[erlang-questions] [centos-7]With newer Erlang versions has the eliptic curve crypto situation changed?
Bryan Hunt
bryan.hunt@REDACTED
Fri May 4 12:28:33 CEST 2018
Great, thanks for the quick response Hans. B
> On 4 May 2018, at 10:54, Hans Nilsson R <hans.r.nilsson@REDACTED> wrote:
>
> Thanks!
>
> Will be fixed in OTP-21.0-rc2 and in a patch on OTP-20 which also has this error.
>
> It is the engine support down in openssl that has problems, so I simply disable our engine support if EC is disabled.
>
> /Hans
>
> On 05/03/2018 09:23 PM, Bryan Hunt wrote:
>>
>> Hi,
>>
>> Before, when building OTP I always set the compile time option to disable elliptic curve cryptography using the
>> CFLAGS environmental variable (RHEL doesn’t ship with it) :
>>
>> ```
>> export CFLAGS="-DOPENSSL_NO_EC=1"
>> ./otp_build configure \
>> --without-odbc \
>> --without-cosEventDomain \
>> --without-cosEvent \
>> --without-cosFileTransfer \
>> --without-cosNotification \
>> --without-cosProperty \
>> --without-cosTime \
>> --without-cosTransactions \
>> --without-debugger \
>> --without-et \
>> --without-gs \
>> --without-ic \
>> --without-javac \
>> --without-jinterface \
>> --without-megaco \
>> --without-observer \
>> --without-orber \
>> --without-percept \
>> --without-typer \
>> --without-wx \
>> --without-tv \
>> --without-diameter \
>> --without-hipe
>> ```
>>
>> And that still works for the older versions.
>>
>> But when applied to OTP-21.0-rc1 I receive the following error :
>>
>> ```
>> gmake[6]: Entering directory `/root/otp/lib/crypto/c_src'
>> CC ../priv/obj/x86_64-unknown-linux-gnu/crypto.o
>> In file included from /usr/include/openssl/ecdh.h:78:0,
>> from /usr/include/openssl/engine.h:86,
>> from crypto.c:63:
>> /usr/include/openssl/ec.h:82:4: error: #error EC is disabled.
>> # error EC is disabled.
>> ^
>> gmake[6]: Leaving directory `/root/otp/lib/crypto/c_src'
>> gmake[6]: *** [../priv/obj/x86_64-unknown-linux-gnu/crypto.o] Error 1
>> gmake[5]: *** [release_spec] Error 2
>> gmake[5]: Leaving directory `/root/otp/lib/crypto/c_src'
>> gmake[4]: *** [release] Error 2
>> gmake[4]: Leaving directory `/root/otp/lib/crypto/c_src'
>> gmake[3]: *** [release] Error 2
>> gmake[3]: Leaving directory `/root/otp/lib/crypto/c_src'
>> gmake[2]: *** [release] Error 2
>> gmake[2]: Leaving directory `/root/otp/lib/crypto'
>> gmake[1]: Leaving directory `/root/otp/lib'
>> gmake[1]: *** [release] Error 2
>> gmake: *** [release] Error 2
>> The command '/bin/sh -c ./build-erlang.sh' returned a non-zero code: 1
>> Unable to find image 'bryanhuntesl/centos7-erlang:OTP-21.0-rc1' locally
>> docker: Error response from daemon: manifest for bryanhuntesl/centos7-erlang:OTP-21.0-rc1 not found.
>> See 'docker run --help’.
>> ```
>>
>> Has this behaviour changed recently ?
>>
>> Bryan
>>
>>
>>
>>
>>
>> _______________________________________________
>> erlang-questions mailing list
>> erlang-questions@REDACTED
>> http://erlang.org/mailman/listinfo/erlang-questions
>>
More information about the erlang-questions
mailing list