Hi All,

I'm having a tad of a problem trying to build HAProxy 1.5-dev19 with
OpenSSL Support.

I think I've tracked down the issue but I don't quite know where to go from
here or really what to do next so I'm kind of hoping that someone her can
provide a little insight for me.

I've downloaded the latest build from the HAProxy GIT commit id
00f0084752eab236af80e61291d672e835790cff onto a new Centos 6.4 x64 box with
all (I think) required RPM's and their sister devel packages.

When I run the following make command:
make TARGET=linux2628 ARCH=x86_64 USE_STATIC_PCRE=1 USE_LINUX_TPROXY=1
USE_OPENSSL=1

I'm greeted with the following error message:

gcc -Iinclude -Iebtree -Wall -m64 -march=x86-64 -O2 -g
-fno-strict-aliasing       -DCONFIG_HAP_LINUX_SPLICE -DTPROXY
-DCONFIG_HAP_LINUX_TPROXY -DCONFIG_HAP_CRYPT -DENABLE_POLL -DENABLE_EPOLL
-DUSE_CPU_AFFINITY -DASSUME_SPLICE_WORKS -DUSE_ACCEPT4 -DNETFILTER
-DUSE_GETSOCKNAME -DUSE_OPENSSL -DUSE_SYSCALL_FUTEX -DUSE_PCRE
-I/usr/include  -DCONFIG_HAPROXY_VERSION=\"1.5-dev19\"
-DCONFIG_HAPROXY_DATE=\"2013/06/17\" -c -o src/ssl_sock.o src/ssl_sock.c
src/ssl_sock.c: In function 'ssl_sock_prepare_srv_ctx':
src/ssl_sock.c:796: error: âstruct checkâ has no member named 'xprt'
make: *** [src/ssl_sock.o] Error 1

Now if I edit src/ssl_sock.c line 796 and comment out
'srv->check.xprt = &ssl_sock;' and replace it with 'srv->xprt = &ssl_sock;'

HAProxy and OpenSSL compile correctly:

# ./haproxy -vv
HA-Proxy version 1.5-dev19 2013/06/17
Copyright 2000-2013 Willy Tarreau <[email protected]>

Build options :
  TARGET  = linux2628
  CPU     = generic
  CC      = gcc
  CFLAGS  = -m64 -march=x86-64 -O2 -g -fno-strict-aliasing
  OPTIONS = USE_LINUX_TPROXY=1 USE_OPENSSL=1 USE_STATIC_PCRE=1

Default settings :
  maxconn = 2000, bufsize = 16384, maxrewrite = 8192, maxpollevents = 200

Encrypted password support via crypt(3): yes
Built without zlib support (USE_ZLIB not set)
Compression algorithms supported : identity
Built with OpenSSL version : OpenSSL 1.0.0-fips 29 Mar 2010
Running on OpenSSL version : OpenSSL 1.0.0-fips 29 Mar 2010
OpenSSL library supports TLS extensions : yes
OpenSSL library supports SNI : yes
OpenSSL library supports prefer-server-ciphers : yes
Built with PCRE version : 7.8 2008-09-05
PCRE library supports JIT : no (USE_PCRE_JIT not set)
Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT
IP_FREEBIND

Available polling systems :
      epoll : pref=300,  test result OK
       poll : pref=200,  test result OK
     select : pref=150,  test result OK
Total: 3 (3 usable), will use epoll.


So where do I go now or is this correct?
I've tried this with OpenSSL 1.0.1e to and I get the same problem.

Thanks in advance.


~Scott



-- 
With Kind Regards.

Scott McKeown
Loadbalancer.org
http://www.loadbalancer.org

Reply via email to