<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body data-blackberry-caret-color="#00a8df" style="background-color: rgb(255, 255, 255); line-height: initial;">
<div style="width: 100%; font-size: initial; font-family: Calibri, 'Slate Pro', sans-serif; color: rgb(31, 73, 125); text-align: initial; background-color: rgb(255, 255, 255);">
Hi,</div>
<div style="width: 100%; font-size: initial; font-family: Calibri, 'Slate Pro', sans-serif; color: rgb(31, 73, 125); text-align: initial; background-color: rgb(255, 255, 255);">
<br>
</div>
<div style="width: 100%; font-size: initial; font-family: Calibri, 'Slate Pro', sans-serif; color: rgb(31, 73, 125); text-align: initial; background-color: rgb(255, 255, 255);">
It happened because he built with an OpenSSL which doesn’t incorporate Red Hat's errata, most likely. This was an issue with a great many products for all of like a week or two while the broken packages were being delivered. <span style="font-size: initial; text-align: initial; line-height: initial;"></span></div>
<div style="width: 100%; font-size: initial; font-family: Calibri, 'Slate Pro', sans-serif; color: rgb(31, 73, 125); text-align: initial; background-color: rgb(255, 255, 255);">
<br>
</div>
<div style="width: 100%; font-size: initial; font-family: Calibri, 'Slate Pro', sans-serif; color: rgb(31, 73, 125); text-align: initial; background-color: rgb(255, 255, 255);">
It's not Erlang's fault. And Red Hat fixed their packages. The only two likely options are that the distro (or, more likely, system) does not have the current packages; or, there is a new bug which needs to be filed with Red Hat (less likely).<span style="font-size: initial; text-align: initial; line-height: initial;"></span></div>
<div style="font-size: initial; font-family: Calibri, 'Slate Pro', sans-serif; color: rgb(31, 73, 125); text-align: initial; background-color: rgb(255, 255, 255);">
<br>
--Matt<br>
<br>
-- <br>
Matt Lewandowsky<br>
Big Geek<br>
Greenviolet<br>
matt@greenviolet.net http://www.greenviolet.net<br>
+1 415 578 5782 (US) +44 844 484 8254 (UK)<br>
Sent from my BlackBerry 10 smartphone.</div>
<table width="100%" style="background-color:white;border-spacing:0px;">
<tbody>
<tr>
<td colspan="2" style="font-size: initial; text-align: initial; background-color: rgb(255, 255, 255);">
<div id="_persistentHeader" style="border-style: solid none none; border-top-color: rgb(181, 196, 223); border-top-width: 1pt; padding: 3pt 0in 0in; font-family: Tahoma, 'BB Alpha Sans', 'Slate Pro'; font-size: 10pt;">
<div><b>From: </b>Andreas Schultz</div>
<div><b>Sent: </b>Tuesday, December 17, 2013 08:15</div>
<div><b>To: </b>Evgeny M</div>
<div><b>Cc: </b>erlang-programming@googlegroups.com; erlang-questions@erlang.org</div>
<div><b>Subject: </b>Re: [erlang-questions] Erlang Crypto R16+ and Centos 6.4+ incompatibility</div>
</div>
</td>
</tr>
</tbody>
</table>
<div style="border-style: solid none none; border-top-color: rgb(186, 188, 209); border-top-width: 1pt; font-size: initial; text-align: initial; background-color: rgb(255, 255, 255);">
</div>
<br>
<div class="BodyFragment">
<div class="PlainText">Hi,<br>
<br>
----- Original Message -----<br>
> <br>
> <br>
> >That is not an Erlang problem itself. The binary Erlang packet you<br>
> installed<br>
> >was build on an system that had a OpenSSL with EC support enabled while<br>
> the<br>
> >system you are trying to install one, has OpenSSL with EC support<br>
> disabled.<br>
> <br>
> Nope, I compiled erlang from sources, and it throws the error in<br>
> crypto:start(). Seems like ./configure does not detect missing curves.<br>
<br>
configure has nothing to do with it. When openssl is configured and build<br>
a file named opensslconf.h is generated (on Ubuntu it's installed to<br>
/usr/include/x86_64-linux-gnu/openssl/opensslconf.h)<br>
<br>
That file is indirectly included though the other openssl headers and<br>
specifies at compile time what ciphers are supported. That your Erlang<br>
was compiled with EC support when your openssl seems to be missing<br>
support for it, means that that config header must be broken.<br>
<br>
Would be great to know how that happened.<br>
<br>
Andreas<br>
<br>
> >No, that is Centos/Redhat stupidity. OpenSSL by default does EC, but<br>
> Redhat choose<br>
> <br>
> >to disabled EC so that the NSA can better spy on you.<br>
> <br>
> Sure it's not erlang fault, but still do we really want to ditch half of<br>
> potential user base? Or suggest everyone to install outdated R15, as it<br>
> still works?<br>
> <br>
> <br>
<br>
-- <br>
-- <br>
Dipl. Inform.<br>
Andreas Schultz<br>
_______________________________________________<br>
erlang-questions mailing list<br>
erlang-questions@erlang.org<br>
<a href="http://erlang.org/mailman/listinfo/erlang-questions">http://erlang.org/mailman/listinfo/erlang-questions</a><br>
</div>
</div>
</body>
</html>