Dovecot update 2.2.25 -> 2.2.26.0 FAILS

piotrv · Nov 14, 2016

I just recently noticed that upgrading to dovecot 2.2.26 fails compiling.
I never had any issues and have no idea were to start solving the problem

Someone any clues ?

Code:

[I]lsb_release -d[/I]
Description:	Debian GNU/Linux 7.11 (wheezy)

[I]/usr/local/directadmin/custombuild/build versions[/I]

 ......

Latest version of dovecot: 2.2.26.0
Installed version of dovecot: 2.2.25

Dovecot 2.2.25 to 2.2.26.0 update is available.

Code:

[I]/usr/local/directadmin/custombuild/build update dovecot[/I]

 ......

mv -f .deps/test-http-client.Tpo .deps/test-http-client.Po
/bin/bash ../../libtool  --tag=CC   --mode=link gcc  -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2   -export-dynamic -no-undefined -Wl,--as-needed  -o test-http-client test-http-client.o libhttp.la ../lib-dns/libdns.la ../lib-ssl-iostream/libssl_iostream.la ../lib-master/libmaster.la ../lib-settings/libsettings.la ../lib-test/libtest.la ../lib/liblib.la -export-dynamic -ldl ../lib-ssl-iostream/libssl_iostream_openssl.la 

*** Warning: Linking the executable test-http-client against the loadable module
*** libssl_iostream_openssl.so is not portable!
libtool: link: gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -Wl,--as-needed -o .libs/test-http-client test-http-client.o -Wl,--export-dynamic  ./.libs/libhttp.a ../lib-dns/.libs/libdns.a ../lib-ssl-iostream/.libs/libssl_iostream.a ../lib-master/.libs/libmaster.a ../lib-settings/.libs/libsettings.a ../lib-test/.libs/libtest.a ../lib/.libs/liblib.a -ldl ../lib-ssl-iostream/.libs/libssl_iostream_openssl.so
/usr/bin/ld: /usr/local/lib/libz.so.1: no version information available (required by /usr/lib/libbfd-2.25-system.so)
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `sk_new_null@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_get_error@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_get_peer_certificate@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_CTX_load_verify_locations@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_CTX_use_PrivateKey@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `DH_free@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_set_ex_data@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_CTX_set_tmp_rsa_callback@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_CTX_use_certificate@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_alert_desc_string_long@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_get_ex_data@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_get_ex_new_index@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `ENGINE_free@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_CTX_set_client_CA_list@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `X509_get_ext_d2i@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_accept@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `X509_STORE_add_cert@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSLv23_server_method@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `OBJ_txt2nid@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_write@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `X509_STORE_CTX_get_error@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `sk_num@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `BIO_ctrl_get_write_guarantee@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_set_cipher_list@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `sk_push@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `ERR_get_error@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_alert_type_string_long@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_COMP_get_name@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `ENGINE_by_id@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `BIO_write@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `i2d_DHparams@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `X509_NAME_ENTRY_get_data@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_CIPHER_get_name@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_use_PrivateKey@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_set_info_callback@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `X509_get_subject_name@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `ENGINE_init@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `ERR_clear_error@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_load_error_strings@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `BIO_free@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_CIPHER_get_bits@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `X509_INFO_free@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `X509_STORE_set_flags@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_new@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `X509_NAME_dup@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `X509_NAME_get_index_by_NID@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `d2i_DHparams@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `X509_NAME_get_text_by_NID@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `OPENSSL_add_all_algorithms_noconf@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_COMP_free_compression_methods@OPENSSL_1.0.2'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `ENGINE_set_default@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `ENGINE_cleanup@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `X509_NAME_get_entry@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `ASN1_STRING_type@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_library_init@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_get_current_cipher@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `X509_STORE_CTX_get_current_cert@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_CTX_set_cipher_list@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_shutdown@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_connect@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `ERR_error_string_n@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `X509_STORE_CTX_get_ex_data@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_set_verify@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `BIO_new_bio_pair@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSLv23_client_method@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_use_certificate@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `ASN1_STRING_length@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_get_servername_type@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_CTX_get_cert_store@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_CTX_set_tmp_dh_callback@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_ctrl@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `PEM_read_bio_PrivateKey@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `BIO_new_mem_buf@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_get_ex_data_X509_STORE_CTX_idx@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `sk_pop_free@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `sk_value@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `GENERAL_NAME_free@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `ERR_peek_error@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_get_version@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `CRYPTO_set_mem_functions@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `RAND_bytes@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_CTX_new@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `BIO_ctrl_pending@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_set_bio@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `ASN1_STRING_data@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `ENGINE_load_builtin_engines@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `PEM_read_bio_X509@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `EVP_cleanup@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_CTX_callback_ctrl@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `X509_STORE_add_crl@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `BIO_read@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `ENGINE_finish@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_free@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_read@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `X509_NAME_oneline@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `ERR_remove_thread_state@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `CRYPTO_cleanup_all_ex_data@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_CTX_free@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `ERR_free_strings@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `EVP_PKEY_free@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_get_current_compression@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `X509_verify_cert_error_string@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_CTX_ctrl@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `ERR_peek_last_error@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_get_servername@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `RSA_generate_key@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `SSL_state_string_long@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `ERR_get_error_line_data@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `PEM_X509_INFO_read_bio@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `DH_generate_parameters@OPENSSL_1.0.0'
../lib-ssl-iostream/.libs/libssl_iostream_openssl.so: undefined reference to `X509_free@OPENSSL_1.0.0'
collect2: error: ld returned 1 exit status
Makefile:737: recipe for target 'test-http-client' failed
make[3]: *** [test-http-client] Error 1
make[3]: Leaving directory '/usr/local/directadmin/custombuild/dovecot-2.2.26.0/src/lib-http'
Makefile:494: recipe for target 'all-recursive' failed
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory '/usr/local/directadmin/custombuild/dovecot-2.2.26.0/src'
Makefile:619: recipe for target 'all-recursive' failed
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory '/usr/local/directadmin/custombuild/dovecot-2.2.26.0'
Makefile:463: recipe for target 'all' failed
make: *** [all] Error 2

*** The make has failed, would you like to try to make again? (y,n):

zEitEr · Nov 14, 2016

Hello,

What openssl version you have there?

piotrv · Nov 15, 2016

Hi Alex,

this is what I have:

Code:

[I]openssl version -a[/I]
OpenSSL 1.0.2h  3 May 2016
built on: reproducible build, date unspecified
platform: linux-x86_64
options:  bn(64,64) rc4(16x,int) des(idx,cisc,16,int) idea(int) blowfish(idx) 
compiler: gcc -I. -I.. -I../include  -fPIC -DOPENSSL_PIC -DDSO_DLFCN -DHAVE_DLFCN_H -Wa,--noexecstack -m64 -DL_ENDIAN -O3 -Wall -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM -DECP_NISTZ256_ASM
OPENSSLDIR: "/usr/ssl"

Code:

[I]apt-cache policy openssl[/I]
apt-cache: /usr/local/lib/libz.so.1: no version information available (required by /usr/lib/x86_64-linux-gnu/libapt-pkg.so.4.12)
openssl:
  Installed: 1.0.2a-1
  Candidate: 1.0.2a-1
  Version table:
 *** 1.0.2a-1 0
        100 /var/lib/dpkg/status
     1.0.1t-1+deb7u1 0
        500 http://security.debian.org/ wheezy/updates/main amd64 Packages
     1.0.1e-2+deb7u20 0
        500 http://ftp.nl.debian.org/debian/ wheezy/main amd64 Packages
        500 http://mirrors.nl.kernel.org/debian/ wheezy/main amd64 Packages

Code:

[I]dpkg --list | grep  libssl[/I]
ii  libssl-dev:amd64             1.0.2a-1                       amd64        Secure Sockets Layer toolkit - development files
ii  libssl0.9.8                  0.9.8o-4squeeze14              amd64        SSL shared libraries
ii  libssl1.0.0:amd64            1.0.2a-1                       amd64        Secure Sockets Layer toolkit - shared libraries

zEitEr · Nov 15, 2016

It seems as if Dovecot tries to build against OpenSSL 0.9.8. Why do you have 3 versions of OpenSSL?

piotrv · Nov 15, 2016

zEitEr said:
It seems as if Dovecot tries to build against OpenSSL 0.9.8. Why do you have 3 versions of OpenSSL?

Good question.

I recall that back in 2013 I needed a specific curl version (7.35) which required to be compiled with openssl > 1.0.0

At that time I was still running Debian 6 since I believe, DirectAdmin did not (officially) support Debian 7.
I ended up installing curl and openssl from the unstable Sid repo.
Debian Squeeze openssl was 0.9.8, so that is a relic.

Eventually I upgraded to Debian 7 late 2013 and up until my recent attempt to upgrading from Dovecot 2.2.25 -> 2.2.26 through the DirectAdmin custom build script, I never had any real issues.

no package on hold:

Code:

[I]#dpkg --get-selections |  egrep ssl[/I]
libcrypt-openssl-bignum-perl      install
libcrypt-openssl-rsa-perl            install
libcrypt-ssleay-perl                   install
libgnutls-openssl27:amd64        install
libio-socket-ssl-perl                  install
libnet-ssleay-perl                     install
libssl-dev:amd64                     install
libssl0.9.8                              install
libssl1.0.0:amd64                   install
openssl                                 install

I don not understand why dovecot 2.2.26 would try to build against OpenSSL 0.9.8
This was not the case with building dovecot 2.2.25

I am not sure if I just can purge libssl0.9.8 without breaking the system and the DirectAdmin custom build script . . . .

zEitEr · Nov 15, 2016

Well it was just a guess. I've checked it on one of Debian server which I upgraded from 6 to 7 recently, and here is what I have:

Code:

# dovecot --version
2.2.26.0 (23d1de6)

Code:

# dpkg --get-selections |  grep ssl
libio-socket-ssl-perl                           install
libnet-ssleay-perl                              install
libssl-dev                                      install
libssl-doc                                      install
libssl0.9.8                                     install
libssl1.0.0:amd64                               install
openssl                                         install

Here you can see the same, but if to check this:

Code:

# updatedb
# locate bin/openssl
/usr/bin/openssl

Code:

# /usr/bin/openssl version
OpenSSL 1.0.1t  3 May 2016

Did you customize dovecot configure file?

Code:

cat /usr/local/directadmin/custombuild/custom/dovecot/configure.dovecot

What do you see?

and here

Code:

# dovecot --build-options

?

I see this:

Code:

# dovecot --build-options
Build options: ioloop=epoll notify=inotify ipv6 openssl io_block_size=8192
Mail storages: shared mdbox sdbox maildir mbox cydir imapc pop3c raw fail
SQL drivers:
Passdb: checkpassword passwd passwd-file shadow
Userdb: checkpassword nss passwd prefetch passwd-file

piotrv · Nov 16, 2016

Thanks Alex, I really appreciate your efforts to help

zEitEr said:
I've checked it on one of Debian server which I upgraded from 6 to 7 recently, and here is what I have:

Code:

# dovecot --version 2.2.26.0 (23d1de6)

Code:

[I]# dovecot --version[/I]
2.2.25 (7be1766)

zEitEr said:
Code:

# /usr/bin/openssl version OpenSSL 1.0.1t 3 May 2016

Ah, this is interesting:
Since I have

Code:

[I]# /usr/bin/openssl version[/I]
OpenSSL 1.0.2h  3 May 2016

I guessed I selectively installed back then the openssl package from the wheezy backport.
Unfortunately I cannot look it up anymore in the history log.

My current source list:

Code:

 cat /etc/apt/sources.list
# wheezy
deb http://ftp.nl.debian.org/debian/ wheezy main contrib non-free
deb-src http://ftp.nl.debian.org/debian/ wheezy main contrib non-free

deb http://mirrors.nl.kernel.org/debian/ wheezy main
deb-src http://mirrors.nl.kernel.org/debian/ wheezy main

# wheezy Security
deb http://security.debian.org/ wheezy/updates main contrib non-free
deb-src http://security.debian.org/ wheezy/updates main contrib non-free

# wheezy-updates, previously known as 'volatile'
deb http://ftp.nl.debian.org/debian/ wheezy-updates main contrib non-free
deb-src http://ftp.nl.debian.org/debian/ wheezy-updates main contrib non-free

# wheezy-backports
deb http://ftp.nl.debian.org/debian/ wheezy-backports main contrib non-free
deb-src http://ftp.nl.debian.org/debian/ wheezy-backports main contrib non-free

# sid
#deb http://ftp.nl.debian.org/debian/ sid main contrib non-free
#deb-src http://ftp.nl.debian.org/debian/ sid main contrib non-free

I might be wrong, but the openssl package however, doesn't seem to be installed from the wheezy backport:

Code:

[I]# dpkg -s  openssl[/I]
Package: openssl
Status: install ok installed
Priority: optional
Section: utils
Installed-Size: 1139
Maintainer: Debian OpenSSL Team <[email protected]>
Architecture: amd64
Version: 1.0.2a-1
Depends: libc6 (>= 2.15), libssl1.0.0 (>= 1.0.2~beta3)
Suggests: ca-certificates
Conffiles:
 /etc/ssl/openssl.cnf 7df26c55291b33344dc15e3935dabaf3
...


[I]# dpkg -l    openssl[/I]
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                                           Version                      Architecture                 Description
+++-==============================================-============================-============================-==================================================================================================
ii  openssl                                        1.0.2a-1                     amd64                        Secure Sockets Layer toolkit - cryptographic utility

Confusing: 1.0.2a-1 <> 1.0.2h

zEitEr said:
Did you customize dovecot configure file?

Code:

cat /usr/local/directadmin/custombuild/custom/dovecot/configure.dovecot

What do you see?

Code:

[I]# cat /usr/local/directadmin/custombuild/configure/dovecot/configure.dovecot [/I]
#!/bin/sh
./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var --with-systemdsystemunitdir=/etc/systemd/system

Code:

# dovecot --build-options

is identical to what you have :

Code:

Build options: ioloop=epoll notify=inotify ipv6 openssl io_block_size=8192
Mail storages: shared mdbox sdbox maildir mbox cydir imapc pop3c raw fail
SQL drivers:
Passdb: checkpassword pam passwd passwd-file shadow
Userdb: checkpassword nss passwd prefetch passwd-file

Now the question is why I could compile Dovecot v2.2.25 without errors:

Changelog Dovecot
v2.2.26.0 2016-10-28
v2.2.26 2016-10-27
v2.2.25 2016-07-01

Changelog OpenSSL
1.0.2h [3 May 2016] this release is from the master branch, which is in active development
...
1.0.1t [3 May 2016] this is from another branch

The details of the changelogs are way beyond my knowledge, but as it seems, I already had OpenSSL 1.02h installed before compiling Dovecot v2.2.25 successfully (presuming the Debian package maintainer had added them to the repo around the given dates) So what is so much different with Dovecot v2.2.26?

I read :

v2.2.26.0 2016-10-28 Timo Sirainen <[email protected]>

- Fixed some compiling issues.

This seems also the exact package release the DirectAdmin custom build script is trying to compile

Just my two cents.

Any thoughts?

Peter

zEitEr · Nov 17, 2016

Probably there is a bug Dovecot when you try to build it against OpenSSL 1.0.2. Try to build it against OpenSSL 1.0.1

zEitEr · Nov 19, 2016

OK, now I see the same on one of the servers upgraded from wheezy to jessie. I will report it here as soon as we find a solution.

zEitEr · Nov 19, 2016

Here is what worked for me:

Code:

ldconfig
./build curl
./build dovecot

Please try it on your end and let me know.

piotrv · Nov 19, 2016

zEitEr said:
Probably there is a bug Dovecot when you try to build it against OpenSSL 1.0.2. Try to build it against OpenSSL 1.0.1

I had to be a bit cautious with OpenSSL 1.01 (< 1.01g heart-bleed bug).
This is what I did:

I first created a snapshot of the complete system, then
apt-cache showpkg openssl

Code:

...
1.0.2a-1 - libc6 (2 2.15) libssl1.0.0 (2 1.0.2~beta3) ca-certificates (0 (null)) 
1.0.1t-1+deb7u1 - libc6 (2 2.7) libssl1.0.0 (2 1.0.1e-2+deb7u20) zlib1g (2 1:1.1.4) ca-certificates (0 (null)) 
1.0.1e-2+deb7u20 - libc6 (2 2.7) libssl1.0.0 (2 1.0.1e-2+deb7u20) zlib1g (2 1:1.1.4) ca-certificates (0 (null)) 
Provides: 
1.0.2a-1 - 
1.0.1t-1+deb7u1 - 
1.0.1e-2+deb7u20 -

I commented out the references to the wheezy backport package in /etc/apt/sources.list

Code:

#deb http://ftp.nl.debian.org/debian/ wheezy-backports main contrib non-free
#deb-src http://ftp.nl.debian.org/debian/ wheezy-backports main contrib non-free

apt-get install openssl=1.0.1t-1+deb7u1

Code:

apt-get: /usr/local/lib/libz.so.1: no version information available (required by /usr/lib/x86_64-linux-gnu/libapt-pkg.so.4.12)
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following packages will be DOWNGRADED:
  openssl
0 upgraded, 0 newly installed, 1 downgraded, 0 to remove and 0 not upgraded.
/usr/lib/apt/methods/http: /usr/local/lib/libz.so.1: no version information available (required by /usr/lib/x86_64-linux-gnu/libapt-pkg.so.4.12)
Need to get 700 kB of archives.
After this operation, 56.3 kB disk space will be freed.
Do you want to continue [Y/n]? Y
/usr/lib/apt/methods/http: /usr/local/lib/libz.so.1: no version information available (required by /usr/lib/x86_64-linux-gnu/libapt-pkg.so.4.12)
Get:1 http://security.debian.org/ wheezy/updates/main openssl amd64 1.0.1t-1+deb7u1 [700 kB]
Fetched 700 kB in 0s (8,983 kB/s)
apt-extracttemplates: /usr/local/lib/libz.so.1: no version information available (required by /usr/lib/x86_64-linux-gnu/libapt-pkg.so.4.12)
dpkg: warning: downgrading openssl from 1.0.2a-1 to 1.0.1t-1+deb7u1
(Reading database ... 28969 files and directories currently installed.)
Preparing to unpack .../openssl_1.0.1t-1+deb7u1_amd64.deb ...
Unpacking openssl (1.0.1t-1+deb7u1) over (1.0.2a-1) ...
Processing triggers for man-db (2.7.0.2-5) ...
Setting up openssl (1.0.1t-1+deb7u1) ...
root@klekoot:/home/pmv# openssl version
openssl: /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0: version `OPENSSL_1.0.1s' not found (required by openssl)
root@klekoot:/home/pmv# openssl -version
openssl: /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0: version `OPENSSL_1.0.1s' not found (required by openssl)
root@klekoot:/home/pmv# openssl version
openssl: /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0: version `OPENSSL_1.0.1s' not found (required by openssl)
root@klekoot:/home/pmv# openssl 
openssl: /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0: version `OPENSSL_1.0.1s' not found (required by openssl)
root@klekoot:/home/pmv# apt-cache showpkg openssl
apt-cache: /usr/local/lib/libz.so.1: no version information available (required by /usr/lib/x86_64-linux-gnu/libapt-pkg.so.4.12)
Package: openssl
Versions: 
1.0.1t-1+deb7u1 (/var/lib/apt/lists/security.debian.org_dists_wheezy_updates_main_binary-amd64_Packages) (/var/lib/dpkg/status)
 Description Language: 
                 File: /var/lib/apt/lists/ftp.nl.debian.org_debian_dists_wheezy_main_binary-amd64_Packages
                  MD5: 977022bc5545601176b69704acc5df9b
 Description Language: en
                 File: /var/lib/apt/lists/ftp.nl.debian.org_debian_dists_wheezy_main_i18n_Translation-en
                  MD5: 977022bc5545601176b69704acc5df9b

1.0.1e-2+deb7u20 (/var/lib/apt/lists/ftp.nl.debian.org_debian_dists_wheezy_main_binary-amd64_Packages) (/var/lib/apt/lists/mirrors.nl.kernel.org_debian_dists_wheezy_main_binary-amd64_Packages)
 Description Language: 
                 File: /var/lib/apt/lists/ftp.nl.debian.org_debian_dists_wheezy_main_binary-amd64_Packages
                  MD5: 977022bc5545601176b69704acc5df9b
 Description Language: en
                 File: /var/lib/apt/lists/ftp.nl.debian.org_debian_dists_wheezy_main_i18n_Translation-en
                  MD5: 977022bc5545601176b69704acc5df9b


Reverse Depends: 
  ca-certificates,openssl
  ca-certificates,openssl 1.0.0
  libssl0.9.8,openssl 0.9.6-2
  lighttpd,openssl
  exim4-base,openssl
  apache2-threaded-dev,openssl
  apache2-prefork-dev,openssl
  xmail,openssl
  x11vnc,openssl
  wl-beta,openssl
  wl,openssl
  citadel-webcit,openssl
  vbackup,openssl
  unbound,openssl
  twittering-mode,openssl
  topal,openssl
  tinyca,openssl 0.9.7e
  sympa,openssl 0.9.5a
  stunnel4,openssl
  libstrongswan,openssl
  stone,openssl
  ssvnc,openssl
  ssl-cert,openssl 0.9.8g-9
  slurm-llnl,openssl 0.9.8g-9
  sisu,openssl
  simplesamlphp,openssl 0.9.8g
  libapache2-mod-shib2,openssl
  shellinabox,openssl
  sendmail-bin,openssl
  quassel-core,openssl
  pyca,openssl 0.9.6
  pyca,openssl 0.9.7
  proftpd-basic,openssl
  prey,openssl
  partimage-server,openssl
  osptoolkit,openssl
  openvswitch-common,openssl
  openvpn,openssl
  openswan,openssl
  openssl-blacklist,openssl 0.9.8g-9
  opendkim-tools,openssl
  nufw,openssl
  nuauth,openssl
  python-nova,openssl
  telnetd-ssl,openssl 0.9.8g-9
  nagios-plugins-contrib,openssl
  mutt,openssl
  ftpd-ssl,openssl 0.9.8g-9
  lighttpd,openssl
  libweb-id-perl,openssl
  libpam-mount,openssl
  kvpnc,openssl
  httping,openssl
  gnumed-server,openssl
  globus-simple-ca,openssl
  globus-openssl-module-progs,openssl
  globus-gsi-cert-utils-progs,openssl
  ganeti2,openssl
  fetch-crl,openssl
  exim4-base,openssl
  epoptes-client,openssl
  epoptes,openssl
  ensymble,openssl
  ejabberd,openssl
  dtc-xen,openssl
  dsniff,openssl
  dovecot-core,openssl
  dkimproxy,openssl
  debian-edu-config,openssl
  education-main-server,openssl
  cryptmount,openssl
  crtmpserver-libs,openssl
  courier-ssl,openssl
  courier-imap-ssl,openssl
  citadel-server,openssl
  ca-certificates,openssl
  ca-certificates,openssl 1.0.0
  boxbackup-server,openssl
  boxbackup-client,openssl
  boinc-server-maker,openssl 0.9.8
  bcfg2-server,openssl
  apache2-threaded-dev,openssl
  apache2-prefork-dev,openssl
  aolserver4-nsopenssl,openssl 0.9.6
  ajaxterm,openssl
Dependencies: 
1.0.1t-1+deb7u1 - libc6 (2 2.7) libssl1.0.0 (2 1.0.1e-2+deb7u20) zlib1g (2 1:1.1.4) ca-certificates (0 (null)) 
1.0.1e-2+deb7u20 - libc6 (2 2.7) libssl1.0.0 (2 1.0.1e-2+deb7u20) zlib1g (2 1:1.1.4) ca-certificates (0 (null)) 
Provides: 
1.0.1t-1+deb7u1 - 
1.0.1e-2+deb7u20 - 
Reverse Provides:

This seems to break openssl:

openssl

Code:

openssl: /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0: version `OPENSSL_1.0.1s' not found (required by openssl)

So I had to work around this:

apt-get install libssl1.0.0=1.0.1e-2+deb7u20
openssl version

Code:

OpenSSL 1.0.1t  3 May 2016 (Library: OpenSSL 1.0.1e 11 Feb 2013)

Now I retried upgrading from dovecot 2.2.25, compiling 2.2.26 by the DirectAdmin build script:

./build update dovecot

Code:

Making all in lib-ssl-iostream
make[3]: Entering directory '/usr/local/directadmin/custombuild/dovecot-2.2.26.0/src/lib-ssl-iostream'
/bin/bash ../../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I../..  -I../../src/lib -I../../src/lib-test -DMODULE_DIR=\""/usr/lib/dovecot"\" -I/usr/kerberos/include  -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2   -MT iostream-openssl.lo -MD -MP -MF .deps/iostream-openssl.Tpo -c -o iostream-openssl.lo iostream-openssl.c
libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -DMODULE_DIR=\"/usr/lib/dovecot\" -I/usr/kerberos/include -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -MT iostream-openssl.lo -MD -MP -MF .deps/iostream-openssl.Tpo -c iostream-openssl.c  -fPIC -DPIC -o .libs/iostream-openssl.o
In file included from iostream-openssl.c:6:0:
iostream-openssl.h:6:25: fatal error: openssl/ssl.h: No such file or directory
compilation terminated.
Makefile:587: recipe for target 'iostream-openssl.lo' failed
make[3]: *** [iostream-openssl.lo] Error 1
make[3]: Leaving directory '/usr/local/directadmin/custombuild/dovecot-2.2.26.0/src/lib-ssl-iostream'
Makefile:494: recipe for target 'all-recursive' failed
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory '/usr/local/directadmin/custombuild/dovecot-2.2.26.0/src'
Makefile:619: recipe for target 'all-recursive' failed
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory '/usr/local/directadmin/custombuild/dovecot-2.2.26.0'
Makefile:463: recipe for target 'all' failed
make: *** [all] Error 2

*** The make has failed, would you like to try to make again? (y,n):

So I did
apt-get upgrade

Code:

apt-get: /usr/local/lib/libz.so.1: no version information available (required by /usr/lib/x86_64-linux-gnu/libapt-pkg.so.4.12)
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following packages will be upgraded:
  libssl1.0.0
1 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
/usr/lib/apt/methods/http: /usr/local/lib/libz.so.1: no version information available (required by /usr/lib/x86_64-linux-gnu/libapt-pkg.so.4.12)
Need to get 1,283 kB of archives.
After this operation, 21.5 kB of additional disk space will be used.
Do you want to continue [Y/n]? Y
/usr/lib/apt/methods/http: /usr/local/lib/libz.so.1: no version information available (required by /usr/lib/x86_64-linux-gnu/libapt-pkg.so.4.12)
Get:1 http://security.debian.org/ wheezy/updates/main libssl1.0.0 amd64 1.0.1t-1+deb7u1 [1,283 kB]
Fetched 1,283 kB in 0s (3,813 kB/s)    
apt-extracttemplates: /usr/local/lib/libz.so.1: no version information available (required by /usr/lib/x86_64-linux-gnu/libapt-pkg.so.4.12)
Preconfiguring packages ...
(Reading database ... 28780 files and directories currently installed.)
Preparing to unpack .../libssl1.0.0_1.0.1t-1+deb7u1_amd64.deb ...
Unpacking libssl1.0.0:amd64 (1.0.1t-1+deb7u1) over (1.0.1e-2+deb7u20) ...
Setting up libssl1.0.0:amd64 (1.0.1t-1+deb7u1) ...
Processing triggers for libc-bin (2.19-18) ...

apt-cache showpkg openssl

Code:

apt-cache: /usr/local/lib/libz.so.1: no version information available (required by /usr/lib/x86_64-linux-gnu/libapt-pkg.so.4.12)
Package: openssl
Versions: 
1.0.1t-1+deb7u1 (/var/lib/apt/lists/security.debian.org_dists_wheezy_updates_main_binary-amd64_Packages) (/var/lib/dpkg/status)
 Description Language: 
                 File: /var/lib/apt/lists/ftp.nl.debian.org_debian_dists_wheezy_main_binary-amd64_Packages
                  MD5: 977022bc5545601176b69704acc5df9b
 Description Language: en
                 File: /var/lib/apt/lists/ftp.nl.debian.org_debian_dists_wheezy_main_i18n_Translation-en
                  MD5: 977022bc5545601176b69704acc5df9b

1.0.1e-2+deb7u20 (/var/lib/apt/lists/ftp.nl.debian.org_debian_dists_wheezy_main_binary-amd64_Packages) (/var/lib/apt/lists/mirrors.nl.kernel.org_debian_dists_wheezy_main_binary-amd64_Packages)
 Description Language: 
                 File: /var/lib/apt/lists/ftp.nl.debian.org_debian_dists_wheezy_main_binary-amd64_Packages
                  MD5: 977022bc5545601176b69704acc5df9b
 Description Language: en
                 File: /var/lib/apt/lists/ftp.nl.debian.org_debian_dists_wheezy_main_i18n_Translation-en
                  MD5: 977022bc5545601176b69704acc5df9b


Reverse Depends: 
  libssl0.9.8,openssl 0.9.6-2
  lighttpd,openssl
  exim4-base,openssl
  apache2-threaded-dev,openssl
  apache2-prefork-dev,openssl
  xmail,openssl
  x11vnc,openssl
  wl-beta,openssl
  wl,openssl
  citadel-webcit,openssl
  vbackup,openssl
  unbound,openssl
  twittering-mode,openssl
  topal,openssl
  tinyca,openssl 0.9.7e
  sympa,openssl 0.9.5a
  stunnel4,openssl
  libstrongswan,openssl
  stone,openssl
  ssvnc,openssl
  ssl-cert,openssl 0.9.8g-9
  slurm-llnl,openssl 0.9.8g-9
  sisu,openssl
  simplesamlphp,openssl 0.9.8g
  libapache2-mod-shib2,openssl
  shellinabox,openssl
  sendmail-bin,openssl
  quassel-core,openssl
  pyca,openssl 0.9.6
  pyca,openssl 0.9.7
  proftpd-basic,openssl
  prey,openssl
  partimage-server,openssl
  osptoolkit,openssl
  openvswitch-common,openssl
  openvpn,openssl
  openswan,openssl
  openssl-blacklist,openssl 0.9.8g-9
  opendkim-tools,openssl
  nufw,openssl
  nuauth,openssl
  python-nova,openssl
  telnetd-ssl,openssl 0.9.8g-9
  nagios-plugins-contrib,openssl
  mutt,openssl
  ftpd-ssl,openssl 0.9.8g-9
  lighttpd,openssl
  libweb-id-perl,openssl
  libpam-mount,openssl
  kvpnc,openssl
  httping,openssl
  gnumed-server,openssl
  globus-simple-ca,openssl
  globus-openssl-module-progs,openssl
  globus-gsi-cert-utils-progs,openssl
  ganeti2,openssl
  fetch-crl,openssl
  exim4-base,openssl
  epoptes-client,openssl
  epoptes,openssl
  ensymble,openssl
  ejabberd,openssl
  dtc-xen,openssl
  dsniff,openssl
  dovecot-core,openssl
  dkimproxy,openssl
  debian-edu-config,openssl
  education-main-server,openssl
  cryptmount,openssl
  crtmpserver-libs,openssl
  courier-ssl,openssl
  courier-imap-ssl,openssl
  citadel-server,openssl
  ca-certificates,openssl
  ca-certificates,openssl 1.0.0
  boxbackup-server,openssl
  boxbackup-client,openssl
  boinc-server-maker,openssl 0.9.8
  bcfg2-server,openssl
  apache2-threaded-dev,openssl
  apache2-prefork-dev,openssl
  aolserver4-nsopenssl,openssl 0.9.6
  ajaxterm,openssl
Dependencies: 
1.0.1t-1+deb7u1 - libc6 (2 2.7) libssl1.0.0 (2 1.0.1e-2+deb7u20) zlib1g (2 1:1.1.4) ca-certificates (0 (null)) 
1.0.1e-2+deb7u20 - libc6 (2 2.7) libssl1.0.0 (2 1.0.1e-2+deb7u20) zlib1g (2 1:1.1.4) ca-certificates (0 (null)) 
Provides: 
1.0.1t-1+deb7u1 - 
1.0.1e-2+deb7u20 - 
Reverse Provides:

Then I got a new problem with curl

curl

Code:

curl: /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0: version `OPENSSL_1.0.2' not found (required by /usr/local/lib/libcurl.so.4)

apt-cache showpkg curl

Code:

...
7.26.0-1+wheezy17 - libc6 (2 2.7) libcurl3 (5 7.26.0-1+wheezy17) zlib1g (2 1:1.1.4) curl-ssl (0 (null)) 
7.26.0-1+wheezy13 - libc6 (2 2.7) libcurl3 (5 7.26.0-1+wheezy13) zlib1g (2 1:1.1.4) curl-ssl (0 (null)) 
Provides: 
7.26.0-1+wheezy17 - curl-ssl 
7.26.0-1+wheezy13 - curl-ssl 
Reverse Provides:

I removed curl from the wheezy repo
Removing curl (7.26.0-1+wheezy17) ..
and then installed curl 7.51 again via the Direct Admin custom build script.

Next I still got problems with (re)starting both the httpd and exim proces:

Code:

Starting httpd: /usr/sbin/httpd: /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0: version `OPENSSL_1.0.2' not found (required by /usr/sbin/httpd)

So I tried
./build apache

Code:

..
checking for OpenSSL version >= 0.9.8a... FAILED
configure: WARNING: OpenSSL version is too old
no
checking whether to enable mod_ssl... configure: error: mod_ssl has been requested but can not be built due to prerequisite failures

*** There was an error while trying to configure Apache 2. Check the configure/ap2/configure.apache file

I worked around this
apt-get install libssl-dev

then I could start httpd and exim again.

So with just downgrading openssl, it is getting a bit messy with all those dependencies.

What is the most confusing is that two OpenSSL versions seems to be installed.
dpkg --get-selections | egrep libssl

Code:

libssl-dev					install
libssl0.9.8					install
libssl1.0.0:amd64				install

So f.e. for mod_ssl it is not clear which OpenSSL lib Apache is linked to, as compiled by the DirectAdmin build script.
The base system OpenSSL lib seems to be still 0.9.8

lsof -n | grep libssl | awk '{$2=$4=$5=$6=$7=$8=""; print $0}' | sort

gives me

Code:

directadm  nobody      /usr/lib/libssl.so.0.9.8
directadm  nobody      /usr/lib/libssl.so.0.9.8
directadm  nobody      /usr/lib/libssl.so.0.9.8
directadm  nobody      /usr/lib/libssl.so.0.9.8
directadm  nobody      /usr/lib/libssl.so.0.9.8
directadm  nobody      /usr/lib/libssl.so.0.9.8
exim  mail      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  1211      236246 /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  1829      236246 /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  1833      236246 /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  2485      236246 /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  2488      236246 /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  2489      236246 /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  31176      236246 /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  31445      236246 /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  31871      236246 /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  31959      236246 /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  apache      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  apache      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  apache      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  apache      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  apache      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  apache      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  apache      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  apache      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  apache      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  apache      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
httpd  root      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
imap-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
imap-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
imap-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
imap-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
imap-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
imap-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
imap-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
imap-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
imap-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
imap-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
imap-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
imap-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
imap-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
imap-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
imap-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
imap-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
pop3-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
pop3-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
pop3-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
pop3-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
pop3-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
pop3-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
pop3-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
pop3-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
pop3-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
pop3-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
pop3-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
pop3-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
pop3-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
pop3-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
pop3-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
pop3-logi  dovecot      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
pure-ftpd  root      /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0

In any case ./build update dovecot still FAILS during compiling, so I am stuck with 2.2.25

Although everything seems still to be working as it is after all my tinkering, I have doubts about (future) stability and consider restoring the snapshot after I will try your suggestion

Although this is another topic, I am also very interested in your experience with upgrading to Jessie.
I am happy with the move to systemd, but haven't upgraded yet my vps since I am not sure about DirectAdmin support for Debian 8.
Also I do not know all consequences for php and alike. I can't effort to break completely the system..

thctlo · Nov 19, 2016

piotrv said:
Although this is another topic, I am also very interested in your experience with upgrading to Jessie.

in very happy with jessie and upgradeing.

in you problem. since im upgradeing also and i have no errors.
It's recommended to execute pre-installation commands again before the upgrade: http://help.directadmin.com/item.php?id=354.
after that ./build clean && ./build update && ./build versions
and upgraded it all.

few extra pointers for things i encounters and the links that helped fixing it.
add lets encrypt: https://help.directadmin.com/item.php?id=629

exim : http://forum.directadmin.com/showthread.php?t=52798
memory_limit message in logs : http://forum.directadmin.com/showthread.php?t=50361

i had a left over error while building..
involving libz.s0, i remove the version in /usr/local/lib
and run a ./build all
And now everything is error free again.

I hope this helps you 2.

zEitEr · Nov 21, 2016

@piotrv,

Just a guess: try to run

Code:

ldconfig

before building dovecot, or even

Code:

ldconfig -v

piotrv · Nov 21, 2016

thctlo said:
It's recommended to execute pre-installation commands again before the upgrade: http://help.directadmin.com/item.php?id=354.
after that ./build clean && ./build update && ./build versions
and upgraded it all.

few extra pointers for things i encounters and the links that helped fixing it.
add lets encrypt: https://help.directadmin.com/item.php?id=629

exim : http://forum.directadmin.com/showthread.php?t=52798
memory_limit message in logs : http://forum.directadmin.com/showthread.php?t=50361

I hope this helps you 2

Thanks thctlo

I'll take your recommendations into account when I do the migration to Debian 8 !
I am keen on doing this, but I want to prep it as good as I can, since I am running important stuff on my vps. it is not really meant as a playground.

thctlo said:
i had a left over error while building..
involving libz.s0, i remove the version in /usr/local/lib
and run a ./build all
And now everything is error free again.

You just deleted the files below ?

Code:

[I]ldconfig -p | egrep libz[/I]
	libz.so.1 (libc6,x86-64) => /usr/local/lib/libz.so.1
	libz.so.1 (libc6,x86-64) => /lib/x86_64-linux-gnu/libz.so.1
	libz.so (libc6,x86-64) => /usr/local/lib/libz.so
	libz.so (libc6,x86-64) => /usr/lib/x86_64-linux-gnu/libz.so

piotrv · Nov 21, 2016

zEitEr said:
@piotrv,

Just a guess: try to run

Code:

ldconfig

before building dovecot, or even

Code:

ldconfig -v

Unfortunately rebuilding the library cache did not help: I still get the same compile errors when building Dovecot, independent of which OpenSSL 1.0.x has been installed.

ldconfig -v | egrep "ssl|dovecot"

Code:

/sbin/ldconfig.real: Path `/usr/local/lib' given more than once
/sbin/ldconfig.real: Path `/lib/x86_64-linux-gnu' given more than once
/sbin/ldconfig.real: Path `/usr/lib/x86_64-linux-gnu' given more than once
/sbin/ldconfig.real: /lib/x86_64-linux-gnu/ld-2.19.so is the dynamic linker, ignoring

	libgnutls-openssl.so.27 -> libgnutls-openssl.so.27.0.0
	libssl.so.1.0.0 -> libssl.so.1.0.0
/usr/lib/dovecot:
	libdovecot-lda.so.0 -> libdovecot-lda.so.0.0.0
	libdcrypt_openssl.so -> libdcrypt_openssl.so
	libssl_iostream_openssl.so -> libssl_iostream_openssl.so
	libdovecot-compression.so.0 -> libdovecot-compression.so.0.0.0
	libdovecot-login.so.0 -> libdovecot-login.so.0.0.0
	libdovecot.so.0 -> libdovecot.so.0.0.0
	libdovecot-fts.so.0 -> libdovecot-fts.so.0.0.0
	libdovecot-dsync.so.0 -> libdovecot-dsync.so.0.0.0
	libdovecot-storage.so.0 -> libdovecot-storage.so.0.0.0
	libdovecot-ssl.so.0 -> libdovecot-ssl.so.0.0.0
	libdovecot-sql.so.0 -> libdovecot-sql.so.0.0.0
/sbin/ldconfig.real: Cannot stat /usr/lib/libltdl.so: No such file or directory
	libssl.so.0.9.8 -> libssl.so.0.9.8
	libssl.so.1.0.0 -> libssl.so.1.0.0

hANshOTtH3RD · Dec 24, 2016

I was having the same problem trying to set up dovecot on my mac:

[ERROR]...In file included from iostream-openssl.c:6:[/ERROR]

I got it to compile for dovecot-2.2.27 with openssl-1.0.2j using the following..

if you read the build instructions. you may have noticed a part about the possible need to add CPPFLAGS.
I compiled mine with term commands like so:

CPPFLAGS=-I/path/to/ssl/include LDFLAGS=-L/path/to/ssl/lib ./configure
make
sudo make install

it seemed to fix the problem for me.
hope that helps?

piotrv · Dec 25, 2016

hANshOTtH3RD said:
CPPFLAGS=-I/path/to/ssl/include LDFLAGS=-L/path/to/ssl/lib ./configure
make
sudo make install

Thank you for your suggestions, hANshOTtH3RD !!

I managed to compile dovecot 2.2.27 by doing the following:

1. first I had to find the correct openssl include and lib path for my debian system:

Code:

# apt-file list libssl-dev
..
/usr/include/openssl/
/usr/lib/x86_64-linux-gnu/
..

2. by default dovecot would install in /usr/local/sbin/, but DA expects /usr/sbin/, so I did

Code:

CPPFLAGS="-I/usr/include/openssl"  LDFLAGS="-L/usr/lib/x86_64-linux-gnu" ./configure  --prefix=/usr --sysconfdir=/etc --localstatedir=/var

This way I was able to compile and install 2.2.27 without errors. Problem solved !

MERRY XMAS TO ALL !

Dovecot update 2.2.25 -> 2.2.26.0 FAILS

piotrv

Verified User

zEitEr

Super Moderator

piotrv

Verified User

zEitEr

Super Moderator

piotrv

Verified User

zEitEr

Super Moderator

piotrv

Verified User

zEitEr

Super Moderator

zEitEr

Super Moderator

zEitEr

Super Moderator

piotrv

Verified User

thctlo

New member

zEitEr

Super Moderator

piotrv

Verified User

piotrv

Verified User

hANshOTtH3RD

New member

piotrv

Verified User