David,
You tweaked my brain. It was indeed a libcurl thing. While I had the
right versions it obviously was using system OpenSSL so for those stuck
in the future for what it's worth....
* Rebuilt my OpenSSL with shared support.
* Was then able to build my own version of libcurl with
./configure --prefix=/opt/aa --with-ssl=/opt/aa --enable-libcurl
-option
* Then was able to rebuild mod_auth_cas - but I still needed to have
LD_FLAGS="-ldl"
./configure --prefix=/opt/aa --with-apxs=/opt/aa/bin/apxs
--with-apr=/opt/aa/bin/apr-1-config --with-openssl=/opt/aa
--with-libcurl=/opt/aa
So far so good.
Thanks All.
C
On 2019-11-04 1:05 p.m., David Hawes wrote:
On Mon, 4 Nov 2019 at 12:01, Colin Ryan <[email protected]> wrote:
David,
Yes I've built Apache2 itself with SSL using the safe external OpenSSL as I"m
trying to use with the module. When I run the totally to stock ./configure line I
posted it gives me
checking for openssl/ssl.h in /opt/aa... yes
checking whether compiling and linking against OpenSSL works... no
checking for CRYPTO_new_ex_data in -lcrypto... yes
checking openssl/crypto.h usability... yes
checking openssl/crypto.h presence... yes
checking for openssl/crypto.h... yes
checking openssl/x509.h usability... yes
checking openssl/x509.h presence... yes
checking for openssl/x509.h... yes
Everything compiles but when I install and ldd the .so of the module it's
linked to the system's OpenSSL lib's not the ones in my /opt/aa patch.
This is likely showing libraries linked to libcurl. Can you change the
output by setting LD_LIBRARY_PATH=/opt/aa/lib before running ldd?
If I export export CPPFLAGS="-I/opt/aa/include" and LDFLAGS="-L/opt/aa/lib/
-ldl"
Then I get "yes" on the compiling and linking line but the ldd still indicates
linkage to the system's version. I suspect the -ldl is needed as I'm dealing with the
static OpenSSL libssl.a and libcrypto.a..
If you're using a recent OpenSSL (1.1), you likely aren't linking
against libssl and libcrypto at all. Removing or commenting out lines
13529-13743 of configure (master) will remove these checks.
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/956ddcd6-2d10-b028-0870-745bcca596a5%40caveo.ca.
