I would try this USE_OPENSSL=1 SSL_INC=/path/to/include SSL_LIB=/path/to/lib
I had to do this myself when using openssl 1.1.0x branch on centos 7, but I thought it was because I use a non-default location. From: Norman Branitsky [mailto:norman.branit...@micropact.com] Sent: Wednesday, July 26, 2017 2:41 PM To: haproxy@formilux.org Subject: HAProxy 1.7.8 compile problem with new OpenSSL I have no problem compiling HAProxy 1.7.8 on a CentOS 7 box with the default distribution of OpenSSL: uname -a Linux ip-10-241-7-240 3.10.0-123.20.1.el7.centos.plus.x86_64 #1 SMP Thu Jan 29 22:05:39 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux openssl version OpenSSL 1.0.1e-fips 11 Feb 2013 On another server, I upgraded OpenSSL: # openssl version OpenSSL 1.0.2l 25 May 2017 This is my make statement: # make TARGET=linux2628 USE_OPENSSL=1 USE_PCRE=1 USE_SLZ=1 This is the end of the compile output: gcc -g -o haproxy src/haproxy.o src/base64.o src/protocol.o src/uri_auth.o src/standard.o src/buffer.o src/log.o src/task.o src/chunk.o src/channel.o src/listener.o src/lru.o src/xxhash.o src/time.o src/fd.o src/pipe.o src/regex.o src/cfgparse.o src/server.o src/checks.o src/queue.o src/frontend.o src/proxy.o src/peers.o src/arg.o src/stick_table.o src/proto_uxst.o src/connection.o src/proto_http.o src/raw_sock.o src/backend.o src/tcp_rules.o src/lb_chash.o src/lb_fwlc.o src/lb_fwrr.o src/lb_map.o src/lb_fas.o src/stream_interface.o src/stats.o src/proto_tcp.o src/applet.o src/session.o src/stream.o src/hdr_idx.o src/ev_select.o src/signal.o src/acl.o src/sample.o src/memory.o src/freq_ctr.o src/auth.o src/proto_udp.o src/compression.o src/payload.o src/hash.o src/pattern.o src/map.o src/namespace.o src/mailers.o src/dns.o src/vars.o src/filters.o src/flt_http_comp.o src/flt_trace.o src/flt_spoe.o src/cli.o src/ev_poll.o src/ev_epoll.o src/ssl_sock.o src/shctx.o ebtree/ebtree.o ebtree/eb32tree.o ebtree/eb64tree.o ebtree/ebmbtree.o ebtree/ebsttree.o ebtree/ebimtree.o ebtree/ebistree.o -lcrypt -lslz -ldl -lssl -lcrypto -ldl -L/usr/lib -lpcreposix -lpcre src/ssl_sock.o: In function `smp_fetch_ssl_fc_alpn': /tmp/haproxy-1.7.8/src/ssl_sock.c:4927: undefined reference to `SSL_get0_alpn_selected' src/ssl_sock.o: In function `ssl_sock_load_sctl': /tmp/haproxy-1.7.8/src/ssl_sock.c:1006: undefined reference to `SSL_CTX_add_server_custom_ext' src/ssl_sock.o: In function `ssl_sock_prepare_ctx': /tmp/haproxy-1.7.8/src/ssl_sock.c:2879: undefined reference to `SSL_CTX_set_alpn_select_cb' collect2: error: ld returned 1 exit status make: *** [haproxy] Error 1 Norman Norman Branitsky Cloud Architect MicroPact (o) 416.916.1752 (c) 416.843.0670 (t) 1-888-232-0224 x61752 www.micropact.com<http://www.micropact.com/> Think it > Track it > Done ________________________________ Information in this e-mail may be confidential. It is intended only for the addressee(s) identified above. If you are not the addressee(s), or an employee or agent of the addressee(s), please note that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this e-mail in error, please notify the sender of the error.