system broken because upgrade openssl

cRipTz

Verified User
Joined
Sep 5, 2014
Messages
12
Location
Almeria (España)
Hi, I have updated openssl on my server and now all is broken.


Code:
# openssl version
OpenSSL 1.0.2k  26 Jan 2017
#
I cant compile from custombuild.


Code:
# ./build all d
In file included from /usr/include/openssl/evp.h:66:0,
                 from /usr/include/openssl/x509.h:73,
                 from /usr/include/openssl/ssl.h:156,
                 from ssl_private.h:90,
                 from ssl_engine_mutex.c:31:
/usr/local/include/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer supported
 # error OPENSSL_ALGORITHM_DEFINES no longer supported
   ^
In file included from /usr/include/openssl/evp.h:66:0,
                 from /usr/include/openssl/x509.h:73,
                 from /usr/include/openssl/ssl.h:156,
                 from ssl_private.h:90,
                 from ssl_engine_kernel.c:31:
/usr/local/include/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer supported
 # error OPENSSL_ALGORITHM_DEFINES no longer supported
   ^
In file included from /usr/include/openssl/evp.h:66:0,
                 from /usr/include/openssl/x509.h:73,
                 from /usr/include/openssl/ssl.h:156,
                 from ssl_private.h:90,
                 from ssl_engine_io.c:30:
/usr/local/include/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer supported
 # error OPENSSL_ALGORITHM_DEFINES no longer supported
   ^
In file included from /usr/include/openssl/evp.h:66:0,
                 from /usr/include/openssl/x509.h:73,
                 from /usr/include/openssl/ssl.h:156,
                 from ssl_private.h:90,
                 from ssl_engine_init.c:29:
/usr/local/include/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer supported
 # error OPENSSL_ALGORITHM_DEFINES no longer supported
   ^
In file included from /usr/include/openssl/evp.h:66:0,
                 from /usr/include/openssl/x509.h:73,
                 from /usr/include/openssl/ssl.h:156,
                 from ssl_private.h:90,
                 from ssl_engine_pphrase.c:31:
/usr/local/include/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer supported
 # error OPENSSL_ALGORITHM_DEFINES no longer supported
   ^
In file included from /usr/include/openssl/evp.h:66:0,
                 from /usr/include/openssl/x509.h:73,
                 from /usr/include/openssl/ssl.h:156,
                 from ssl_private.h:90,
                 from mod_ssl.c:27:
/usr/local/include/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer supported
 # error OPENSSL_ALGORITHM_DEFINES no longer supported
   ^
In file included from /usr/include/openssl/evp.h:66:0,
                 from /usr/include/openssl/x509.h:73,
                 from /usr/include/openssl/ssl.h:156,
                 from ssl_private.h:90,
                 from ssl_engine_config.c:29:
/usr/local/include/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer supported
 # error OPENSSL_ALGORITHM_DEFINES no longer supported
   ^
In file included from /usr/include/openssl/evp.h:66:0,
                 from /usr/include/openssl/x509.h:73,
                 from /usr/include/openssl/ssl.h:156,
                 from ssl_private.h:90,
                 from ssl_engine_log.c:30:
/usr/local/include/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer supported
 # error OPENSSL_ALGORITHM_DEFINES no longer supported
   ^
mod_ssl.c: In function 'ssl_cleanup_pre_config':
mod_ssl.c:313:5: warning: implicit declaration of function 'ENGINE_cleanup' [-Wimplicit-function-declaration]
     ENGINE_cleanup();
     ^
mod_ssl.c: In function 'ssl_hook_pre_config':
mod_ssl.c:350:5: warning: implicit declaration of function 'ENGINE_load_builtin_engines' [-Wimplicit-function-declaration]
     ENGINE_load_builtin_engines();
     ^
/usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:206: recipe for target 'ssl_engine_pphrase.lo' failed
make[3]: *** [ssl_engine_pphrase.lo] Error 1
make[3]: *** Waiting for unfinished jobs....
/usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:206: recipe for target 'ssl_engine_mutex.lo' failed
make[3]: *** [ssl_engine_mutex.lo] Error 1
/usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:206: recipe for target 'ssl_engine_config.lo' failed
make[3]: *** [ssl_engine_config.lo] Error 1
/usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:206: recipe for target 'ssl_engine_io.lo' failed
make[3]: *** [ssl_engine_io.lo] Error 1
/usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:206: recipe for target 'ssl_engine_log.lo' failed
make[3]: *** [ssl_engine_log.lo] Error 1
/usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:206: recipe for target 'ssl_engine_init.lo' failed
make[3]: *** [ssl_engine_init.lo] Error 1
/usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:206: recipe for target 'ssl_engine_kernel.lo' failed
make[3]: *** [ssl_engine_kernel.lo] Error 1
/usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:206: recipe for target 'mod_ssl.lo' failed
make[3]: *** [mod_ssl.lo] Error 1
make[3]: Leaving directory '/usr/local/directadmin/custombuild/httpd-2.4.25/modules/ssl'
/usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:75: recipe for target 'all-recursive' failed
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory '/usr/local/directadmin/custombuild/httpd-2.4.25/modules/ssl'
/usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:75: recipe for target 'all-recursive' failed
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory '/usr/local/directadmin/custombuild/httpd-2.4.25/modules'
/usr/local/directadmin/custombuild/httpd-2.4.25/build/rules.mk:75: recipe for target 'all-recursive' failed
make: *** [all-recursive] Error 1
#
Help please, I have tried everything....
 

dave097

Verified User
Joined
May 8, 2014
Messages
113
How do you have update openssl? And enter these commands and post the ouput here:

uname -a

cat /etc/debian_version
 

cRipTz

Verified User
Joined
Sep 5, 2014
Messages
12
Location
Almeria (España)
Code:
./config --prefix=/usr no-threads shared
make
make test
make install
Code:
# uname -a
Linux host 3.16.0-4-amd64 #1 SMP Debian 3.16.36-1+deb8u2 (2016-10-19) x86_64 GNU/Linux
#
Code:
# cat /etc/debian_version
8.7
#
Code:
# lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description:    Debian GNU/Linux 8.7 (jessie)
Release:        8.7
Codename:       jessie
#

Thanks in advance
 

dave097

Verified User
Joined
May 8, 2014
Messages
113
Code:
./config --prefix=/usr no-threads shared
make
make test
make install
Thanks in advance
Thank you! So you've build OpenSSL version 1.0.2k from the source? Why? We have also update OpenSSL but we using apt-get with a Pin-Priority for OpenSSL from the jessie-backports. Other packages comes from Jessie. Our custombuild still works.

In your post, I see:

/usr/local/include/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer supported
# error OPENSSL_ALGORITHM_DEFINES no longer supported

I did ls -l /usr/local/include/openssl/opensslconf.h && ls -l /usr/local/include/openssl/ and see (OpenSSL from apt-get):

ls: cannot access /usr/local/include/openssl/opensslconf.h: No such file or directory
ls: cannot access /usr/local/include/openssl/: No such file or directory

Please enter these commands and post the output here:

ls -l /usr/local/include/openssl/opensslconf.h
ls -l /usr/local/include/openssl/
dpkg --list | grep openssl
 

cRipTz

Verified User
Joined
Sep 5, 2014
Messages
12
Location
Almeria (España)
hello davydvries

Code:
# openssl version
OpenSSL 1.0.1t  3 May 2016
#
I recompiled it from apt-get (dont work)

Code:
# ls -l /usr/local/include/openssl/opensslconf.h
-rw-r--r-- 1 root staff 3919 Mar 20 18:31 /usr/local/include/openssl/opensslconf.h
#
Code:
# ls -l /usr/local/include/openssl/
total 4
-rw-r--r-- 1 root staff 3919 Mar 20 18:31 opensslconf.h
#
Code:
# dpkg --list | grep openssl
ii  libgnutls-openssl27:amd64        3.3.8-6+deb8u4              amd64        GNU TLS library - OpenSSL wrapper
ii  openssl                          1.0.1t-1+deb8u6             amd64        Secure Sockets Layer toolkit - cryptographic utility
#

Thanks in advance
 

dave097

Verified User
Joined
May 8, 2014
Messages
113
Hi cRipTz,

I have sent you a private message please could you reply :)?
 

cRipTz

Verified User
Joined
Sep 5, 2014
Messages
12
Location
Almeria (España)
Hi davydvries

No lucky.

I am trying to compile apache with nghttp2 and dont work...

https://forum.directadmin.com/showthread.php?t=52590


Code:
/usr/local/lib_http2/lib/libssl.a(s23_clnt.o): In function `ssl23_connect':
s23_clnt.c:(.text+0x4e7): undefined reference to `sk_value'
s23_clnt.c:(.text+0x4fe): undefined reference to `sk_num'
s23_clnt.c:(.text+0xb80): undefined reference to `sk_num'
s23_clnt.c:(.text+0xbe2): undefined reference to `sk_value'
s23_clnt.c:(.text+0xd17): undefined reference to `OpenSSLDie'
/usr/local/lib_http2/lib/libssl.a(t1_lib.o): In function `tls_decrypt_ticket':
t1_lib.c:(.text+0x41): undefined reference to `HMAC_CTX_init'
t1_lib.c:(.text+0x49): undefined reference to `EVP_CIPHER_CTX_init'
t1_lib.c:(.text+0xd8): undefined reference to `HMAC_CTX_cleanup'
t1_lib.c:(.text+0xe0): undefined reference to `EVP_CIPHER_CTX_cleanup'
t1_lib.c:(.text+0x19d): undefined reference to `HMAC_CTX_cleanup'
t1_lib.c:(.text+0x1bc): undefined reference to `EVP_CIPHER_CTX_cleanup'
t1_lib.c:(.text+0x1d4): undefined reference to `EVP_CIPHER_CTX_cleanup'
t1_lib.c:(.text+0x1dc): undefined reference to `HMAC_CTX_cleanup'
t1_lib.c:(.text+0x279): undefined reference to `EVP_CIPHER_CTX_cleanup'
t1_lib.c:(.text+0x2d4): undefined reference to `EVP_CIPHER_CTX_cleanup'
t1_lib.c:(.text+0x31d): undefined reference to `EVP_CIPHER_CTX_cleanup'
/usr/local/lib_http2/lib/libssl.a(t1_lib.o): In function `ssl_add_clienthello_tlsext':
t1_lib.c:(.text+0x1c97): undefined reference to `sk_value'
t1_lib.c:(.text+0x1cb2): undefined reference to `sk_num'
t1_lib.c:(.text+0x24f3): undefined reference to `sk_value'
t1_lib.c:(.text+0x251c): undefined reference to `sk_num'
t1_lib.c:(.text+0x260c): undefined reference to `sk_value'
t1_lib.c:(.text+0x2636): undefined reference to `sk_num'
/usr/local/lib_http2/lib/libssl.a(t1_lib.o): In function `ssl_parse_serverhello_tlsext':
t1_lib.c:(.text+0x3d1c): undefined reference to `BUF_strdup'
/usr/local/lib_http2/lib/libssl.a(t1_lib.o): In function `ssl_parse_clienthello_tlsext':
t1_lib.c:(.text+0x54ec): undefined reference to `sk_pop_free'
t1_lib.c:(.text+0x54fa): undefined reference to `sk_new_null'
t1_lib.c:(.text+0x556a): undefined reference to `sk_push'
t1_lib.c:(.text+0x5666): undefined reference to `sk_pop_free'
/usr/local/lib_http2/lib/libssl.a(t1_lib.o): In function `tls1_check_chain':

/------------------------------------------/

thank you very much
 

dave097

Verified User
Joined
May 8, 2014
Messages
113
Can you check out with the find command or locate command where OpenSSL state? I think there are files from the source.

Maybe you could look at this? It is explained how you can remove a source package.
 
Top