Thanks.
I see you solved the problem by copying the new version directly to /usr/bin 
and /usr/lib64.

I did this:

tar xvf /apps/Config/openssl-1.0.2-latest.tar.gz

cd openssl-1.0.2l

./config shared

make

make install

echo /usr/local/ssl/lib > /etc/ld.so.conf.d/libssl.conf

ldconfig

cd /tmp

tar xvf /apps/Config/haproxy-1.7.9.tar.gz

cd haproxy-1.7.9

yum install pcre-devel openssl-devel (If necessary.)

make TARGET=linux2628 USE_PCRE=1 USE_SLZ=1 USE_OPENSSL=1 
SSL_INC=/usr/local/ssl/include/openssl SSL_LIB=/usr/local/ssl/lib

make install

My main problem was the missing “shared” option for the “./config” command.

I see you use the following 2 make options:

USE_PCRE_JIT=1 USE_REGPARM=1

I didn’t notice them in the docs.
Are they recommended?

From: Denis Astahov [mailto:de...@trinimbus.com]
Sent: August-24-17 11:26 AM
To: Norman Branitsky <norman.branit...@micropact.com>
Cc: haproxy@formilux.org
Subject: RE: HAProxy 1.7.8 compile problem with new OpenSSL

In case you still need it:

# Install required libraries
sudo yum -y update
sudo yum -y install make gcc perl pcre-devel zlib-devel openssl-devel

# Install Updated Openssl-1.1.0f
wget https://www.openssl.org/source/openssl-1.1.0f.tar.gz
tar -zxf openssl-1.1.0f.tar.gz
cd openssl-1.1.0f
./config
make
sudo make install
sudo cp -f /usr/local/bin/openssl            /usr/bin
sudo cp -f /usr/local/lib64/libssl.so.1.1    /usr/lib64
sudo cp -f /usr/local/lib64/libcrypto.so.1.1 /usr/lib64
cd /usr/lib64
sudo ln -sf libssl.so.1.1    libssl.so
sudo ln -sf libcrypto.so.1.1 libcrypto.so
sudo ldconfig

# Install HAProxy 1.5 and Upgrade to 1.7
sudo yum -y install haproxy  # Install Generic Version (1.5) this will create 
necessary folders, config files, etc.
wget https://www.haproxy.org/download/1.7/src/haproxy-1.7.8.tar.gz
tar -xzf haproxy-1.7.8.tar.gz
cd haproxy-1.7.8
make TARGET=linux2628 USE_PCRE=1 USE_PCRE_JIT=1 USE_OPENSSL=1 USE_ZLIB=1 
USE_REGPARM=1
sudo make install
sudo cp -f /usr/local/sbin/haproxy /usr/sbin       # Overwrite version 1.5 with 
new 1.7
sudo service haproxy start
sudo chkconfig haproxy on

Respectfully,

Denis Astahov


Reply via email to