See http://jpmens.net/2011/04/26/how-to-configure-your-bind-resolvers-to-lie-using-response-policy-zones-rpz/    

See: http://lists.debian.org/debian-user/2011/11/msg01939.html Re: “initializing DST: openssl failure” Nope. Not a problem with the includes under named.conf. It’s looking for this file: /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libgost.so If you’re running a chrooted bind9, it can’t find this library, obviously. The kluge for this at the moment is to recreate this directory tree under your chroot and copy libgost.so there. After […]