Re: Error: "SSL_new in -lssl...no" - went thru the docs and faq and google already before posting....

[Michael Mitchell]

Thanks for the reply Stefan,
I haven't tried linking freeRADIUS with static libraries yet, and I must 
admit I missed the "--disable-shared" in J.Ho's email. Well picked up...

I'm guessing the problem stems from this part of the configure.in 
script, where it's checking for DH_new in -lcrypto prior to testing for 
SSL_new in -lssl:

             # Look for the OpenSSL libraries.
             smart_try_dir=$OPENSSL_LIB_DIR
             FR_SMART_CHECK_LIB(crypto, DH_new)
             if test "x$ac_cv_lib_crypto_DH_new" = "xyes"; then
               FR_SMART_CHECK_LIB(ssl, SSL_new)
               if test "x$ac_cv_lib_ssl_SSL_new" = "xyes"; then
and, with this, you can just tell things are going to be messy:
                 OPENSSL_LIBS="$OPENSSL_LIBS -lcrypto -lssl -lcrypto"
;-)

If I get some time (schedule is tight at the moment!) I'll have a play 
around with it to see if things can be improved, even just for my own 
curiosity and learning how these things work! I've got issues with the 
rlm_ldap configure script also that I'd like to finally sort out. I also 
build on Solaris 9, so maybe we can get some of these issues that seem 
to affect Solaris more than other systems sorted out...

I'm all for trying to make life easier for future upgrades!
Oh, and I'm sure Alan wouldn't say "no" to patches if you already have 
some fixes... ;-)

regards,
Mike
[EMAIL PROTECTED] wrote:
Michael Mitchell schrieb:
I've found a few issues with the configure scripts in the
past where 
things weren't quite right, but they've mostly been
related to Solaris.

Actually, I think, this issue really is not about Solaris (although
that's where it's notoriously encountered [e.g. by myself] for
some reason), but about using static libraries (where link order
is more relevant than with shared libraries).
If that could be fixed (by passing the libs in the right order
 ["-lssl -lcrypto" instead of vice versa]) that would have the
additional benefit to enable you to recommend to use static
OpenSSL libs if a newer version is required for  FreeRadius
than is currently available on that system, thus eliminating the
nasty surprises of getting linked to wrong shared objects at
runtime.
        Regards,
               Stefan

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html