Fedora 7 OpenSSL 0.9.8e Heimdal 0.8.1 Cyrus-SASL 2.1.22 OpenLDAP 2.3.36
My (tcsh) environment has:
setenv CC gcc setenv CFLAGS "-O -g" setenv CPPFLAGS "-I/usr/local/include" setenv LDFLAGS "-L/usr/local/lib" setenv LD_LIBRARY_PATH "/usr/local/lib"
When I start to build OpenLDAP, I get stopped at:
ernie 70> configure --with-tls ... checking openssl/ssl.h usability... yes checking openssl/ssl.h presence... yes checking for openssl/ssl.h... yes checking for SSL_library_init in -lssl... no checking for ssl3_accept in -lssl... no checking OpenSSL library version (CRL checking capability)... yes configure: error: Could not locate TLS/SSL package
...even though:
ernie 73> ls -l /usr/local/lib/libcrypto.a -rw-r--r-- 1 root root 2213286 2007-06-20 14:05 /usr/local/lib/libcrypto.a ernie 76> ls -l /usr/local/lib/libssl.a -rw-r--r-- 1 root root 364650 2007-06-20 14:05 /usr/local/lib/libssl.a ernie 78> ls -l /usr/local/include | grep openssl drwxr-xr-x 2 root root 4096 2007-06-20 14:05 openssl ernie 82> ls -l /usr/local/bin/openssl -rwxr-xr-x 1 root root 1749278 2007-06-20 14:05 /usr/local/bin/openssl ernie 80> ls -l /usr/local/openssl total 48 drwxr-xr-x 2 root root 4096 2007-06-20 14:05 certs drwxr-xr-x 6 root root 4096 2007-06-20 14:05 man drwxr-xr-x 2 root root 4096 2007-06-20 14:05 misc -rw-r--r-- 1 root root 9374 2007-06-20 14:05 openssl.cnf drwxr-xr-x 2 root root 4096 2007-06-20 14:05 private
I built Heimdal and Cyrus-SASL without issue using the same environment and they appeared to find this OpenSSL install. What is OpenLDAP configure looking for that it isn't finding?
Jon Roberts www.mentata.com
Jon Roberts escreveu:
Fedora 7 OpenSSL 0.9.8e Heimdal 0.8.1 Cyrus-SASL 2.1.22 OpenLDAP 2.3.36
My (tcsh) environment has:
setenv CC gcc setenv CFLAGS "-O -g" setenv CPPFLAGS "-I/usr/local/include" setenv LDFLAGS "-L/usr/local/lib" setenv LD_LIBRARY_PATH "/usr/local/lib"
When I start to build OpenLDAP, I get stopped at:
ernie 70> configure --with-tls ... checking openssl/ssl.h usability... yes checking openssl/ssl.h presence... yes checking for openssl/ssl.h... yes checking for SSL_library_init in -lssl... no checking for ssl3_accept in -lssl... no checking OpenSSL library version (CRL checking capability)... yes configure: error: Could not locate TLS/SSL package
...even though:
ernie 73> ls -l /usr/local/lib/libcrypto.a -rw-r--r-- 1 root root 2213286 2007-06-20 14:05 /usr/local/lib/libcrypto.a ernie 76> ls -l /usr/local/lib/libssl.a -rw-r--r-- 1 root root 364650 2007-06-20 14:05 /usr/local/lib/libssl.a ernie 78> ls -l /usr/local/include | grep openssl drwxr-xr-x 2 root root 4096 2007-06-20 14:05 openssl ernie 82> ls -l /usr/local/bin/openssl -rwxr-xr-x 1 root root 1749278 2007-06-20 14:05 /usr/local/bin/openssl ernie 80> ls -l /usr/local/openssl total 48 drwxr-xr-x 2 root root 4096 2007-06-20 14:05 certs drwxr-xr-x 6 root root 4096 2007-06-20 14:05 man drwxr-xr-x 2 root root 4096 2007-06-20 14:05 misc -rw-r--r-- 1 root root 9374 2007-06-20 14:05 openssl.cnf drwxr-xr-x 2 root root 4096 2007-06-20 14:05 private
I built Heimdal and Cyrus-SASL without issue using the same environment and they appeared to find this OpenSSL install. What is OpenLDAP configure looking for that it isn't finding?
Did you install openssl-dev package ?
Jeronimo Zucco wrote:
Jon Roberts escreveu:
Fedora 7 OpenSSL 0.9.8e Heimdal 0.8.1 Cyrus-SASL 2.1.22 OpenLDAP 2.3.36 I built Heimdal and Cyrus-SASL without issue using the same environment and they appeared to find this OpenSSL install. What is OpenLDAP configure looking for that it isn't finding?
Did you install openssl-dev package ?
No, because I installed OpenSSL from tarball into /usr/local. As I said, Heimdal and Cyrus-SASL (also from tarballs) compile fine against my OpenSSL libraries, but OpenLDAP is not finding them.
Thanks for the response, and let me know if I'm still missing something.
Jon Roberts www.mentata.com
Jon Roberts escreveu:
Jeronimo Zucco wrote:
Jon Roberts escreveu:
Fedora 7 OpenSSL 0.9.8e Heimdal 0.8.1 Cyrus-SASL 2.1.22 OpenLDAP 2.3.36 I built Heimdal and Cyrus-SASL without issue using the same environment and they appeared to find this OpenSSL install. What is OpenLDAP configure looking for that it isn't finding?
Did you install openssl-dev package ?
No, because I installed OpenSSL from tarball into /usr/local. As I said, Heimdal and Cyrus-SASL (also from tarballs) compile fine against my OpenSSL libraries, but OpenLDAP is not finding them.
Try this:
export CXXFLAGS="-I/usr/local/openssl/include" export LDFLAGS="-L/usr/local/openssl/lib"
Change it for your corrrect patches. Then run ./configure, make, make test and make install
Jeronimo Zucco wrote:
Jon Roberts escreveu:
Jeronimo Zucco wrote:
Jon Roberts escreveu:
Fedora 7 OpenSSL 0.9.8e Heimdal 0.8.1 Cyrus-SASL 2.1.22 OpenLDAP 2.3.36 I built Heimdal and Cyrus-SASL without issue using the same environment and they appeared to find this OpenSSL install. What is OpenLDAP configure looking for that it isn't finding?
Did you install openssl-dev package ?
No, because I installed OpenSSL from tarball into /usr/local. As I said, Heimdal and Cyrus-SASL (also from tarballs) compile fine against my OpenSSL libraries, but OpenLDAP is not finding them.
Try this:
export CXXFLAGS="-I/usr/local/openssl/include" export LDFLAGS="-L/usr/local/openssl/lib"
Change it for your corrrect patches. Then run ./configure, make, make test and make install
Hmmm. Those paths don't even exist. I built OpenSSL with:
./config --prefix=/usr/local --openssldir=/usr/local/openssl
which puts the libs in /usr/local/lib, the includes in /usr/local/include/openssl (which I believe configure can find), and paths man, misc, certs, private in /usr/local/openssl along with openssl.cnf.
Again, Heimdal and Cyrus-SASL both compiled with the same libraries and environment and they depend on OpenSSL, too. OpenLDAP's configure even reports finding ssl.h (see output in original post), but I'm not config literate enough to determine what exactly it's looking for when it finally balks.
As for make, ...etc. I'll certainly run those once configure completes with TLS support :)
Thanks for trying (and for your patience if I'm just missing something).
Jon Roberts www.mentata.com
There should be a config.log file in the directory in which you ran configure. Load that into an editor and scan for the checking for... message. That might give you a clue to what is missing.
----- Original Message ----- From: "Jon Roberts" jon@jonanddeb.net To: "Jeronimo Zucco" jczucco@ucs.br Cc: openldap-software@openldap.org Sent: Thursday, June 21, 2007 2:43 PM Subject: Re: configure can't find tls
Jeronimo Zucco wrote:
Jon Roberts escreveu:
Jeronimo Zucco wrote:
Jon Roberts escreveu:
Fedora 7 OpenSSL 0.9.8e Heimdal 0.8.1 Cyrus-SASL 2.1.22 OpenLDAP 2.3.36 I built Heimdal and Cyrus-SASL without issue using the same environment and they appeared to find this OpenSSL install. What is OpenLDAP configure looking for that it isn't finding?
Did you install openssl-dev package ?
No, because I installed OpenSSL from tarball into /usr/local. As I said, Heimdal and Cyrus-SASL (also from tarballs) compile fine against my OpenSSL libraries, but OpenLDAP is not finding them.
Try this:
export CXXFLAGS="-I/usr/local/openssl/include" export LDFLAGS="-L/usr/local/openssl/lib"
Change it for your corrrect patches. Then run ./configure, make, make test and make install
Hmmm. Those paths don't even exist. I built OpenSSL with:
./config --prefix=/usr/local --openssldir=/usr/local/openssl
which puts the libs in /usr/local/lib, the includes in /usr/local/include/openssl (which I believe configure can find), and paths man, misc, certs, private in /usr/local/openssl along with openssl.cnf.
Again, Heimdal and Cyrus-SASL both compiled with the same libraries and environment and they depend on OpenSSL, too. OpenLDAP's configure even reports finding ssl.h (see output in original post), but I'm not config literate enough to determine what exactly it's looking for when it finally balks.
As for make, ...etc. I'll certainly run those once configure completes with TLS support :)
Thanks for trying (and for your patience if I'm just missing something).
Jon Roberts www.mentata.com
Wayne Bruce wrote:
There should be a config.log file in the directory in which you ran configure. Load that into an editor and scan for the checking for... message. That might give you a clue to what is missing.
I was checking this file before, but have to admit I got a little lost within it. Now I see this is probably the relevant point of failure:
... configure:19589: checking for SSL_library_init in -lssl configure:19619: gcc -o conftest -O -g -I/usr/local/include -L/usr/local/lib conftest.c -lssl -lcrypto -lresolv >&5 /usr/local/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_bind_func': dso_dlfcn.c:(.text+0x2e5): undefined reference to `dlsym' dso_dlfcn.c:(.text+0x3c6): undefined reference to `dlerror' /usr/local/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_bind_var': dso_dlfcn.c:(.text+0x451): undefined reference to `dlsym' dso_dlfcn.c:(.text+0x52d): undefined reference to `dlerror' /usr/local/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_unload': dso_dlfcn.c:(.text+0x593): undefined reference to `dlclose' /usr/local/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_load': dso_dlfcn.c:(.text+0x667): undefined reference to `dlopen' dso_dlfcn.c:(.text+0x6d8): undefined reference to `dlclose' dso_dlfcn.c:(.text+0x71d): undefined reference to `dlerror' collect2: ld returned 1 exit status ...
Does this mean the OpenSSL 0.9.8e library itself is no good? I can rebuild another version or resort to Fedora RPMs, but if there is something else I can do I'd prefer to use the latest version.
Thanks for all the help.
Jon Roberts www.mentata.com
Jon Roberts escreveu:
I built OpenSSL with:
./config --prefix=/usr/local --openssldir=/usr/local/openssl
which puts the libs in /usr/local/lib, the includes in /usr/local/include/openssl (which I believe configure can find), and paths man, misc, certs, private in /usr/local/openssl along with openssl.cnf.
Again, Heimdal and Cyrus-SASL both compiled with the same libraries and environment and they depend on OpenSSL, too. OpenLDAP's configure even reports finding ssl.h (see output in original post), but I'm not config literate enough to determine what exactly it's looking for when it finally balks.
You can either rebuild OpenSSL with the no-dso option or include -ldl in the libraries for OpenLDAP. I don't remember what the brst way to do this is. Perhaps someone else can answer that.
----- Original Message ----- From: "Jon Roberts" jon@jonanddeb.net To: "Wayne Bruce" brucee@acm.org Cc: openldap-software@openldap.org Sent: Thursday, June 21, 2007 4:09 PM Subject: Re: configure can't find tls
Wayne Bruce wrote:
There should be a config.log file in the directory in which you ran configure. Load that into an editor and scan for the checking for... message. That might give you a clue to what is missing.
I was checking this file before, but have to admit I got a little lost within it. Now I see this is probably the relevant point of failure:
... configure:19589: checking for SSL_library_init in -lssl configure:19619: gcc -o conftest -O -g -I/usr/local/include -L/usr/local/lib conftest.c -lssl -lcrypto -lresolv >&5 /usr/local/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_bind_func': dso_dlfcn.c:(.text+0x2e5): undefined reference to `dlsym' dso_dlfcn.c:(.text+0x3c6): undefined reference to `dlerror' /usr/local/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_bind_var': dso_dlfcn.c:(.text+0x451): undefined reference to `dlsym' dso_dlfcn.c:(.text+0x52d): undefined reference to `dlerror' /usr/local/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_unload': dso_dlfcn.c:(.text+0x593): undefined reference to `dlclose' /usr/local/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_load': dso_dlfcn.c:(.text+0x667): undefined reference to `dlopen' dso_dlfcn.c:(.text+0x6d8): undefined reference to `dlclose' dso_dlfcn.c:(.text+0x71d): undefined reference to `dlerror' collect2: ld returned 1 exit status ...
Does this mean the OpenSSL 0.9.8e library itself is no good? I can rebuild another version or resort to Fedora RPMs, but if there is something else I can do I'd prefer to use the latest version.
Thanks for all the help.
Jon Roberts www.mentata.com
Jon Roberts escreveu:
I built OpenSSL with:
./config --prefix=/usr/local --openssldir=/usr/local/openssl
which puts the libs in /usr/local/lib, the includes in /usr/local/include/openssl (which I believe configure can find), and paths man, misc, certs, private in /usr/local/openssl along with openssl.cnf.
Again, Heimdal and Cyrus-SASL both compiled with the same libraries and environment and they depend on OpenSSL, too. OpenLDAP's configure even reports finding ssl.h (see output in original post), but I'm not config literate enough to determine what exactly it's looking for when it finally balks.
Wayne Bruce wrote:
You can either rebuild OpenSSL with the no-dso option or include -ldl in the libraries for OpenLDAP. I don't remember what the brst way to do this is. Perhaps someone else can answer that.
The no-dso option with OpenSSL appears to work; I've added it to my procedures for now. Thanks so much for that solution!
Jon Roberts www.mentata.com
Wayne Bruce wrote:
There should be a config.log file in the directory in which you ran configure. Load that into an editor and scan for the checking for... message. That might give you a clue to what is missing.
I was checking this file before, but have to admit I got a little lost within it. Now I see this is probably the relevant point of failure:
... configure:19589: checking for SSL_library_init in -lssl configure:19619: gcc -o conftest -O -g -I/usr/local/include -L/usr/local/lib conftest.c -lssl -lcrypto -lresolv >&5 /usr/local/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_bind_func': dso_dlfcn.c:(.text+0x2e5): undefined reference to `dlsym' dso_dlfcn.c:(.text+0x3c6): undefined reference to `dlerror' /usr/local/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_bind_var': dso_dlfcn.c:(.text+0x451): undefined reference to `dlsym' dso_dlfcn.c:(.text+0x52d): undefined reference to `dlerror' /usr/local/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_unload': dso_dlfcn.c:(.text+0x593): undefined reference to `dlclose' /usr/local/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_load': dso_dlfcn.c:(.text+0x667): undefined reference to `dlopen' dso_dlfcn.c:(.text+0x6d8): undefined reference to `dlclose' dso_dlfcn.c:(.text+0x71d): undefined reference to `dlerror' collect2: ld returned 1 exit status ...
Does this mean the OpenSSL 0.9.8e library itself is no good? I can rebuild another version or resort to Fedora RPMs, but if there is something else I can do I'd prefer to use the latest version.
Jeronimo Zucco writes:
export LDFLAGS="-L/usr/local/openssl/lib"
Note that if you've built dynamic OpenSSL libraries as well, you may need to put -R<path> or -Wl,-rpath,<path> in LDFLAGS in addition to -L<path>. -L to look up libraries at compile time, -R or rpath at run-time.
openldap-software@openldap.org
-
Aaron Richton -
Hallvard B Furuseth -
Jeronimo Zucco -
Jon Roberts -
Wayne Bruce