Compiling with OpenSSL Support

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
9 messages Options
Reply | Threaded
Open this post in threaded view
|

Compiling with OpenSSL Support

Tyn Li
Hello,

I am trying to compile squid on Debian 9 and include OpenSSL support.  Here are the configure options I am using:

./configure --with-openssl --enable-disk-io --enable-storeio --enable-icmp --enable-delay-pools --enable-linux-netfilter --enable-log-daemon-helpers --enable-external-acl-helpers --enable-url-rewrite-helpers --enable-storeid-rewrite-helpers

The error that I'm getting during make is this:

../../src/ssl/gadgets.h:83:45: error: ‘CRYPTO_LOCK_X509’ was not declared in this scope
 typedef LockingPointer<X509, X509_free_cpp, CRYPTO_LOCK_X509> X509_Pointer;

I cannot find the CRYPTO_LOCK_X509 macro defined anywhere in the OpenSSL headers I've installed with libssl-dev (which is probably why I'm getting the error).

How do I get around this particular compilation error?  What additional software/steps do I need?

Thanks!


_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|

Re: Compiling with OpenSSL Support

Sérgio Abrantes Junior
Hello,

I installed this package to resolve this: libssl1.0-dev

2017-10-13 12:18 GMT-03:00 Tyn Li <[hidden email]>:
Hello,

I am trying to compile squid on Debian 9 and include OpenSSL support.  Here are the configure options I am using:

./configure --with-openssl --enable-disk-io --enable-storeio --enable-icmp --enable-delay-pools --enable-linux-netfilter --enable-log-daemon-helpers --enable-external-acl-helpers --enable-url-rewrite-helpers --enable-storeid-rewrite-helpers

The error that I'm getting during make is this:

../../src/ssl/gadgets.h:83:45: error: ‘CRYPTO_LOCK_X509’ was not declared in this scope
 typedef LockingPointer<X509, X509_free_cpp, CRYPTO_LOCK_X509> X509_Pointer;

I cannot find the CRYPTO_LOCK_X509 macro defined anywhere in the OpenSSL headers I've installed with libssl-dev (which is probably why I'm getting the error).

How do I get around this particular compilation error?  What additional software/steps do I need?

Thanks!


_______________________________________________
squid-users mailing list
[hidden email]-cache.org
http://lists.squid-cache.org/listinfo/squid-users



_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|

Re: Compiling with OpenSSL Support

Marcus Kool
Debian 9 has openssl 1.1.x while most platforms have older versions.

I noticed myself when I ported ufdbGuard to Debian 9 that openssl 1.1.x has many changes in the API.

Marcus

On 13/10/17 13:19, Sérgio Abrantes Junior wrote:

> Hello,
>
> I installed this package to resolve this: libssl1.0-dev
>
> 2017-10-13 12:18 GMT-03:00 Tyn Li <[hidden email] <mailto:[hidden email]>>:
>
>     Hello,
>
>     I am trying to compile squid on Debian 9 and include OpenSSL support.  Here are the configure options I am using:
>
>     ./configure --with-openssl --enable-disk-io --enable-storeio --enable-icmp --enable-delay-pools --enable-linux-netfilter --enable-log-daemon-helpers --enable-external-acl-helpers
>     --enable-url-rewrite-helpers --enable-storeid-rewrite-helpers
>
>     The error that I'm getting during make is this:
>
>     ../../src/ssl/gadgets.h:83:45: error: ‘CRYPTO_LOCK_X509’ was not declared in this scope
>       typedef LockingPointer<X509, X509_free_cpp, CRYPTO_LOCK_X509> X509_Pointer;
>
>     I cannot find the CRYPTO_LOCK_X509 macro defined anywhere in the OpenSSL headers I've installed with libssl-dev (which is probably why I'm getting the error).
>
>     How do I get around this particular compilation error?  What additional software/steps do I need?
>
>     Thanks!
>
>
>     _______________________________________________
>     squid-users mailing list
>     [hidden email]
>     http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>
> _______________________________________________
> squid-users mailing list
> [hidden email]
> http://lists.squid-cache.org/listinfo/squid-users
>
_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|

Re: Compiling with OpenSSL Support

Tyn Li
In reply to this post by Sérgio Abrantes Junior
Hi Sérgio,

This fixed it for me, too.

Thanks!


On Friday, October 13, 2017, 11:20:15 AM CDT, Sérgio Abrantes Junior <[hidden email]> wrote:


Hello,

I installed this package to resolve this: libssl1.0-dev

2017-10-13 12:18 GMT-03:00 Tyn Li <[hidden email]>:
Hello,

I am trying to compile squid on Debian 9 and include OpenSSL support.  Here are the configure options I am using:

./configure --with-openssl --enable-disk-io --enable-storeio --enable-icmp --enable-delay-pools --enable-linux-netfilter --enable-log-daemon-helpers --enable-external-acl-helpers --enable-url-rewrite-helpers --enable-storeid-rewrite- helpers

The error that I'm getting during make is this:

../../src/ssl/gadgets.h:83:45: error: ‘CRYPTO_LOCK_X509’ was not declared in this scope
 typedef LockingPointer<X509, X509_free_cpp, CRYPTO_LOCK_X509> X509_Pointer;

I cannot find the CRYPTO_LOCK_X509 macro defined anywhere in the OpenSSL headers I've installed with libssl-dev (which is probably why I'm getting the error).

How do I get around this particular compilation error?  What additional software/steps do I need?

Thanks!


______________________________ _________________
squid-users mailing list
[hidden email]-cache. org
http://lists.squid-cache.org/ listinfo/squid-users


_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users

_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|

Re: Compiling with OpenSSL Support

Matus UHLAR - fantomas
In reply to this post by Marcus Kool
>>2017-10-13 12:18 GMT-03:00 Tyn Li <[hidden email] <mailto:[hidden email]>>:
>>    ../../src/ssl/gadgets.h:83:45: error: ‘CRYPTO_LOCK_X509’ was not declared in this scope
>>      typedef LockingPointer<X509, X509_free_cpp, CRYPTO_LOCK_X509> X509_Pointer;

>On 13/10/17 13:19, Sérgio Abrantes Junior wrote:
>>I installed this package to resolve this: libssl1.0-dev

why not libssl-dev?

On 13.10.17 15:16, Marcus Kool wrote:
>Debian 9 has openssl 1.1.x while most platforms have older versions.

that means, you should use libssl-dev unless you know squid can't compile
with openssl-1.1

--
Matus UHLAR - fantomas, [hidden email] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Atheism is a non-prophet organization.
_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|

Re: Compiling with OpenSSL Support

Marcus Kool


On 15/10/17 14:17, Matus UHLAR - fantomas wrote:

>>> 2017-10-13 12:18 GMT-03:00 Tyn Li <[hidden email] <mailto:[hidden email]>>:
>>>    ../../src/ssl/gadgets.h:83:45: error: ‘CRYPTO_LOCK_X509’ was not declared in this scope
>>>      typedef LockingPointer<X509, X509_free_cpp, CRYPTO_LOCK_X509> X509_Pointer;
>
>> On 13/10/17 13:19, Sérgio Abrantes Junior wrote:
>>> I installed this package to resolve this: libssl1.0-dev
>
> why not libssl-dev?
>
> On 13.10.17 15:16, Marcus Kool wrote:
>> Debian 9 has openssl 1.1.x while most platforms have older versions.
>
> that means, you should use libssl-dev unless you know squid can't compile
> with openssl-1.1

Openssl 1.1.x is not backwards compatible and does not have the symbol CRYPTO_LOCK_X509 while openssl 1.0.2 has.
_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|

Re: Compiling with OpenSSL Support

Matus UHLAR - fantomas
>On 15/10/17 14:17, Matus UHLAR - fantomas wrote:
>>>>2017-10-13 12:18 GMT-03:00 Tyn Li <[hidden email] <mailto:[hidden email]>>:
>>>>   ../../src/ssl/gadgets.h:83:45: error: ‘CRYPTO_LOCK_X509’ was not declared in this scope
>>>>     typedef LockingPointer<X509, X509_free_cpp, CRYPTO_LOCK_X509> X509_Pointer;
>>
>>>On 13/10/17 13:19, Sérgio Abrantes Junior wrote:
>>>>I installed this package to resolve this: libssl1.0-dev
>>
>>why not libssl-dev?
>>
>>On 13.10.17 15:16, Marcus Kool wrote:
>>>Debian 9 has openssl 1.1.x while most platforms have older versions.
>>
>>that means, you should use libssl-dev unless you know squid can't compile
>>with openssl-1.1

On 15.10.17 18:43, Marcus Kool wrote:
>Openssl 1.1.x is not backwards compatible and does not have the symbol
> CRYPTO_LOCK_X509 while openssl 1.0.2 has.

are you talking about squid or ufdbguard?

--
Matus UHLAR - fantomas, [hidden email] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Eagles may soar, but weasels don't get sucked into jet engines.
_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|

Re: Compiling with OpenSSL Support

Amos Jeffries
Administrator
On 16/10/17 23:47, Matus UHLAR - fantomas wrote:

>> On 15/10/17 14:17, Matus UHLAR - fantomas wrote:
>>>>> 2017-10-13 12:18 GMT-03:00 Tyn Li:
>>>>>   ../../src/ssl/gadgets.h:83:45: error: ‘CRYPTO_LOCK_X509’ was not
>>>>> declared in this scope
>>>>>     typedef LockingPointer<X509, X509_free_cpp, CRYPTO_LOCK_X509>
>>>>> X509_Pointer;
>>>
>>>> On 13/10/17 13:19, Sérgio Abrantes Junior wrote:
>>>>> I installed this package to resolve this: libssl1.0-dev
>>>
>>> why not libssl-dev?
>>>
>>> On 13.10.17 15:16, Marcus Kool wrote:
>>>> Debian 9 has openssl 1.1.x while most platforms have older versions.
>>>
>>> that means, you should use libssl-dev unless you know squid can't
>>> compile
>>> with openssl-1.1
>
> On 15.10.17 18:43, Marcus Kool wrote:
>> Openssl 1.1.x is not backwards compatible and does not have the symbol
>> CRYPTO_LOCK_X509 while openssl 1.0.2 has.
>
> are you talking about squid or ufdbguard?
>

Doesn't matter, it is a problem with OpenSSL 1.0 vs 1.1.
Anything which uses OpenSSL 1.0 specific symbols needs libssl1.0-dev on
Debian.

Amos
_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|

Re: Compiling with OpenSSL Support

Matus UHLAR - fantomas
>>>On 15/10/17 14:17, Matus UHLAR - fantomas wrote:
>>>>why not libssl-dev?

>>>>On 13.10.17 15:16, Marcus Kool wrote:
>>>>>Debian 9 has openssl 1.1.x while most platforms have older versions.

>On 16/10/17 23:47, Matus UHLAR - fantomas wrote:
>>>>that means, you should use libssl-dev unless you know squid
>>>>can't compile
>>>>with openssl-1.1

>>On 15.10.17 18:43, Marcus Kool wrote:
>>>Openssl 1.1.x is not backwards compatible and does not have the symbol
>>>CRYPTO_LOCK_X509 while openssl 1.0.2 has.
>>
>>are you talking about squid or ufdbguard?

On 17.10.17 03:04, Amos Jeffries wrote:
>Doesn't matter, it is a problem with OpenSSL 1.0 vs 1.1.
>Anything which uses OpenSSL 1.0 specific symbols needs libssl1.0-dev
>on Debian.

so, does squid reauire openssl-1.0?
ok, found finally:

https://wiki.squid-cache.org/SquidFaq/CompilingSquid#Debian.2C_Ubuntu

        However, please note that Squid-3.5 is not compatible with OpenSSL
        v1.1+.  As of Debian Squeeze, or Ubuntu Zesty the libssl1.0-dev
        package must be used instead.  This is resolved in the Squid-4
        packages when they become available.

--
Matus UHLAR - fantomas, [hidden email] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
The early bird may get the worm, but the second mouse gets the cheese.
_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users