Hi, It builds fine even with the openssl 1.1.1 dev branch:
$ openvpn --version: OpenVPN 2.5_git [git:master/1394192b210cb3c6] x86_64-unknown-linux-gnu [SSL (OpenSSL)] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on May 31 2018 library versions: OpenSSL 1.1.1-dev xx XXX xxxx > > When I switch to the OpenSSL version 1.1.1 libs, changing > only the _FLAGS/_LIBS spec, > > - export OPENSSL_CFLAGS="-I/usr/local/include > -I/opt/ssl11/include -I/usr/include" > - export OPENSSL_LIBS="-L/opt/ssl11/lib64 > -Wl,-rpath,/opt/ssl11/lib64 -lssl -lcrypto" > + export OPENSSL_CFLAGS="-I/usr/local/include > -I/opt/ssl11/include -I/usr/include" > + export OPENSSL_LIBS="-L/opt/ssl11/lib64 > -Wl,-rpath,/opt/ssl11/lib64 -lssl -lcrypto" These two lines look identical to the two it replaces -- so what changed? > > if still configures OK, but `make` dies, > > ... > /usr/bin/gcc-8 -DHAVE_CONFIG_H -I. -I../.. -I../../include > -I../../include -I../../src/compat -O3 -Wall -fstack-protector-strong > -funwind-tables -fasynchronous-unwind-tables -fmessage-length=0 > -grecord-gcc-switches -D_FORTIFY_SOURCE=2 -I/usr/local/include > -I/opt/ssl11/include -I/usr/include > -DPLUGIN_LIBDIR=\"/opt/openvpn/lib64/openvpn/plugins\" -Wall > -Wno-unused-parameter -Wno-unused-function -O3 -Wall -fstack-protector-strong > -funwind-tables -fasynchronous-unwind-tables -fmessage-length=0 > -grecord-gcc-switches -fPIC -DPIC -D_GNU_SOURCE -fno-strict-aliasing -Wall > -std=c99 -MT ssl_openssl.o -MD -MP -MF .deps/ssl_openssl.Tpo -c -o > ssl_openssl.o ssl_openssl.c > socket.c: In function ‘print_link_socket_actual_ex’: > socket.c:2772:14: warning: unused variable ‘ifname’ > [-Wunused-variable] > char ifname[IF_NAMESIZE] = "[undef]"; > ^~~~~~ > ssl_openssl.c: In function ‘tls_init_lib’: > ssl_openssl.c:74:5: warning: implicit declaration of function > ‘SSL_library_init’; did you mean ‘SSL_in_init’? > [-Wimplicit-function-declaration] > SSL_library_init(); > ^~~~~~~~~~~~~~~~ > > SSL_in_init > ssl_openssl.c:76:5: warning: implicit declaration of function > ‘SSL_load_error_strings’; did you mean ‘ERR_lib_error_string’? > [-Wimplicit-function-declaration] > SSL_load_error_strings(); > ^~~~~~~~~~~~~~~~~~~~~~ Unable to find those functions in the headers and other similar errors point to something wrong/unusual with the openssl build. As if -DOPENSSL_API_COMPAT has been set to some large value (like 0x10100000L meaning 1.1). That should be left undefined (i.e., at its default, which I believe is 0). Selva ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
