key_verify failed for server_host_key solution

Henno Schooljan freebsd at schooljan.nl
Tue Aug 17 14:13:18 PDT 2004


> The culprit turns out to be a problem in libcrypto that is tickled
> by too aggressive optimization settings.
>
> When building 4.10, my make.conf included:
>
>  CFLAGS= -O -pipe -funroll-loops -ffast-math
>  COPTFLAGS= -O -pipe -funroll-loops -ffast-math
>
> By removing both the unroll-loops and fast-math optimizations,
> and rebuilding libcrypto, the problem disappears.

I had the same issue. I had this in my make.conf when it went wrong:

CFLAGS= -O2 -pipe -funroll-loops

and this solved the problem:

CFLAGS= -O -pipe

So I suspect the unroll loops option to be the cause. I guess I could 
rebuild with -O2 again without -funroll-loops to prove it...

regards,

Henno 



More information about the freebsd-stable mailing list