SSL3_MT_NEWSESSION_TICKET undeclared when updating

[ericovk]

When I tried to update (./build update_versions) I get this openssl error. It seems like my system doesn't recognize SSL3. Does anybody know how to fix this?

PIC -DPIC -o vtls/.libs/libcurl_la-openssl.o
vtls/openssl.c: In function 'ssl_msg_type':
vtls/openssl.c:1430: error: 'SSL3_MT_NEWSESSION_TICKET' undeclared (first use in this function)
vtls/openssl.c:1430: error: (Each undeclared identifier is reported only once
vtls/openssl.c:1430: error: for each function it appears in.)
make[2]: *** [vtls/libcurl_la-openssl.lo] Error 1
make[2]: Leaving directory `/usr/local/directadmin/custombuild/curl-7.43.0/lib'
make[1]: *** [all] Error 2
make[1]: Leaving directory `/usr/local/directadmin/custombuild/curl-7.43.0/lib'
make: *** [all-recursive] Error 1


*** The make has failed, would you like to try to make again? (y,n):

 

[zEitEr]

Hello,

What OS version do you run? Is it CentOS 5? You most likely run too old OpenSSL version that does not support SSL3_MT_NEWSESSION_TICKET.

 

[ericovk]

Hi,

I am running: CentOS release 5.11 (Final)

Don't know if it's important, but: openssl version = OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008

 

[zEitEr]

According to this: http://comments.gmane.org/gmane.comp.web.curl.library/45826

The symbol SSL3_MT_NEWSESSION_TICKET appears to have been introduced at around openssl 0.9.8f

So you probably need to have at least openssl 0.9.8f

 

[sysdev]

You can edit the lib/vtls/openssl.c in the sourcetree en change

case SSL3_MT_NEWSESSION_TICKET:
return "Newsession Ticket";

to

#ifdef SSL3_MT_NEWSESSION_TICKET
case SSL3_MT_NEWSESSION_TICKET:
return "Newsession Ticket";
#endif

This will get you through the buildprocess on centos 5

 

[ericovk]

Unfortunately the ifdef fix won't work. ./build update_versions is undoing the changes i made in /usr/local/directadmin/custombuild/curl-7.43.0/lib/vtls/openssl.c

Yum update openssl doesn't have new versions for me. Is it okay if I just download openssl-0.9.8zg.tar.gz from https://www.openssl.org/source/ or do I break my server with that?

 

[sysdev]

You have to use a little trick.

run ./build curl until you get the message to retry the build (because it failed).
DON'T enter y or n but press ctrl+z to push the build to the background
type cd curl-7.43.0/lib/vtls/
edit the openssl.c file, add the changes and safe it
type: cd ../../..
then get the build process back to the foreground with 'fg'
The process is still waiting for you to enter 'y' or 'n', although you don't see that.
type 'y' and press enter. The build will 'make' curl again without extracting the tar.gz and will succeed.

 

[ericovk]

Great, that worked! Thanks!

 

[truenegative]

You have to use a little trick.

run ./build curl until you get the message to retry the build (because it failed).
DON'T enter y or n but press ctrl+z to push the build to the background
type cd curl-7.43.0/lib/vtls/
edit the openssl.c file, add the changes and safe it
type: cd ../../..
then get the build process back to the foreground with 'fg'
The process is still waiting for you to enter 'y' or 'n', although you don't see that.
type 'y' and press enter. The build will 'make' curl again without extracting the tar.gz and will succeed.

worked for us also thanks!

 

[Bramus]

Thanks sysdev, this also worked for me. Had the same issue as above. For furture curl builds, do we have to do this again?

 

[DirectAdmin Support]

Hello,

Thanks for the report and patch.
I've added the patch directly into the curl-7.43.0-tar.gz on files1 so once the files server you're using updates with it, you'll see an md5sum error, and the patched tar.gz should be downloaded, at which point the compile should work.
It may take up to 24 hours for the changes to sync to the other files mirrors.

Thanks!
John

 

[RoRoo]

Hello,

Thanks for the report and patch.
I've added the patch directly into the curl-7.43.0-tar.gz on files1 so once the files server you're using updates with it, you'll see an md5sum error, and the patched tar.gz should be downloaded, at which point the compile should work.
It may take up to 24 hours for the changes to sync to the other files mirrors.

Thanks!
John

Same sort of issue comes up on our CentOS 4.9 (yes I know it's old) server:

curl 7.44.0

vtls/openssl.c: In function `Curl_ossl_sha256sum':
vtls/openssl.c:3192: error: `SHA256_CTX' undeclared (first use in this function)
vtls/openssl.c:3192: error: (Each undeclared identifier is reported only once
vtls/openssl.c:3192: error: for each function it appears in.)
vtls/openssl.c:3192: error: syntax error before "SHA256pw"
vtls/openssl.c:3194: error: `SHA256pw' undeclared (first use in this function)
make[2]: *** [vtls/libcurl_la-openssl.lo] Error 1
make[2]: Leaving directory `/usr/local/directadmin/custombuild/curl-7.44.0/lib'
make[1]: *** [all] Error 2
make[1]: Leaving directory `/usr/local/directadmin/custombuild/curl-7.44.0/lib'
make: *** [all-recursive] Error 1

This after upgrading openSSL to 0.9.7a-43.17.el4_7.2

Updating PHP failed with the same kind of error.

Fix mentioned here is already inside the file.