On Fri, May 09, 2014 at 10:58:30AM -0400, Wietse Venema wrote:
> > Any hint's to build postfix + openssl-1.x on a system based on
> > openssl-0.9.x ??? I also avoided building openssl from source for
> > good reasons over the last years.
It is rather easy to build on Unix-like systems.
Unpack the tarball, cd to the top-level source directory and run
'./config -h'. This will suggest default build options.
For example, on a Macbook Pro:
$ ./config -h
Operating system: i686-apple-darwinDarwin Kernel Version 13.1.0: Wed Apr 2
23:52:02 PDT 2014; root:xnu-2422.92.1~2/RELEASE_X86_64
WARNING! If you wish to build 64-bit library, then you have to
invoke './Configure darwin64-x86_64-cc' *manually*.
Configuring for darwin-i386-cc
/opt/local/bin/perl5 ./Configure darwin-i386-cc
> I have some success with installing OpenSSL in a different location
> (/opt/openssl-1.x.y) and pointing the Postfix CCARGS/AUXLIBS there.
Then I just run:
$ ./Configure --prefix=/opt/openssl-1.x.y darwin64-x86_64-cc
> However, this may cause conflicts if you link Postfix with any
> libraries that were compiled against a different OpenSSL version
> (in my case, libldap).
Indeed DLL-hell is a potential problem. You may also need to build
LDAP, MySQL, PgSQL, ... all linked with the custom version of
OpenSSL.
It may be simpler to upgrade your system.
--
Viktor.
