Compiling openssh v6.5 with --with-ssl-dir not working

[Iain Morgan]

On Mon, Feb 03, 2014 at 14:46:20 +0000, Ethier, Michael wrote:
> Hello,
> 
> I am trying to compile openssh v6.5p1 with openssl-1.0.1f and it doesn't seem to find
> my custom openssl libraries and defaults to the system version. This has been working on all
> previous openssh version until v6.5. Is this a bug ? More details below:
> 
> [root at test openssh-6.5p1]# ./configure --prefix=/usr/local/openssh-6.5p1 --with-tcp-wrappers --with-selinux --with-kerberos5 --with-ssl-engine --with-pam --with-md5-passwords --with-ssl-dir=/usr/local/openssl-1.0.1f
> ...
> ...
> checking whether getpgrp requires zero arguments... yes
> checking openssl/opensslv.h usability... yes
> checking openssl/opensslv.h presence... yes
> checking for openssl/opensslv.h... yes
> checking OpenSSL header version... 90802f (OpenSSL 0.9.8e-rhel5 01 Jul 2008)
> checking OpenSSL library version... 90802f (OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008)
> checking whether OpenSSL's headers match the library... yes
> checking if programs using OpenSSL functions will link... yes
> 
> 
> So the version of SSL is not the proper one. I have installed openssl-1.0.1f in /usr/local:
> [root at iliadaccess04 src]# ls -l /usr/local/openssl-1.0.1f
> total 16
> drwxr-xr-x 2 root root 4096 Jan 15 08:35 bin
> drwxr-xr-x 3 root root 4096 Jan 15 08:35 include
> drwxr-xr-x 4 root root 4096 Jan 15 08:35 lib
> drwxr-xr-x 6 root root 4096 Jan 15 08:35 openssl
> 
> Any ideas ?
> 
> Thanks,
> Mike
> 

I suspect that you are running into a similar issue to what I
encountered during the early testing of the additional build-hardening
options.

If you check config.log, you will most likely find that linking against
your copy of libcrypto failed and that the build system fell back to the
system-provided library. Try rebuilding OpenSSL, but add -fPIC when you
run ./config. At least, that worked for me.

-- 
Iain Morgan