[exim] Re: undefined reference to `SSL_get0_chain_certs' err…

Top Page
Delete this message
Reply to this message
Author: Viktor Dukhovni via Exim-users
Date:  
To: exim-users
Subject: [exim] Re: undefined reference to `SSL_get0_chain_certs' error on compile
On Fri, Dec 15, 2023 at 12:26:53PM +0000, Ian B via Exim-users wrote:
> Just wanted to say thanks, I got this all working after the full install.
>
> (I've compiled a later release of openssl into /usr/local/ssl and created
> /etc/ld.so.conf.d/openssl.conf with the lib in there, followed by ldconfig
> if anyone has similar issues).


I wouldn't recommend changing the system-wide ld.so.conf to list the
installation directory of a custom DYI OpenSSL build. Instead, use
appropriate "-Wl,-R,/some/where" LDFLAGS. If your OpenSSL is 1.1.0 or
later, you can also use a non-empty "shlib_variant" in the build
template, to ensure that the SONAME of the resulting shared library, and
its symbol versions don't conflict with the system-provided OpenSSL.

For example, with OpenSSL 3.2, I use:

    +++ Configurations/99-myconf.conf
    @@ -0,0 +1,10 @@
    +my %targets = (
    +    "linux-x86_64-rpk" => {
    +        inherit_from     => [ "linux-x86_64" ],
    +        shlib_variant    => "rpk",
    +    },
    +    "BSD-x86_64-rpk" => {
    +        inherit_from     => [ "BSD-x86_64" ],
    +        shlib_variant    => "rpk",
    +    },
    +);


and then (on FreeBSD, in a sibling directory of the OpenSSL source tree)
run "Configure" as follows:

    ../openssl/Configure --prefix=/usr/local/siteexec -Wl,-R,/usr/local/siteexec/lib BSD-x86_64-rpk


while on a Fedora system:

    ../openssl/Configure --prefix=/opt/openssl/3.2 -Wl,-rpath,/opt/openssl/3.2/lib64 linux-x86_64-rpk


then "make" and finally as root "make install_sw".

-- 
    Viktor.


--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/