OpenSSL - runs but...

[Steve Warwick]

Hi All, 

I have an odd config problem. I have installed openssl (tried several
different versions), form ports and from source and yet several apps that
need ssl support and use openssl are not compiling due to "libssl not found"
errors (PHP for example).

I need IMAP so from ports, build openssl-0.9.7b_1
The only errors I can see during compile is "linker input file unused since
linking not done" and "pod2man not found" and the compile uses another
program for man pages. However the build finishes ok.

===
This port has installed the following files which may act as network
servers and may therefore pose a remote security risk to the system.
/usr/local/bin/openssl
/usr/local/lib/libcrypto.so.3
===

I can use openssl from the command line ok. [eg. openssl genrsa -des3 -out
/root/server.key 1024 -rand ]

-----------------------------

Next I build cclient, needed by IMAP, seems to find SSL support ok.

===
Building OS-dependent module
If you get No such file error messages for files x509.h, ssl.h,
pem.h, buffer.h, bio.h, and crypto.h, that means that OpenSSL
is not installed on your system. Either install OpenSSL first
or build with command: make bsf SSLTYPE=none
===

Build is ok.

-----------------------------

Next I build IMAP... Fails [see later] - it's looking at libssl.so.2 but
openssl didn't say it installed libssl.so.2... I have Apache+ModSSL - could
it be that install that added libssl.so.2?

Puzzled...

Thoughts suggestions links?



TIA


Steve





===>  Extracting for imap-uw-2002_1,1
>> Checksum OK for imap-2002.tar.Z.
Your imap-uw port matches the version of your cclient port. Fine.
===>  Patching for imap-uw-2002_1,1
===>  Applying FreeBSD patches for imap-uw-2002_1,1
===>   imap-uw-2002_1,1 depends on shared library: c-client4.8 - found
===>  Configuring for imap-uw-2002_1,1
===>  Building for imap-uw-2002_1,1
SSL check passed. We want SSL support, and cclient has it. Good.
make sslunix.nopwd
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ Building in full compliance with IESG security requirements:
++ TLS/SSL encryption is supported
++ Unencrypted plaintext passwords are prohibited
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Applying an process to sources...
tools/an "ln -s" src/c-client c-client
tools/an "ln -s" src/ansilib c-client
tools/an "ln -s" src/charset c-client
tools/an "ln -s" src/osdep/unix c-client
tools/an "ln -s" src/mtest mtest
tools/an "ln -s" src/ipopd ipopd
tools/an "ln -s" src/imapd imapd
tools/an "ln -s" src/mailutil mailutil
tools/an "ln -s" src/mlock mlock
tools/an "ln -s" src/dmail dmail
tools/an "ln -s" src/tmail tmail
ln -s tools/an .
make build EXTRACFLAGS='-I/usr/local/include/c-client'
EXTRALDFLAGS='-L/usr/local/lib -lc-client4' EXTRADRIVERS='mbox'
EXTRAAUTHENTICATORS='' PASSWDTYPE=pam SSLTYPE=unix.nopwd EXTRASPECIALS=''
BUILDTYPE=bsf
Building bundled tools...
cd mtest;make
cc -O -pipe -march=pentiumpro -DNFSKLUDGE -I/usr/local/include/c-client -c
mtest.c
cc -O -pipe -march=pentiumpro -DNFSKLUDGE -I/usr/local/include/c-client -o
mtest mtest.o  -L/usr/local/lib -lc-client4
/usr/local/lib/libc-client4.so: warning: tmpnam() possibly used unsafely;
consider using mkstemp()
/usr/lib/libssl.so.2: undefined reference to `OPENSSL_cleanse'
*** Error code 1

Stop in /usr/ports/mail/imap-uw/work/imap-2002/mtest.
*** Error code 1

Stop in /usr/ports/mail/imap-uw/work/imap-2002.
*** Error code 1

Stop in /usr/ports/mail/imap-uw/work/imap-2002.
*** Error code 1

Stop in /usr/ports/mail/imap-uw.
la#