It looks like your distro's libssl still has priority over the custom
one. To avoid both uninstalling libssl and forcing all apps to use the
newest library, I suggest you compile a hardcoded search path into
tls_mgm.so.
Just make a small modification in modules/tls_mgm/Makefile, like in this
example:
LIBS += -Wl,-rpath /home/liviu/lib $(shell $(SSL_BUILDER) --libs)
Compile the tls_mgm, and if all goes well, the linker should spot the
custom libssl first:
[liviu ◄ Y510P opensips (master)]$ ldd modules/tls_mgm/tls_mgm.so
linux-vdso.so.1 => (0x00007ffff040d000)
libssl.so.1.0.0 => /home/liviu/lib/libssl.so.1.0.0
(0x00007fd9cde0a000) <---- the forced "runtime path" is working!
libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007fd9cda21000)
libcrypto.so.1.0.0 => /lib/x86_64-linux-gnu/libcrypto.so.1.0.0
(0x00007fd9cd5dc000)
/lib64/ld-linux-x86-64.so.2 (0x000055a69a1b7000)
libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007fd9cd3d8000)
Another solution could be:
echo "/usr/local/lib" > /etc/ld.so.conf.d/libssl.conf; ldconfig
But note that this will "upgrade" the library for all apps in your
system that require it.
Liviu Chircu
OpenSIPS Developer
http://www.opensips-solutions.com
On 11.07.2017 21:58, Tito Cumpen wrote:
Group,
I've updated openssl in order to use opensips 2.3 but I am having
issues after compiling and running
openssl version -a
OpenSSL 1.0.2k 26 Jan 2017
built on: reproducible build, date unspecified
platform: linux-x86_64
options: bn(64,64) rc4(8x,int) des(idx,cisc,16,int) idea(int)
blowfish(idx)
compiler: gcc -I. -I.. -I../include -DOPENSSL_THREADS -D_REENTRANT
-DDSO_DLFCN -DHAVE_DLFCN_H -Wa,--noexecstack -m64 -DL_ENDIAN -O3 -Wall
-DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5
-DOPENSSL_BN_ASM_GF2m -DRC4_ASM -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM
-DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM
-DGHASH_ASM -DECP_NISTZ256_ASM
OPENSSLDIR: "/usr/local/ssl"
but when I run opensips I get
ERROR:tls_mgm:mod_init: unable to set the memory allocation functions
Jul 11 18:52:56 cloud-server-06 /sbin/opensips[32421]:
ERROR:tls_mgm:mod_init: NOTE: check if you are using openssl
1.0.1e-fips, (or other FIPS version of openssl, as this is known to be
broken; if so, you need to upgrade or downgrade to a different openssl
version!
Jul 11 18:52:56 cloud-server-06 /sbin/opensips[32421]:
ERROR:tls_mgm:mod_init: current version: OpenSSL 1.0.1e-fips 11 Feb 2013
How so I force opensips to use the newer version??
Thanks,
Tito
_______________________________________________
Users mailing list
[email protected]
http://lists.opensips.org/cgi-bin/mailman/listinfo/users
_______________________________________________
Users mailing list
[email protected]
http://lists.opensips.org/cgi-bin/mailman/listinfo/users
