[exim] Re: undefined reference to `SSL_get0_chain_certs' err…

Top Page
Delete this message
Reply to this message
Author: Ian B
Date:  
To: exim-users, Viktor Dukhovni
Subject: [exim] Re: undefined reference to `SSL_get0_chain_certs' error on compile
Thanks, I couldn't seem to get that route working (didn't seem to create
the libssl.so.1.1 files, so would get error while loading shared libraries:
libssl.so.1.1: cannot open shared object file: No such file or directory )

I think I'm misunderstanding some of the bits you've posted though around
shlib_variant, so I will have a read to get a better understanding.

In the meantime I think I've just got it working ok with exporting
LD_LIBRARY_PATH and CC=gcc -std=gnu99 -lrt -I/usr/local/ssl/
-L/usr/local/ssl/lib -Wl,-rpath,/usr/local/ssl/lib (not even sure those are
correct just atm)

(and removed entry from /etc/ld.so.conf ) It's maybe not ideal, but may be
ok until I can understand whats happening a little more.

Thanks for the help and the pointer

On Fri, Dec 15, 2023 at 9:33 PM Viktor Dukhovni via Exim-users <
exim-users@???> wrote:

> On Fri, Dec 15, 2023 at 12:26:53PM +0000, Ian B via Exim-users wrote:
> > Just wanted to say thanks, I got this all working after the full install.
> >
> > (I've compiled a later release of openssl into /usr/local/ssl and created
> > /etc/ld.so.conf.d/openssl.conf with the lib in there, followed by
> ldconfig
> > if anyone has similar issues).
>
> I wouldn't recommend changing the system-wide ld.so.conf to list the
> installation directory of a custom DYI OpenSSL build.  Instead, use
> appropriate "-Wl,-R,/some/where" LDFLAGS.  If your OpenSSL is 1.1.0 or
> later, you can also use a non-empty "shlib_variant" in the build
> template, to ensure that the SONAME of the resulting shared library, and
> its symbol versions don't conflict with the system-provided OpenSSL.
>
> For example, with OpenSSL 3.2, I use:
>
>     +++ Configurations/99-myconf.conf
>     @@ -0,0 +1,10 @@
>     +my %targets = (
>     +    "linux-x86_64-rpk" => {
>     +        inherit_from     => [ "linux-x86_64" ],
>     +        shlib_variant    => "rpk",
>     +    },
>     +    "BSD-x86_64-rpk" => {
>     +        inherit_from     => [ "BSD-x86_64" ],
>     +        shlib_variant    => "rpk",
>     +    },
>     +);
>
> and then (on FreeBSD, in a sibling directory of the OpenSSL source tree)
> run "Configure" as follows:
>
>     ../openssl/Configure --prefix=/usr/local/siteexec
> -Wl,-R,/usr/local/siteexec/lib BSD-x86_64-rpk
>
> while on a Fedora system:
>
>     ../openssl/Configure --prefix=/opt/openssl/3.2
> -Wl,-rpath,/opt/openssl/3.2/lib64 linux-x86_64-rpk
>
> then "make" and finally as root "make install_sw".
>
>
>
>


--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/