warning: private/smtp socket: malformed response

classic Classic list List threaded Threaded
9 messages Options
Reply | Threaded
Open this post in threaded view
|

warning: private/smtp socket: malformed response

Maksim Kulik
Hello!
I have postfix 2.10 on freebsd 9.2.
When i try to send some emails, i get following in mail log:
Oct 21 16:56:27 1gb postfix/smtp[7038]: < imx6.ngs.ru[195.19.71.16]:25: 220 imx6.ngs.ru ESMTP ready
Oct 21 16:56:27 1gb postfix/smtp[7038]: > imx6.ngs.ru[195.19.71.16]:25: EHLO 1gb.by
Oct 21 16:56:27 1gb postfix/smtp[7038]: < imx6.ngs.ru[195.19.71.16]:25: 250-imx6.ngs.ru
Oct 21 16:56:27 1gb postfix/smtp[7038]: < imx6.ngs.ru[195.19.71.16]:25: 250-SIZE 40960000
Oct 21 16:56:27 1gb postfix/smtp[7038]: < imx6.ngs.ru[195.19.71.16]:25: 250-ETRN
Oct 21 16:56:27 1gb postfix/smtp[7038]: < imx6.ngs.ru[195.19.71.16]:25: 250-ENHANCEDSTATUSCODES
Oct 21 16:56:27 1gb postfix/smtp[7038]: < imx6.ngs.ru[195.19.71.16]:25: 250-8BITMIME
Oct 21 16:56:27 1gb postfix/smtp[7038]: < imx6.ngs.ru[195.19.71.16]:25: 250-DSN
Oct 21 16:56:27 1gb postfix/smtp[7038]: < imx6.ngs.ru[195.19.71.16]:25: 250 STARTTLS
Oct 21 16:56:27 1gb postfix/smtp[7038]: server features: 0x901b size 40960000
Oct 21 16:56:27 1gb postfix/smtp[7038]: smtp_stream_setup: maxtime=300 enable_deadline=0
Oct 21 16:56:27 1gb postfix/smtp[7038]: > imx6.ngs.ru[195.19.71.16]:25: STARTTLS
Oct 21 16:56:27 1gb postfix/smtp[7038]: < imx6.ngs.ru[195.19.71.16]:25: 220 2.0.0 Start TLS
Oct 21 16:56:27 1gb postfix/smtp[7038]: send attr request = seed
Oct 21 16:56:27 1gb postfix/smtp[7038]: send attr size = 32
Oct 21 16:56:27 1gb postfix/smtp[7038]: private/tlsmgr: wanted attribute: status
Oct 21 16:56:27 1gb postfix/smtp[7038]: input attribute name: status
Oct 21 16:56:27 1gb postfix/smtp[7038]: input attribute value: 0
Oct 21 16:56:27 1gb postfix/smtp[7038]: private/tlsmgr: wanted attribute: seed
Oct 21 16:56:27 1gb postfix/smtp[7038]: input attribute name: seed
Oct 21 16:56:27 1gb postfix/smtp[7038]: input attribute value: RW5yuoKfeonUvpgq0BdCuA+TZeEsKcnC5boyBvJUgg0=
Oct 21 16:56:27 1gb postfix/smtp[7038]: private/tlsmgr: wanted attribute: (list terminator)
Oct 21 16:56:27 1gb postfix/smtp[7038]: input attribute name: (end)
Oct 21 16:56:27 1gb postfix/qmgr[1889]: warning: private/smtp socket: malformed response
Oct 21 16:56:27 1gb postfix/qmgr[1889]: warning: transport smtp failure -- see a previous warning/fatal/panic logfile record for the problem description
Oct 21 16:56:27 1gb postfix/master[1883]: warning: process /usr/local/libexec/postfix/smtp pid 7038 killed by signal 11
Oct 21 16:56:27 1gb postfix/error[7079]: D28CC77F: to=<[hidden email]>, relay=none, delay=16581, delays=16572/8.6/0/0.02, dsn=4.3.0, status=deferred (unknown mail transport error)

Postfix runs in non-chrooted environment. How can I fix it?
Thanks.
Reply | Threaded
Open this post in threaded view
|

Re: warning: private/smtp socket: malformed response

Viktor Dukhovni
On Mon, Oct 21, 2013 at 05:01:45PM +0300, Maksim Kulik wrote:

> I have postfix 2.10 on freebsd 9.2.

Which 2.10? (2.10.0, 2.10.1, 2.10.2?)
Which version of OpenSSL?

> When i try to send some emails, i get following in mail log:
>
> smtp[7038]: > imx6.ngs.ru[195.19.71.16]:25: EHLO 1gb.by
> smtp[7038]: < imx6.ngs.ru[195.19.71.16]:25: 250-imx6.ngs.ru
> smtp[7038]: < imx6.ngs.ru[195.19.71.16]:25: 250-SIZE 40960000
> smtp[7038]: < imx6.ngs.ru[195.19.71.16]:25: 250-ETRN
> smtp[7038]: < imx6.ngs.ru[195.19.71.16]:25: 250-ENHANCEDSTATUSCODES
> smtp[7038]: < imx6.ngs.ru[195.19.71.16]:25: 250-8BITMIME
> smtp[7038]: < imx6.ngs.ru[195.19.71.16]:25: 250-DSN
> smtp[7038]: < imx6.ngs.ru[195.19.71.16]:25: 250 STARTTLS
> smtp[7038]: server features: 0x901b size 40960000
> smtp[7038]: smtp_stream_setup: maxtime=300 enable_deadline=0
> smtp[7038]: > imx6.ngs.ru[195.19.71.16]:25: STARTTLS
> smtp[7038]: < imx6.ngs.ru[195.19.71.16]:25: 220 2.0.0 Start TLS
> smtp[7038]: send attr request = seed
> smtp[7038]: send attr size = 32
> smtp[7038]: private/tlsmgr: wanted attribute: status
> smtp[7038]: input attribute name: status
> smtp[7038]: input attribute value: 0
> smtp[7038]: private/tlsmgr: wanted attribute: seed
> smtp[7038]: input attribute name: seed
> smtp[7038]: input attribute value: RW5yuoKfeonUvpgq0BdCuA+TZeEsKcnC5boyBvJUgg0=
> smtp[7038]: private/tlsmgr: wanted attribute: (list terminator)
> smtp[7038]: input attribute name: (end)

The SMTP client obtained fresh seed material for its from tlsmgr(8) while
getting ready to start a new TLS session.

> Oct 21 16:56:27 1gb postfix/qmgr[1889]: warning: private/smtp socket:
> malformed response
> Oct 21 16:56:27 1gb postfix/qmgr[1889]: warning: transport smtp failure --
> see a previous warning/fatal/panic logfile record for the problem
> description
> Oct 21 16:56:27 1gb postfix/master[1883]: warning: process
> /usr/local/libexec/postfix/smtp pid 7038 killed by signal 11

It then segfaulted in the SSL library.  

> Oct 21 16:56:27 1gb postfix/error[7079]: D28CC77F: to=<[hidden email]>,
> relay=none, delay=16581, delays=16572/8.6/0/0.02, dsn=4.3.0,
> status=deferred (unknown mail transport error)
>
> Postfix runs in non-chrooted environment. How can I fix it?

A stack trace of the segfault is the key piece of information needed
to make progress.

    - Make sure Postfix is compiled with debug symbols.

    - If possible deploy an openssl library with debug symbols.

    - Configure a clone of the "smtp" transport (call it "tlsdebug")
      for mail delivery to ngs.ru.

        tlsdebug unix - - n - 1 smtp -D
            -o smtp_tls_loglevel=2

    - Follow the instructions in

        http://www.postfix.org/DEBUG_README.html#auto_trace

      to attach gdb to the smtp client after flushing the message
      in question using "postqueue -i D28CC77F".  After the segfault
      run "bt" (backtrace) to print the stack.

Report the resulting verbose tls logging and stack trace.  Report
the FreeBSD version, Postfix version, OpenSSL version, and any
recent changes to your system, when did the problem start happening?

Another option is to download and compile (but not install) the
source for postfix-2.11-20131001, then run the bin/posttls-finger
command:

    $ gdb --args posttls-finger -t30 -T 180 -Ldebug ngs.ru
    (gdb) run
    posttls-finger: Connected to imx6.ngs.ru[195.19.71.16]:25
    posttls-finger: < 220 imx6.ngs.ru ESMTP ready
    ...
    posttls-finger: Untrusted TLS connection established to imx6.ngs.ru[195.19.71.16]:25: unknown with cipher DHE-RSA-AES256-SHA (256/256 bits)
    ...
    posttls-finger: > QUIT
    posttls-finger: < 221 2.0.0 Bye

    Program exited normally.
    (gdb) quit

If the problem is in OpenSSL your posttls-finger may segfault, report the
stack trace (output of "bt")?

--
        Viktor.
Reply | Threaded
Open this post in threaded view
|

Re: warning: private/smtp socket: malformed response

Wietse Venema
In reply to this post by Maksim Kulik
Maksim Kulik:
> Hello!
> I have postfix 2.10 on freebsd 9.2.
> When i try to send some emails, i get following in mail log:
> Oct 21 16:56:27 1gb postfix/smtp[7038]: < imx6.ngs.ru[195.19.71.16]:25: 220
> imx6.ngs.ru ESMTP ready
> Oct 21 16:56:27 1gb postfix/smtp[7038]: > imx6.ngs.ru[195.19.71.16]:25:

Please DO NOT post verbose logging unless you are asked to do so.
It just drowns out the relevant information:

> Oct 21 16:56:27 1gb postfix/master[1883]: warning: process
/usr/local/libexec/postfix/smtp pid 7038 killed by signal 11

That's what you need to investigate.

        Wietse
Reply | Threaded
Open this post in threaded view
|

Re: warning: private/smtp socket: malformed response

Maksim Kulik
In reply to this post by Viktor Dukhovni
Viktor, thank you for your help!

Postfix version - postfix-2.10.1,1
Openssl version - openssl-1.0.1_8
FreeBSD version - FreeBSD 9.2-STABLE #1 r256306:

Log and backtrace:
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd"...
Attaching to program: /usr/local/libexec/postfix/smtp, process 71657
Reading symbols from /usr/local/lib/libpcre.so.3...done.
Loaded symbols for /usr/local/lib/libpcre.so.3
Reading symbols from /usr/local/lib/libssl.so.8...done.
Loaded symbols for /usr/local/lib/libssl.so.8
Reading symbols from /usr/local/lib/libcrypto.so.8...done.
Loaded symbols for /usr/local/lib/libcrypto.so.8
Reading symbols from /usr/local/lib/libspf2.so.3...done.
Loaded symbols for /usr/local/lib/libspf2.so.3
Reading symbols from /usr/local/lib/mysql/libmysqlclient.so.18...done.
Loaded symbols for /usr/local/lib/mysql/libmysqlclient.so.18
Reading symbols from /lib/libz.so.6...done.
Loaded symbols for /lib/libz.so.6
Reading symbols from /lib/libcrypt.so.5...done.
Loaded symbols for /lib/libcrypt.so.5
Reading symbols from /lib/libm.so.5...done.
Loaded symbols for /lib/libm.so.5
Reading symbols from /lib/libc.so.7...done.
Loaded symbols for /lib/libc.so.7
Reading symbols from /lib/libthr.so.3...done.
[New Thread 803007400 (LWP 100668/smtp)]
Loaded symbols for /lib/libthr.so.3
Reading symbols from /usr/lib/libstdc++.so.6...done.
Loaded symbols for /usr/lib/libstdc++.so.6
Reading symbols from /lib/libgcc_s.so.1...done.
Loaded symbols for /lib/libgcc_s.so.1
Reading symbols from /usr/lib/libsupc++.so.1...done.
Loaded symbols for /usr/lib/libsupc++.so.1
Reading symbols from /usr/local/lib/nss_mysql.so.1...done.
Loaded symbols for /usr/local/lib/nss_mysql.so.1
Reading symbols from /libexec/ld-elf.so.1...done.
Loaded symbols for /libexec/ld-elf.so.1
[Switching to Thread 803007400 (LWP 100668/smtp)]
0x000000080202743a in wait4 () from /lib/libc.so.7
(gdb) Continuing.

Program received signal SIGSEGV, Segmentation fault.
0x000000080195a812 in deflateSetDictionary () from /lib/libz.so.6
(gdb) #0 0x000000080195a812 in deflateSetDictionary () from /lib/libz.so.6
#1 0x000000080195cc75 in deflateCopy () from /lib/libz.so.6
#2 0x000000080195bb6e in deflate () from /lib/libz.so.6
#3 0x0000000800ecd4ce in zlib_stateful_compress_block (
ctx=<value optimized out>, out=0x803276008 "x\234", olen=17408,
in=0x803225000 "\024", ilen=16) at c_zlib.c:207
#4 0x0000000800ecc732 in COMP_compress_block (ctx=0x803017c40,
out=<value optimized out>, olen=<value optimized out>,
in=<value optimized out>, ilen=16) at comp_lib.c:46
#5 0x0000000800b2a3ce in ssl3_do_compress (ssl=<value optimized out>)
at s3_pkt.c:564
#6 0x0000000800b2a594 in do_ssl3_write (s=0x803008000, type=22,
buf=0x803225000 "\024", len=16, create_empty_fragment=0) at s3_pkt.c:790
#7 0x0000000800b2ab75 in ssl3_write_bytes (s=0x803008000, type=22,
buf_=0x803225000, len=<value optimized out>) at s3_pkt.c:609
#8 0x0000000800b2ca5d in ssl3_do_write (s=0x803008000, type=22)
at s3_both.c:132
#9 0x0000000800b26689 in ssl3_connect (s=0x803008000) at s3_clnt.c:508
#10 0x0000000000415838 in tls_bio (fd=16, timeout=300,
TLScontext=0x80301bb50, hsfunc=0x4059b4 <SSL_connect@plt>, rfunc=0,
wfunc=0, buf=0x0, num=0) at tls_bio_ops.c:198
#11 0x0000000000414ccf in tls_client_start (props=0x7fffffffc930)
at tls_client.c:952
#12 0x00000000004092af in smtp_start_tls (state=0x80301b550)
at smtp_proto.c:791
#13 0x0000000000408f2d in smtp_helo (state=0x80301b550) at smtp_proto.c:678
#14 0x0000000000407d1f in smtp_connect_inet (state=0x80301b550,
nexthop=0x8030347b0 "ngs.ru", def_service=0x45d616 "smtp")
at smtp_connect.c:908
#15 0x00000000004080df in smtp_connect (state=0x80301b550)
at smtp_connect.c:1063
#16 0x0000000000405e41 in deliver_message (service=0x7fffffffdef0 "smtp",
request=0x803078510) at smtp.c:925
#17 0x0000000000405eb7 in smtp_service (client_stream=0x803021a90,
service=0x7fffffffdef0 "smtp", argv=0x7fffffffdd40) at smtp.c:957
#18 0x000000000041227a in single_server_wakeup (fd=14, attr=0x0)
at single_server.c:278
#19 0x0000000000412407 in single_server_accept_local (unused_event=1,
context=0x6 <Error reading address 0x6: Bad address>)
at single_server.c:324
#20 0x000000000044578f in event_loop (delay=-1) at events.c:1182
#21 0x0000000000413611 in single_server_main (argc=7, argv=0x7fffffffdd08,
service=0x405e60 <smtp_service>) at single_server.c:772
#22 0x0000000000406516 in main (argc=) at smtp.c:1202
(gdb)

Tried also posttls-finger from postfix 2.11. Program exited normally.

Reply | Threaded
Open this post in threaded view
|

Re: warning: private/smtp socket: malformed response

Viktor Dukhovni
On Mon, Oct 21, 2013 at 08:02:33PM +0300, Maksim Kulik wrote:

> Postfix version - postfix-2.10.1,1

Probably immaterial.  In Postfix 2.11-20131001 you can disable SSL
compression, which seems to be broken below.  Sure seems like a
buggy OpenSSL or zlib.

> Openssl version - openssl-1.0.1_8

When was it last updated?  When did the problem start?

> FreeBSD version - FreeBSD 9.2-STABLE #1 r256306:

When was it last updated?  When did the problem start?

> Log and backtrace:
> GNU gdb 6.1.1 [FreeBSD]
> Copyright 2004 Free Software Foundation, Inc.
> Attaching to program: /usr/local/libexec/postfix/smtp, process 71657
> Reading symbols from /usr/local/lib/libssl.so.8...done.
> Loaded symbols for /usr/local/lib/libssl.so.8
> Reading symbols from /usr/local/lib/libcrypto.so.8...done.
> Loaded symbols for /usr/local/lib/libcrypto.so.8

Is this the default SSL library for the OS? (/usr/local/lib rather
than /usr/lib or /lib)?

> Reading symbols from /usr/local/lib/mysql/libmysqlclient.so.18...done.
> Loaded symbols for /usr/local/lib/mysql/libmysqlclient.so.18

Is it building with mysql that adds /usr/local/lib to the linker
search path?

> Reading symbols from /lib/libz.so.6...done.
> Loaded symbols for /lib/libz.so.6

When was it last updated?  When did the problem start?

> (gdb) Continuing.
>
> Program received signal SIGSEGV, Segmentation fault.
> 0x000000080195a812 in deflateSetDictionary () from /lib/libz.so.6
> (gdb) #0 0x000000080195a812 in deflateSetDictionary () from /lib/libz.so.6
> #1 0x000000080195cc75 in deflateCopy () from /lib/libz.so.6
> #2 0x000000080195bb6e in deflate () from /lib/libz.so.6

This is the boundary between Zlib code and OpenSSL code.

> #3 0x0000000800ecd4ce in zlib_stateful_compress_block (
> ctx=<value optimized out>, out=0x803276008 "x\234", olen=17408,
> in=0x803225000 "\024", ilen=16) at c_zlib.c:207

> #4 0x0000000800ecc732 in COMP_compress_block (ctx=0x803017c40,
> out=<value optimized out>, olen=<value optimized out>,
> in=<value optimized out>, ilen=16) at comp_lib.c:46
> #5 0x0000000800b2a3ce in ssl3_do_compress (ssl=<value optimized out>)
> at s3_pkt.c:564
> #6 0x0000000800b2a594 in do_ssl3_write (s=0x803008000, type=22,
> buf=0x803225000 "\024", len=16, create_empty_fragment=0) at s3_pkt.c:790
> #7 0x0000000800b2ab75 in ssl3_write_bytes (s=0x803008000, type=22,
> buf_=0x803225000, len=<value optimized out>) at s3_pkt.c:609
> #8 0x0000000800b2ca5d in ssl3_do_write (s=0x803008000, type=22)
> at s3_both.c:132
> #9 0x0000000800b26689 in ssl3_connect (s=0x803008000) at s3_clnt.c:508

This is the boundary between OpenSSL code and Postfix code.

> #10 0x0000000000415838 in tls_bio (fd=16, timeout=300,
> TLScontext=0x80301bb50, hsfunc=0x4059b4 <SSL_connect@plt>, rfunc=0,
> wfunc=0, buf=0x0, num=0) at tls_bio_ops.c:198
> #11 0x0000000000414ccf in tls_client_start (props=0x7fffffffc930)
> at tls_client.c:952
> #12 0x00000000004092af in smtp_start_tls (state=0x80301b550)
> at smtp_proto.c:791
> #13 0x0000000000408f2d in smtp_helo (state=0x80301b550) at smtp_proto.c:678
> #14 0x0000000000407d1f in smtp_connect_inet (state=0x80301b550,
> nexthop=0x8030347b0 "ngs.ru", def_service=0x45d616 "smtp")
> at smtp_connect.c:908
> #15 0x00000000004080df in smtp_connect (state=0x80301b550)
> at smtp_connect.c:1063
> #16 0x0000000000405e41 in deliver_message (service=0x7fffffffdef0 "smtp",
> request=0x803078510) at smtp.c:925
> #17 0x0000000000405eb7 in smtp_service (client_stream=0x803021a90,
> service=0x7fffffffdef0 "smtp", argv=0x7fffffffdd40) at smtp.c:957
> #18 0x000000000041227a in single_server_wakeup (fd=14, attr=0x0)
> at single_server.c:278
> #19 0x0000000000412407 in single_server_accept_local (unused_event=1,
> context=0x6 <Error reading address 0x6: Bad address>)
> at single_server.c:324
> #20 0x000000000044578f in event_loop (delay=-1) at events.c:1182
> #21 0x0000000000413611 in single_server_main (argc=7, argv=0x7fffffffdd08,
> service=0x405e60 <smtp_service>) at single_server.c:772
> #22 0x0000000000406516 in main (argc=) at smtp.c:1202
> (gdb)

Sure looks like either OpenSSL or zlib is broken.  Perhaps related to:

    http://jabber.996255.n3.nabble.com/cores-on-freebsd-9-stable-td28747.html

> Tried also posttls-finger from postfix 2.11. Program exited normally.

    Which OpenSSL did this link with?  Report the output of:

        ldd bin/posttls-finger

--
        Viktor.
Reply | Threaded
Open this post in threaded view
|

Re: warning: private/smtp socket: malformed response

Maksim Kulik
  >> Openssl version - openssl-1.0.1_8

 >When was it last updated?  When did the problem start?

This is the most recent version from freebsd ports. This is new installation. I just installed Freebsd 9.2 stable, updated ports to the latest version and installed postfix. The problem started as soon as I start sending emails.

 >> FreeBSD version - FreeBSD 9.2-STABLE #1 r256306:

>When was it last updated?  When did the problem start?

See above.

> Is this the default SSL library for the OS? (/usr/local/lib rather
> than /usr/lib or /lib)?

It's installed as dependency.

> Is it building with mysql that adds /usr/local/lib to the linker
> search path?

Yes, it's building with mysql, but i can't say what's adding this path.

>> Reading symbols from /lib/libz.so.6...done.
>> Loaded symbols for /lib/libz.so.6

 > When was it last updated?  When did the problem start? 

This lib is from FreeBSD installation. I installed system on October, 11. This lib created with installation.

> Sure looks like either OpenSSL or zlib is broken.  Perhaps related to:


Do you know how can I build postfix with base system openssl?

 >> Tried also posttls-finger from postfix 2.11. Program exited normally.

  >  Which OpenSSL did this link with?  Report the output of:

    >     ldd bin/posttls-finger

ldd posttls-finger
posttls-finger:
libpcre.so.3 => /usr/local/lib/libpcre.so.3 (0x800856000)
libssl.so.8 => /usr/local/lib/libssl.so.8 (0x800ac1000)
libcrypto.so.8 => /usr/local/lib/libcrypto.so.8 (0x800d29000)
libc.so.7 => /lib/libc.so.7 (0x801120000)
libthr.so.3 => /lib/libthr.so.3 (0x80147a000)

 
Reply | Threaded
Open this post in threaded view
|

Re: warning: private/smtp socket: malformed response

Maksim Kulik
In reply to this post by Viktor Dukhovni
Thank you again!
The problem is fixed now. I just rebuilt openssl port without zlib support. It solved the problem.

Reply | Threaded
Open this post in threaded view
|

Re: warning: private/smtp socket: malformed response

Postfix User-2
In reply to this post by Viktor Dukhovni
On Mon, 21 Oct 2013 18:10:44 +0000
Viktor Dukhovni articulated:

> Is this the default SSL library for the OS? (/usr/local/lib rather
> than /usr/lib or /lib)?

The latest version, available in the ports system is: OpenSSL 1.0.1e 11
Feb 2013

The default version is: OpenSSL 0.9.8x 10 May 2012, or at least it was
on FreeBSD-8.3.

The versions put their libs, etcetera into different locations, which
can screw up a linker royally at times.

--
Jerry ✌
[hidden email]
_____________________________________________________________________
TO REPORT A PROBLEM see http://www.postfix.org/DEBUG_README.html#mail
TO (UN)SUBSCRIBE see http://www.postfix.org/lists.html

Reply | Threaded
Open this post in threaded view
|

Re: warning: private/smtp socket: malformed response

Viktor Dukhovni
In reply to this post by Maksim Kulik
On Mon, Oct 21, 2013 at 09:51:01PM +0300, Maksim Kulik wrote:

> >  Report the output of:
> >
> >     ldd bin/posttls-finger
>
> ldd posttls-finger
> posttls-finger:
> libssl.so.8 => /usr/local/lib/libssl.so.8 (0x800ac1000)
> libcrypto.so.8 => /usr/local/lib/libcrypto.so.8 (0x800d29000)

Interestingly, this is still /usr/local/lib/, but there was no
zlib, so perhaps this OpenSSL loads zlib dynamically.  Perhaps
there was an ABI change in zlib.   I tend to always build OpenSSL
with no zlib support, but were I to enable zlib it would not be
via dynamic loading (it would be dynamically linked).

--
        Viktor.