configure in 7.1p1 fails on Solaris 10 SPARC

[Borut Hadžialić]

Hello,

it might be that you compiled and installed 64-bit openssl libraries, but 
are doing a 32-bit openssh build. 

In this case your 64-bit openssl libraries are 'not found' (although they 
are in correct place, and the '--with-ssl-dir' is correctly set), and the 
openssh Configure scripts falls back to the old/unwanted 32-bit openssl 
libraries in /usr/sfw/lib

This worked for me (on SunOS 5.10 Generic_150401-22 i86pc i386 i86pc 
Solaris, with gcc (GCC) 3.4.3 )

1. Configure for openssl
x at y:~/build/openssl-1.0.1s > ./Configure solaris-x86-gcc 
--prefix=/some/path/openssl-1.0.1s 
--openssldir=/some/path/openssl-1.0.1s/openssl shared
(solaris-x86-gcc configures for a 32-bit build. I had to use './Configure' 
because './config' was throwing errors when solaris-x86-gcc was specified)
make, make install, etc..

2. Configure for openssh-7.2p2:
x at y:~/build/openssh-7.2p2 >./configure --prefix /some/path/openssh-7.2p2 
--with-ssl-dir=/some/path/openssl-1.0.1s --with-md5-passwords 
--your-other-options ....

No other configuration was needed (LDFLAGS, LD_LIBRARY_PATH, CPPFLAGS, 
etc..)

On Monday, 31 August 2015 17:12:21 UTC+2, Bernt Jernberg wrote:
>
> Hi, 
>
> I am trying to build the 7.1p1 on Solaris 10 SPARC. 
> I have build OpenSSL 1.0.1p and installed it in /opt/local/openssl. 
> Configure options for that: 
>
> export 
> PATH=/opt/local/bin:/usr/sfw/bin:/usr/ccs/bin:/usr/bin:/usr/sbin:/sbin 
> export MAKE=gmake 
> ./Configure shared solaris64-sparcv9-gcc -R/usr/sfw/lib/sparcv9 
> -R/opt/local/openssl/lib --prefix=/opt/local/openssl 
> gmake test 
> gmake install 
>
> export 
> PATH=/opt/local/bin:/usr/sfw/bin:/usr/ccs/bin:/usr/bin:/usr/sbin:/sbin 
> ./configure --sysconfdir=/etc/opt/openssh \ 
>             --prefix=/opt/local \ 
>             --with-solaris-contracts \ 
>             --with-tcp-wrappers=/usr/sfw/lib \ 
>             --with-ssl-dir=/opt/local/openssl \ 
>             --with-audit=bsm \ 
>             --without-bsd-auth \ 
>             --with-zlib=/usr/sfw/lib \ 
>             --with-privsep-path=/var/opt/empty \ 
>             --with-pam \ 
>             --with-privsep-user=sshd \ 
>             --with-default-path=/opt/local/bin:/usr/bin:/usr/sbin:/sbin \ 
>
> --with-superuser-path=/opt/local/sbin:/opt/local/bin:/sbin:/usr/sbin:/usr/bin 
>
> \ 
>             --with-kerberos5=/opt/local 
> CPPFLAGS='-I/opt/local/openssl/include' LDFLAGS='-L/opt/local/openssl/lib' 
>
> # crle 
>
> Configuration file [version 4]: /var/ld/ld.config 
>   Default Library Path (ELF): 
> /opt/local/openssl/lib:/lib:/usr/lib:/usr/ccs/lib:/usr/sfw/lib 
>   Trusted Directories (ELF):    /lib/secure:/usr/lib/secure  (system 
> default) 
>
> Command line: 
>   crle -c /var/ld/ld.config -l 
> /opt/local/openssl/lib:/lib:/usr/lib:/usr/ccs/lib:/usr/sfw/lib 
>
>
> I am using the default compiler: 
>
> # /usr/sfw/bin/gcc --version 
> gcc (GCC) 3.4.3 (csl-sol210-3_4-branch+sol_rpath) 
> Copyright (C) 2004 Free Software Foundation, Inc. 
> This is free software; see the source for copying conditions.  There is NO 
> warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR 
> PURPOSE. 
>
> # uname -a 
> SunOS myhost 5.10 Generic_142900-11 sun4u sparc SUNW,Sun-Fire-V215 
>
> No matter what I do the configure fails with: 
>
> checking OpenSSL header version... 1000110f (OpenSSL 1.0.1p 9 Jul 2015) 
> checking OpenSSL library version... configure: error: OpenSSL >= 0.9.8f 
> required (have "0090704f (OpenSSL 0.9.7d 17 Mar 2004 (+ security fixes 
> for: 
> CVE-2005-2969 CVE-2006-2937 CVE-2006-2940 CVE-2006-3738 CVE-2006-4339 
> CVE-2006-4343 CVE-2007-5135 CVE-2007-3108 CVE-2008-5077 CVE-2009-0590))") 
>
> It always checks the one installed in /usr/sfw/lib 
>
> Am I missing something obvious? 
>
> Bernt Jernberg 
> _______________________________________________ 
> openssh-unix-dev mailing list 
> openssh-... at mindrot.org <javascript:> 
> https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev 
>