David,
You tweaked my brain. It was indeed a libcurl thing. While I had the
right versions it obviously was using system OpenSSL so for those stuck
in the future for what it's worth....
* Rebuilt my OpenSSL with shared support.
* Was then able to build my own version of libcurl with
./configure --prefix=/opt/aa --with-ssl=/opt/aa --enable-libcurl
-option
* Then was able to rebuild mod_auth_cas - but I still needed to have
LD_FLAGS="-ldl"
./configure --prefix=/opt/aa --with-apxs=/opt/aa/bin/apxs
--with-apr=/opt/aa/bin/apr-1-config --with-openssl=/opt/aa
--with-libcurl=/opt/aa
So far so good.
Thanks All.
C
On 2019-11-04 1:05 p.m., David Hawes wrote:
On Mon, 4 Nov 2019 at 12:01, Colin Ryan <col...@caveo.ca> wrote:
David,
Yes I've built Apache2 itself with SSL using the safe external OpenSSL as I"m
trying to use with the module. When I run the totally to stock ./configure line I
posted it gives me
checking for openssl/ssl.h in /opt/aa... yes
checking whether compiling and linking against OpenSSL works... no
checking for CRYPTO_new_ex_data in -lcrypto... yes
checking openssl/crypto.h usability... yes
checking openssl/crypto.h presence... yes
checking for openssl/crypto.h... yes
checking openssl/x509.h usability... yes
checking openssl/x509.h presence... yes
checking for openssl/x509.h... yes
Everything compiles but when I install and ldd the .so of the module it's
linked to the system's OpenSSL lib's not the ones in my /opt/aa patch.
This is likely showing libraries linked to libcurl. Can you change the
output by setting LD_LIBRARY_PATH=/opt/aa/lib before running ldd?
If I export export CPPFLAGS="-I/opt/aa/include" and LDFLAGS="-L/opt/aa/lib/
-ldl"
Then I get "yes" on the compiling and linking line but the ldd still indicates
linkage to the system's version. I suspect the -ldl is needed as I'm dealing with the
static OpenSSL libssl.a and libcrypto.a..
If you're using a recent OpenSSL (1.1), you likely aren't linking
against libssl and libcrypto at all. Removing or commenting out lines
13529-13743 of configure (master) will remove these checks.
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/956ddcd6-2d10-b028-0870-745bcca596a5%40caveo.ca.
