Results 1 to 8 of 8

Thread: system broken because upgrade openssl

  1. #1
    Join Date
    Sep 2014
    Location
    Almeria (España)
    Posts
    12

    system broken because upgrade openssl

    Hi, I have updated openssl on my server and now all is broken.


    Code:
    # openssl version
    OpenSSL 1.0.2k  26 Jan 2017
    #
    I cant compile from custombuild.


    Code:
    # ./build all d
    In file included from /usr/include/openssl/evp.h:66:0,
                     from /usr/include/openssl/x509.h:73,
                     from /usr/include/openssl/ssl.h:156,
                     from ssl_private.h:90,
                     from ssl_engine_mutex.c:31:
    /usr/local/include/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer supported
     # error OPENSSL_ALGORITHM_DEFINES no longer supported
       ^
    In file included from /usr/include/openssl/evp.h:66:0,
                     from /usr/include/openssl/x509.h:73,
                     from /usr/include/openssl/ssl.h:156,
                     from ssl_private.h:90,
                     from ssl_engine_kernel.c:31:
    /usr/local/include/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer supported
     # error OPENSSL_ALGORITHM_DEFINES no longer supported
       ^
    In file included from /usr/include/openssl/evp.h:66:0,
                     from /usr/include/openssl/x509.h:73,
                     from /usr/include/openssl/ssl.h:156,
                     from ssl_private.h:90,
                     from ssl_engine_io.c:30:
    /usr/local/include/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer supported
     # error OPENSSL_ALGORITHM_DEFINES no longer supported
       ^
    In file included from /usr/include/openssl/evp.h:66:0,
                     from /usr/include/openssl/x509.h:73,
                     from /usr/include/openssl/ssl.h:156,
                     from ssl_private.h:90,
                     from ssl_engine_init.c:29:
    /usr/local/include/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer supported
     # error OPENSSL_ALGORITHM_DEFINES no longer supported
       ^
    In file included from /usr/include/openssl/evp.h:66:0,
                     from /usr/include/openssl/x509.h:73,
                     from /usr/include/openssl/ssl.h:156,
                     from ssl_private.h:90,
                     from ssl_engine_pphrase.c:31:
    /usr/local/include/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer supported
     # error OPENSSL_ALGORITHM_DEFINES no longer supported
       ^
    In file included from /usr/include/openssl/evp.h:66:0,
                     from /usr/include/openssl/x509.h:73,
                     from /usr/include/openssl/ssl.h:156,
                     from ssl_private.h:90,
                     from mod_ssl.c:27:
    /usr/local/include/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer supported
     # error OPENSSL_ALGORITHM_DEFINES no longer supported
       ^
    In file included from /usr/include/openssl/evp.h:66:0,
                     from /usr/include/openssl/x509.h:73,
                     from /usr/include/openssl/ssl.h:156,
                     from ssl_private.h:90,
                     from ssl_engine_config.c:29:
    /usr/local/include/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer supported
     # error OPENSSL_ALGORITHM_DEFINES no longer supported
       ^
    In file included from /usr/include/openssl/evp.h:66:0,
                     from /usr/include/openssl/x509.h:73,
                     from /usr/include/openssl/ssl.h:156,
                     from ssl_private.h:90,
                     from ssl_engine_log.c:30:
    /usr/local/include/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer supported
     # error OPENSSL_ALGORITHM_DEFINES no longer supported
       ^
    mod_ssl.c: In function 'ssl_cleanup_pre_config':
    mod_ssl.c:313:5: warning: implicit declaration of function 'ENGINE_cleanup' [-Wimplicit-function-declaration]
         ENGINE_cleanup();
         ^
    mod_ssl.c: In function 'ssl_hook_pre_config':
    mod_ssl.c:350:5: warning: implicit declaration of function 'ENGINE_load_builtin_engines' [-Wimplicit-function-declaration]
         ENGINE_load_builtin_engines();
         ^
    /usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:206: recipe for target 'ssl_engine_pphrase.lo' failed
    make[3]: *** [ssl_engine_pphrase.lo] Error 1
    make[3]: *** Waiting for unfinished jobs....
    /usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:206: recipe for target 'ssl_engine_mutex.lo' failed
    make[3]: *** [ssl_engine_mutex.lo] Error 1
    /usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:206: recipe for target 'ssl_engine_config.lo' failed
    make[3]: *** [ssl_engine_config.lo] Error 1
    /usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:206: recipe for target 'ssl_engine_io.lo' failed
    make[3]: *** [ssl_engine_io.lo] Error 1
    /usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:206: recipe for target 'ssl_engine_log.lo' failed
    make[3]: *** [ssl_engine_log.lo] Error 1
    /usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:206: recipe for target 'ssl_engine_init.lo' failed
    make[3]: *** [ssl_engine_init.lo] Error 1
    /usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:206: recipe for target 'ssl_engine_kernel.lo' failed
    make[3]: *** [ssl_engine_kernel.lo] Error 1
    /usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:206: recipe for target 'mod_ssl.lo' failed
    make[3]: *** [mod_ssl.lo] Error 1
    make[3]: Leaving directory '/usr/local/directadmin/custombuild/httpd-2.4.25/modules/ssl'
    /usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:75: recipe for target 'all-recursive' failed
    make[2]: *** [all-recursive] Error 1
    make[2]: Leaving directory '/usr/local/directadmin/custombuild/httpd-2.4.25/modules/ssl'
    /usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:75: recipe for target 'all-recursive' failed
    make[1]: *** [all-recursive] Error 1
    make[1]: Leaving directory '/usr/local/directadmin/custombuild/httpd-2.4.25/modules'
    /usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:75: recipe for target 'all-recursive' failed
    make: *** [all-recursive] Error 1
    #
    Help please, I have tried everything....

  2. #2
    Join Date
    May 2014
    Posts
    73
    How do you have update openssl? And enter these commands and post the ouput here:

    uname -a

    cat /etc/debian_version

  3. #3
    Join Date
    Sep 2014
    Location
    Almeria (España)
    Posts
    12
    Code:
    ./config --prefix=/usr no-threads shared
    make
    make test
    make install
    Code:
    # uname -a
    Linux host 3.16.0-4-amd64 #1 SMP Debian 3.16.36-1+deb8u2 (2016-10-19) x86_64 GNU/Linux
    #
    Code:
    # cat /etc/debian_version
    8.7
    #
    Code:
    # lsb_release -a
    No LSB modules are available.
    Distributor ID: Debian
    Description:    Debian GNU/Linux 8.7 (jessie)
    Release:        8.7
    Codename:       jessie
    #

    Thanks in advance

  4. #4
    Join Date
    May 2014
    Posts
    73
    Quote Originally Posted by cRipTz View Post
    Code:
    ./config --prefix=/usr no-threads shared
    make
    make test
    make install
    Thanks in advance
    Thank you! So you've build OpenSSL version 1.0.2k from the source? Why? We have also update OpenSSL but we using apt-get with a Pin-Priority for OpenSSL from the jessie-backports. Other packages comes from Jessie. Our custombuild still works.

    In your post, I see:

    /usr/local/include/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer supported
    # error OPENSSL_ALGORITHM_DEFINES no longer supported

    I did ls -l /usr/local/include/openssl/opensslconf.h && ls -l /usr/local/include/openssl/ and see (OpenSSL from apt-get):

    ls: cannot access /usr/local/include/openssl/opensslconf.h: No such file or directory
    ls: cannot access /usr/local/include/openssl/: No such file or directory

    Please enter these commands and post the output here:

    ls -l /usr/local/include/openssl/opensslconf.h
    ls -l /usr/local/include/openssl/
    dpkg --list | grep openssl

  5. #5
    Join Date
    Sep 2014
    Location
    Almeria (España)
    Posts
    12
    hello davydvries

    Code:
    # openssl version
    OpenSSL 1.0.1t  3 May 2016
    #
    I recompiled it from apt-get (dont work)

    Code:
    # ls -l /usr/local/include/openssl/opensslconf.h
    -rw-r--r-- 1 root staff 3919 Mar 20 18:31 /usr/local/include/openssl/opensslconf.h
    #
    Code:
    # ls -l /usr/local/include/openssl/
    total 4
    -rw-r--r-- 1 root staff 3919 Mar 20 18:31 opensslconf.h
    #
    Code:
    # dpkg --list | grep openssl
    ii  libgnutls-openssl27:amd64        3.3.8-6+deb8u4              amd64        GNU TLS library - OpenSSL wrapper
    ii  openssl                          1.0.1t-1+deb8u6             amd64        Secure Sockets Layer toolkit - cryptographic utility
    #

    Thanks in advance

  6. #6
    Join Date
    May 2014
    Posts
    73
    Hi cRipTz,

    I have sent you a private message please could you reply ?

  7. #7
    Join Date
    Sep 2014
    Location
    Almeria (España)
    Posts
    12
    Hi davydvries

    No lucky.

    I am trying to compile apache with nghttp2 and dont work...

    https://forum.directadmin.com/showthread.php?t=52590


    Code:
    /usr/local/lib_http2/lib/libssl.a(s23_clnt.o): In function `ssl23_connect':
    s23_clnt.c:(.text+0x4e7): undefined reference to `sk_value'
    s23_clnt.c:(.text+0x4fe): undefined reference to `sk_num'
    s23_clnt.c:(.text+0xb80): undefined reference to `sk_num'
    s23_clnt.c:(.text+0xbe2): undefined reference to `sk_value'
    s23_clnt.c:(.text+0xd17): undefined reference to `OpenSSLDie'
    /usr/local/lib_http2/lib/libssl.a(t1_lib.o): In function `tls_decrypt_ticket':
    t1_lib.c:(.text+0x41): undefined reference to `HMAC_CTX_init'
    t1_lib.c:(.text+0x49): undefined reference to `EVP_CIPHER_CTX_init'
    t1_lib.c:(.text+0xd8): undefined reference to `HMAC_CTX_cleanup'
    t1_lib.c:(.text+0xe0): undefined reference to `EVP_CIPHER_CTX_cleanup'
    t1_lib.c:(.text+0x19d): undefined reference to `HMAC_CTX_cleanup'
    t1_lib.c:(.text+0x1bc): undefined reference to `EVP_CIPHER_CTX_cleanup'
    t1_lib.c:(.text+0x1d4): undefined reference to `EVP_CIPHER_CTX_cleanup'
    t1_lib.c:(.text+0x1dc): undefined reference to `HMAC_CTX_cleanup'
    t1_lib.c:(.text+0x279): undefined reference to `EVP_CIPHER_CTX_cleanup'
    t1_lib.c:(.text+0x2d4): undefined reference to `EVP_CIPHER_CTX_cleanup'
    t1_lib.c:(.text+0x31d): undefined reference to `EVP_CIPHER_CTX_cleanup'
    /usr/local/lib_http2/lib/libssl.a(t1_lib.o): In function `ssl_add_clienthello_tlsext':
    t1_lib.c:(.text+0x1c97): undefined reference to `sk_value'
    t1_lib.c:(.text+0x1cb2): undefined reference to `sk_num'
    t1_lib.c:(.text+0x24f3): undefined reference to `sk_value'
    t1_lib.c:(.text+0x251c): undefined reference to `sk_num'
    t1_lib.c:(.text+0x260c): undefined reference to `sk_value'
    t1_lib.c:(.text+0x2636): undefined reference to `sk_num'
    /usr/local/lib_http2/lib/libssl.a(t1_lib.o): In function `ssl_parse_serverhello_tlsext':
    t1_lib.c:(.text+0x3d1c): undefined reference to `BUF_strdup'
    /usr/local/lib_http2/lib/libssl.a(t1_lib.o): In function `ssl_parse_clienthello_tlsext':
    t1_lib.c:(.text+0x54ec): undefined reference to `sk_pop_free'
    t1_lib.c:(.text+0x54fa): undefined reference to `sk_new_null'
    t1_lib.c:(.text+0x556a): undefined reference to `sk_push'
    t1_lib.c:(.text+0x5666): undefined reference to `sk_pop_free'
    /usr/local/lib_http2/lib/libssl.a(t1_lib.o): In function `tls1_check_chain':
    
    /------------------------------------------/

    thank you very much

  8. #8
    Join Date
    May 2014
    Posts
    73
    Can you check out with the find command or locate command where OpenSSL state? I think there are files from the source.

    Maybe you could look at this? It is explained how you can remove a source package.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •