openssh unix dev - Jul 2002 - [Bug 335] OpenSSL headers do not match your library

http://bugzilla.mindrot.org/show_bug.cgi?id=335

dyw at iohk.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Severity|major                       |normal
           Keywords|                            |help-wanted
         OS/Version|Linux                       |BSDI
            Summary|Compile PROBLEM!!!!         |OpenSSL headers do not match
                   |                            |your library



------- Additional Comments From dyw at iohk.com  2002-07-08 01:48 -------
checking whether OpenSSL's headers match the library... no
configure: error: Your OpenSSL headers do not match your library

On BSD/OS 4.2 with OpenSSL 0.9.6d, no problem configuring and compiling 3.1p1, 
but both 3.3p1 and 3.4p1 ended configuration with the above error message.

I checked but did not find unknown duplicate header files from previous versions
of OpenSSL.   Perhaps I was looking at the wrong places.


Best regards
David WU
dyw at iohk.com



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=335

markus at openbsd.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID



------- Additional Comments From markus at openbsd.org  2002-07-09 20:33 -------
some bsd/os patch for bsd/os 4.2 did update OpenSSL, but failed to
update either libcrypto.a or the includes. please tell bsdi.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=335

kzembower at jhuccp.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|INVALID                     |



------- Additional Comments From kzembower at jhuccp.org  2002-07-27 01:04
-------
Get this error running ./configure on openssh-3.4p1:
checking whether OpenSSL's headers match the library... no
configure: error: Your OpenSSL headers do not match your library

Installed openssl-0.9.6d and openssl-engine-0.9.6d to try to correct this error,
but still got the same result.

Didn't see the resolution, even though the bug is marked
"resolved". Sorry if
I missed it; please point it out to me.

Thanks for your work on this problem

-Kevin Zembower
kzembower at jhuccp.org



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=335





------- Additional Comments From dtucker at zip.com.au  2002-07-27 02:01 -------
It's normally an openssl installation problem. Check your config.log. Then
check
your system for multiple libcrypto.a's, libcrypto.so's and/or
opensslv.h's.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=335





------- Additional Comments From dtucker at zip.com.au  2002-07-27 17:42 -------
FYI I've put up some hints and a tool for diagnosing this type of problem up
on
http://www.zip.com.au/~dtucker/openssh/.

The tool (hopefully) finds all instances of OpenSSL and displays their versions 
and there's a patch to configure that displays the version it finds. With
these
you might be able to determine which ones configure is using.

Currently tested on Redhat with GCC only. Example output:
$ ./findssl.sh 
Searching for OpenSSL header files.
0x0090604fL /usr/include/openssl/opensslv.h
0x0090604fL /usr/local/ssl/include/openssl/opensslv.h

Searching for OpenSSL shared library files.
0x0090602fL /lib/libcrypto.so.0.9.6b
0x0090602fL /lib/libcrypto.so.2
0x0090581fL /usr/lib/libcrypto.so.0
0x0090602fL /usr/lib/libcrypto.so
0x0090581fL /usr/lib/libcrypto.so.0.9.5a
0x0090600fL /usr/lib/libcrypto.so.0.9.6
0x0090600fL /usr/lib/libcrypto.so.1

Searching for OpenSSL static library files.
0x0090602fL /usr/lib/libcrypto.a
0x0090604fL /usr/local/ssl/lib/libcrypto.a



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=335

kzembower at jhuccp.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at zip.com.au
             Status|REOPENED                    |RESOLVED
         Resolution|                            |FIXED



------- Additional Comments From kzembower at jhuccp.org  2002-07-31 05:09
-------
Darren, thank you so much for your help. With your guidance, I was able to get
OpenSSH 3.4.1 installed on my three remaining hosts.

For what it's worth, here's some of my notes.
The patch at your page didn't want to work at first. Here's what I did
to make
it work:
centernet:/tmp/openssh-3.4p1 # patch -i tucker.patch configure.ac 
patching file configure.ac
Hunk #1 FAILED at 769.
1 out of 1 hunk FAILED -- saving rejects to file configure.ac.rej
centernet:/tmp/openssh-3.4p1 # cat configure.ac.rej 
***************
*** 769,777 ****
  AC_MSG_CHECKING([whether OpenSSL's headers match the library])
  AC_TRY_RUN(
         [
  #include <string.h>
  #include <openssl/opensslv.h>
- int main(void) { return(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); }
         ],
         [
                 AC_MSG_RESULT(yes)
--- 769,781 ----
  AC_MSG_CHECKING([whether OpenSSL's headers match the library])
  AC_TRY_RUN(
         [
+ #include <stdio.h>
  #include <string.h>
  #include <openssl/opensslv.h>
+ int main(void) {
+        fprintf(stderr,"OpenSSL library %x headers %x\n", SSLeay(), 
OPENSSL_VERSION_NUMBER);
+        exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1); 
+ }
         ],
         [
                 AC_MSG_RESULT(yes)




centernet:/tmp/openssh-3.4p1 # patch -i tucker.patch -F 3 configure.ac 
patching file configure.ac
Hunk #1 succeeded at 774 with fuzz 3 (offset 5 lines).
centernet:/tmp/openssh-3.4p1 # 

As you can see, I increased the 'fuzz factor' (-F) to three from the
default of
2.

One two of my three hosts that failed in the OpenSSH install, the findssl.sh 
script found differing libraries, but on the third, it didn't find any
libraries
at all.

Regardless, all these systems were SuSE 7.1 or 7.2. I used 'rpm -e --nodeps 
openssl' to remove the previous version (I don't use any of the
dependancies
that it reported broken), then reinstalled OpenSSL (not the engine) 0.9.6d.

After that, the installation of OpenSSH 3.4 went normally.

Thank you again for your work on this problem

-Kevin Zembower




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.