11:01 p.m.
Hi Team,
I'm compiling OpenLDAP 2.5.13 on CentOS 7 & OpenSSL 1.1.1g is already installed
& below is the command.
./configure --prefix=/opt/deployment/openldap_v13
--sysconfdir=/opt/deployment/openldap_v13/etc
--localstatedir=/opt/deployment/openldap_v13/var
--libexecdir=/opt/deployment/openldap_v13/libexec --enable-overlays=mod --enable-modules
--enable-accesslog --enable-auditlog --enable-collect --enable-memberof --enable-syncprov
--with-tls=openssl --enable-dynamic --enable-crypt --enable-slapd --enable-rlookups
--disable-perl --enable-ppolicy --enable-backends=mod --disable-ndb --disable-sql
--disable-shell --disable-bdb --disable-hdb
I'm getting the below error of OpenSSL.
checking for openssl/ssl.h... yes
checking for SSL_export_keying_material_early in -lssl... no
configure: error: Could not locate TLS/SSL package
Could you please suggest how to fix this issue.
Thanks,
Vijay
7:39 a.m.
On Tue, Aug 9, 2022 at 10:32 AM <vmaidarkar(a)gmail.com> wrote:
Hi Team,
I'm compiling OpenLDAP 2.5.13 on CentOS 7 & OpenSSL 1.1.1g is already installed
& below is the command.
./configure --prefix=/opt/deployment/openldap_v13
--sysconfdir=/opt/deployment/openldap_v13/etc
--localstatedir=/opt/deployment/openldap_v13/var
--libexecdir=/opt/deployment/openldap_v13/libexec --enable-overlays=mod --enable-modules
--enable-accesslog --enable-auditlog --enable-collect --enable-memberof --enable-syncprov
--with-tls=openssl --enable-dynamic --enable-crypt --enable-slapd --enable-rlookups
--disable-perl --enable-ppolicy --enable-backends=mod --disable-ndb --disable-sql
--disable-shell --disable-bdb --disable-hdb
I'm getting the below error of OpenSSL.
checking for openssl/ssl.h... yes
checking for SSL_export_keying_material_early in -lssl... no
configure: error: Could not locate TLS/SSL package
Could you please suggest how to fix this issue.
prefix=/opt/deployment/openldap_v13 is not enough to pick up OpenSSL 1.1.
OpenSSL provides package configuration information. Try setting
PKG_CONFIG_PATH before invoking configure.Something like:
# prefix is the location you are installing updated packages
# In your case it looks like /opt/deployment/openldap_v13
export PKG_CONFIG_PATH=${prefix}/lib/pkgconfig
./configure --prefix=/opt/deployment/openldap_v13 ...
If you don't set PKG_CONFIG_PATH, then you probably need to set the
path to headers and libraries in CFLAGS and LDFLAGS.
Jeff
7:42 a.m.
I guess you need to install the development package of OpenSSL on CentOS
7, the "regular" one won't do it. Double check that.
Besides that, I suggest quitting using CentOS 7: look for Rocky Linux
and AlmaLinux.
On 09/08/2022 03:01, vmaidarkar(a)gmail.com wrote:
> Hi Team,
>
> I'm compiling OpenLDAP 2.5.13 on CentOS 7 & OpenSSL 1.1.1g is already
installed & below is the command.
> ./configure --prefix=/opt/deployment/openldap_v13
--sysconfdir=/opt/deployment/openldap_v13/etc
--localstatedir=/opt/deployment/openldap_v13/var
--libexecdir=/opt/deployment/openldap_v13/libexec --enable-overlays=mod --enable-modules
--enable-accesslog --enable-auditlog --enable-collect --enable-memberof --enable-syncprov
--with-tls=openssl --enable-dynamic --enable-crypt --enable-slapd --enable-rlookups
--disable-perl --enable-ppolicy --enable-backends=mod --disable-ndb --disable-sql
--disable-shell --disable-bdb --disable-hdb
>
> I'm getting the below error of OpenSSL.
>
> checking for openssl/ssl.h... yes
> checking for SSL_export_keying_material_early in -lssl... no
> configure: error: Could not locate TLS/SSL package
>
> Could you please suggest how to fix this issue.
>
> Thanks,
> Vijay
9:25 a.m.
On Tue, Aug 9, 2022 at 10:52 AM Alceu Rodrigues de Freitas Junior
<glasswalk3r(a)yahoo.com.br> wrote:
I guess you need to install the development package of OpenSSL on CentOS
7, the "regular" one won't do it. Double check that.
Besides that, I suggest quitting using CentOS 7: look for Rocky Linux
and AlmaLinux.
+1. The antique software provided in Red Hat and CentOS is maddening
nowadays. It causes more trouble than its worth. And the workarounds,
like enabling SCL, are just as bad. Systemd completely ignores the SCL
environment which causes all kinds of obscure problems, like version
problems for shared objects.
I now use Fedora Server. You get all the Red Hat processes plus
up-to-date software. The downside is you need to run
dnf-system-upgrade [1] twice a year due to Fedora's cadence. I have
been using dnf-system-upgrade for about a decade and have never
encountered trouble.
[1] https://docs.fedoraproject.org/en-US/quick-docs/dnf-system-upgrade/
Jeff
12:11 a.m.
Hi Alceu,
I couldn't find development package of OpenSSL, could u share me the link to download
the same.
7:18 a.m.
--On Tuesday, August 16, 2022 8:11 AM +0000 vmaidarkar(a)gmail.com wrote:
Hi Alceu,
I couldn't find development package of OpenSSL, could u share me the link
to download the same.
OpenLDAP 2.5+ require OpenSSL 1.1 series or later. CentOS7, your chosen
environment, does not include ship the OpenSSL 1.1 series. You have to
install the EPEL repo on CentOS7 if you need to build OpenLDAP on that
platform, and you'll need to install the development package from there as
well.
Better would be to deploy AlmaLinux 8 or AlmaLinux 9 if you want to stay on
an RedHat like environment, as they ship current OpenSSL releases.
Regards,
Quanah
7:29 a.m.
--On Tuesday, August 16, 2022 8:18 AM -0700 Quanah Gibson-Mount
<quanah(a)fast-mail.org> wrote:
--On Tuesday, August 16, 2022 8:11 AM +0000 vmaidarkar(a)gmail.com wrote:
> Hi Alceu,
>
> I couldn't find development package of OpenSSL, could u share me the link
> to download the same.
OpenLDAP 2.5+ require OpenSSL 1.1 series or later. CentOS7, your chosen
environment, does not include ship the OpenSSL 1.1 series. You have to
install the EPEL repo on CentOS7 if you need to build OpenLDAP on that
platform, and you'll need to install the development package from there
as well.
Better would be to deploy AlmaLinux 8 or AlmaLinux 9 if you want to stay
on an RedHat like environment, as they ship current OpenSSL releases.
Note: I saw you said that "OpenSSL 1.1.1g" is installed -
Where is it installed?
How was it installed?
If you built and installed OpenSSL 1.1 yourself, you need to tell OpenLDAP
where to find it before it can compile.
Regards,
Quanah
219
days inactive
226
days old
openldap-technical@openldap.org
6 comments
4 participants
participants (4)
-
Alceu Rodrigues de Freitas Junior -
Jeffrey Walton -
Quanah Gibson-Mount -
vmaidarkar＠gmail.com