You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2019/02/27 10:21:02 UTC

[Bug 63212] New: Unresolved Symbols while building against openssl 1.1.1b

https://bz.apache.org/bugzilla/show_bug.cgi?id=63212

            Bug ID: 63212
           Summary: Unresolved Symbols while building against openssl
                    1.1.1b
           Product: Apache httpd-2
           Version: 2.4.37
          Hardware: Other
                OS: AIX
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Build
          Assignee: bugs@httpd.apache.org
          Reporter: christian.tremel@itsv.at
  Target Milestone: ---

while trying to build against openssl 1.1.1b i got unresolved symbols errors.
the guys over there at openssl told me these symbols are deprecated and should
not be used any more

ld: 0711-317 ERROR: Undefined symbol: .TLS_client_method
ld: 0711-317 ERROR: Undefined symbol: .OPENSSL_init_ssl
ld: 0711-317 ERROR: Undefined symbol: .SSL_CTX_set_options
ld: 0711-317 ERROR: Undefined symbol: .SSL_in_init
ld: 0711-317 ERROR: Undefined symbol: .OPENSSL_sk_num
ld: 0711-317 ERROR: Undefined symbol: .OPENSSL_sk_value
ld: 0711-317 ERROR: Undefined symbol: .X509_get_version
ld: 0711-317 ERROR: Undefined symbol: .X509_getm_notBefore
ld: 0711-317 ERROR: Undefined symbol: .X509_getm_notAfter
gmake[2]: *** [ab] Error 8
gmake[1]: *** [all-recursive] Error 1
gmake: *** [all-recursive] Error 1

github issue:

https://github.com/openssl/openssl/issues/8355

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 63212] Unresolved Symbols while building against openssl 1.1.1b

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=63212

Christophe JAILLET <ch...@wanadoo.fr> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|FIXED                       |INVALID

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 63212] Unresolved Symbols while building against openssl 1.1.1b

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=63212

William A. Rowe Jr. <wr...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |NEEDINFO

--- Comment #1 from William A. Rowe Jr. <wr...@apache.org> ---
The httpd release 2.4.37 has a significant vulnerability and should not be 
used in combination with OpenSSL 1.1.1 or later. Previous versions did not
correctly interoperate with OpenSSL 1.1.1 and later in the first place.

I've just run a build against the following components;
apr-1.6.5       brotli-1.0.7  httpd-2.4.38    openssl-1.1.1b
apr-util-1.6.1  curl-7.64.0   nghttp2-1.36.0

and encountered no problems on Fedora 29.

Please confirm you are building a shared OpenSSL 1.1.1b library, repeat using
the appropriate version of httpd 2.4.38, and if you encounter issues, you may
wish to raise these on users@httpd.apache.org (see
http://httpd.apache.org/lists.html#http-users for info.) This bug tracker is
only for tracking issues with httpd server sources themselves. It may be that
this is a defect of the OpenSSL 1.1.1 AIX build (I no longer have a
reproduction environment.)

If you can reproduce and confirm this is not an openssl defect, please include
the ./configure results of both the OpenSSL and httpd packages you attempted to
combine.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 63212] Unresolved Symbols while building against openssl 1.1.1b

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=63212

flynn8765 <ch...@itsv.at> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|NEEDINFO                    |RESOLVED

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 63212] Unresolved Symbols while building against openssl 1.1.1b

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=63212

--- Comment #3 from Rainer Jung <ra...@kippdata.de> ---
Please also note, that you provided a different list of undefined symbols in
your github oepnssl issue. Those symbols indeed hat the reverse property of
only existing in old versions og OpenSSL and not in new ones. So when you did
that compilation. it seems you were using old openssl header files and a new
library. Either way: OpenSSL header files and libraries must match in their
major version.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 63212] Unresolved Symbols while building against openssl 1.1.1b

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=63212

--- Comment #2 from Rainer Jung <ra...@kippdata.de> ---
I checked some of these undefined symbols. They had all the property, that they
are new to OpenSSL 1.1.1. So it looks to me, that during compilation you are
using header files from OpenSSL 1.1.1, but during linking you actually try to
link against pre-1.1.1 libraries. Loog at the paths given in the "-L" flags
during linking and check, what version of libssl and libcrypto are located in
these paths.

Regards,

Rainer

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 63212] Unresolved Symbols while building against openssl 1.1.1b

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=63212

--- Comment #4 from flynn8765 <ch...@itsv.at> ---
installing the different openssl streams in different locations makes the
problem go away. it seems installing the headers of the the two streams in the
same location brings up some bad inconsistencies.  this bug can be closed

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org