 
it's all OK).


Reuben

Re: SSL Problem with -git master-2.2 tip (24 June 16)

[Timo Sirainen]

On 30 Jun 2016, at 01:09, Reuben Farrelly  wrote:
> 
> On 30/06/2016 1:40 AM, Timo Sirainen wrote:
> 
>> On 24 Jun 2016, at 01:51, Reuben Farrelly  wrote:
>>> Current master-2.2 branch of Dovecot compiles for me on Gentoo x86_64 but 
>>> experiences symbol errors when starting up:
>>> 
>>> Jun 24 08:38:00 thunderstorm dovecot: lmtp(8180): Fatal: Couldn't load 
>>> required plugin /usr/lib64/dovecot/libssl_iostream_openssl.so: dlopen() 
>>> failed: /usr/lib64/dovecot/libssl_iostream_openssl.so: undefined symbol: 
>>> SSL_COMP_free_compression_methods
>>> Jun 24 08:38:00 thunderstorm dovecot: master: Error: service(lmtp): command 
>>> startup failed, throttling for 16 secs
>>> 
>>> I suspect that this is because I have libressl installed on my systems 
>>> instead of OpenSSL.
>> Fixed: 
>> https://github.com/dovecot/core/commit/be2be317de8059c135bea0ec698045f0f7475d6e
> 
> Thanks.  Better but perhaps not quite right yet - I'm now seeing lots of 
> these messages logged:
> 
> Jun 30 08:07:22 thunderstorm.reub.net dovecot: doveadm: Warning: 
> CRYPTO_set_mem_functions() was called too late

Are you using Ubuntu 16.04? That and maybe some other latest OpenSSL versions 
are a bit broken. Anyway, disabled the warning for now: 
https://github.com/dovecot/core/commit/a0f2b68fe41b9565a42c4854c2450c0fd8b3a8d9

It doesn't matter much that the function fails.

Re: SSL Problem with -git master-2.2 tip (24 June 16)

[Reuben Farrelly]

On 30/06/2016 1:40 AM, Timo Sirainen wrote:


On 24 Jun 2016, at 01:51, Reuben Farrelly  wrote:

Current master-2.2 branch of Dovecot compiles for me on Gentoo x86_64 but 
experiences symbol errors when starting up:

Jun 24 08:38:00 thunderstorm dovecot: lmtp(8180): Fatal: Couldn't load required 
plugin /usr/lib64/dovecot/libssl_iostream_openssl.so: dlopen() failed: 
/usr/lib64/dovecot/libssl_iostream_openssl.so: undefined symbol: 
SSL_COMP_free_compression_methods
Jun 24 08:38:00 thunderstorm dovecot: master: Error: service(lmtp): command 
startup failed, throttling for 16 secs

I suspect that this is because I have libressl installed on my systems instead 
of OpenSSL.

Fixed: 
https://github.com/dovecot/core/commit/be2be317de8059c135bea0ec698045f0f7475d6e


Thanks.  Better but perhaps not quite right yet - I'm now seeing lots of 
these messages logged:


Jun 30 08:07:22 thunderstorm.reub.net dovecot: doveadm: Warning: 
CRYPTO_set_mem_functions() was called too late


Reuben

Re: SSL Problem with -git master-2.2 tip (24 June 16)

[Timo Sirainen]

On 24 Jun 2016, at 01:51, Reuben Farrelly  wrote:
> 
> Current master-2.2 branch of Dovecot compiles for me on Gentoo x86_64 but 
> experiences symbol errors when starting up:
> 
> Jun 24 08:38:00 thunderstorm dovecot: lmtp(8180): Fatal: Couldn't load 
> required plugin /usr/lib64/dovecot/libssl_iostream_openssl.so: dlopen() 
> failed: /usr/lib64/dovecot/libssl_iostream_openssl.so: undefined symbol: 
> SSL_COMP_free_compression_methods
> Jun 24 08:38:00 thunderstorm dovecot: master: Error: service(lmtp): command 
> startup failed, throttling for 16 secs
> 
> I suspect that this is because I have libressl installed on my systems 
> instead of OpenSSL.

Fixed: 
https://github.com/dovecot/core/commit/be2be317de8059c135bea0ec698045f0f7475d6e

SSL Problem with -git master-2.2 tip (24 June 16)

[Reuben Farrelly]

Current master-2.2 branch of Dovecot compiles for me on Gentoo x86_64 
but experiences symbol errors when starting up:


Jun 24 08:38:00 thunderstorm dovecot: lmtp(8180): Fatal: Couldn't load 
required plugin /usr/lib64/dovecot/libssl_iostream_openssl.so: dlopen() 
failed: /usr/lib64/dovecot/libssl_iostream_openssl.so: undefined symbol: 
SSL_COMP_free_compression_methods
Jun 24 08:38:00 thunderstorm dovecot: master: Error: service(lmtp): 
command startup failed, throttling for 16 secs


I suspect that this is because I have libressl installed on my systems 
instead of OpenSSL.


A known commit point which does not work is:

f5e6b05684328b9800ccd973c73027300c832d65

However a few commits earlier this problem does not occur:

f292589f4b85e02d97d974dfe34324c6c0bb9d9f

Looks like commit bff052bd29dbf7175ee6cd14bd14bcea1900b869 : 
"lib-dcrypt, lib-ssl-iostream: Share OpenSSL init/deinit code." may have 
broken the tree for LibreSSL/non OpenSSL users.


Reuben