New subject: Error occurs if a specific openssl is specified and compiled.

13 Feb 2019

      Hello. 

I am trying to compile the radsecproxy using the modified openssl to use a
specific cipher.

However, if I set configure to look for openssl in a particular library and
compile radsecproxy, it will fail with multiple errors.

I want to know the cause. Am I trying it wrong?

Below is the error log.

gcc -DPACKAGE_NAME=\"radsecproxy\" -DPACKAGE_TARNAME=\"radsecproxy\"
-
DPACKAGE_VERSION=\"1.6.9\" -DPACKAGE_STRING=\"radsecproxy\ 1.6.9\" -
DPACKAGE_BUGREPORT=\&quot;radsecproxy(a)lists.nordu.net\&quot; -DPACKAGE_URL=\"\"
-
DPACKAGE=\"radsecproxy\" -DVERSION=\"1.6.9\" -DHAVE_MALLOPT=1 -
DUSE_OPENSSL=1 -I.  -DSYSCONFDIR=\"/usr/local/etc\"  -g -Wall -Werror -fno-
strict-aliasing -I/usr/local/openssl-aria/include -I/usr/local/openssl-
aria/include/openssl -Wall -pedantic -Wno-long-long -pthread -DRADPROT_UDP -
DRADPROT_TCP -DRADPROT_TLS -DRADPROT_DTLS -g -O2 -MT dtls.o -MD -MP -MF
.deps/dtls.Tpo -c -o dtls.o dtls.c

dtls.c: In function ‘dtlsread’:

dtls.c:175:15: error: dereferencing pointer to incomplete type

   BIO_free(ssl->rbio);

               ^

dtls.c:176:6: error: dereferencing pointer to incomplete type

   ssl->rbio = rbio;

      ^

dtls.c: In function ‘dtlsacccon’:

dtls.c:217:25: error: dereferencing pointer to incomplete type

             BIO_free(ssl->rbio);

                         ^

dtls.c:218:16: error: dereferencing pointer to incomplete type

             ssl->rbio = getrbio(ssl, rbios, 5);

                ^

dtls.c:219:21: error: dereferencing pointer to incomplete type

             if (!ssl->rbio)

                     ^

dtls.c: In function ‘dtlsserverwr’:

dtls.c:292:3: error: ‘ERR_remove_state’ is deprecated (declared at
/usr/local/openssl-aria/include/openssl/err.h:260) [-Werror=deprecated-
declarations]

   ERR_remove_state(0);

   ^

dtls.c: In function ‘dtlsservernew’:

dtls.c:414:5: error: ‘ERR_remove_state’ is deprecated (declared at
/usr/local/openssl-aria/include/openssl/err.h:260) [-Werror=deprecated-
declarations]

     ERR_remove_state(0);

     ^

dtls.c: In function ‘dtlsclientrd’:

dtls.c:671:5: error: ‘ERR_remove_state’ is deprecated (declared at
/usr/local/openssl-aria/include/openssl/err.h:260) [-Werror=deprecated-
declarations]

     ERR_remove_state(0);

     ^

cc1: all warnings being treated as errors

Below is the modified Makefile source. Please look at the check_ssl_dir

4047 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for OpenSSL" >&5

4048 $as_echo_n "checking for OpenSSL... " >&6; }

4049 SSL_DIR=

4050 found_ssl="no"

4051 

4052 # Check whether --with-ssl was given.

4053 if test "${with_ssl+set}" = set; then :

4054   withval=$with_ssl; check_ssl_dir="/usr/local/openssl-aria"

4055 else

4056   check_ssl_dir="/usr/local/openssl-aria"

4057 fi

4058 

4059 for dir in $check_ssl_dir ; do

4060    ssldir="$dir"

4061    if test -f "$dir/include/openssl/ssl.h"; then

4062      found_ssl="yes";

4063      SSL_DIR="${ssldir}"

4064      SSL_CFLAGS="-I$ssldir/include -I$ssldir/include/openssl";

4065      break;

4066    fi

4067    if test -f "$dir/include/ssl.h"; then

4068      found_ssl="yes";

4069      SSL_DIR="${ssldir}"

4070      SSL_CFLAGS="-I$ssldir/include/";

4071      break

4072    fi

4073 done

#####################################################

(주)누리텔레콤 신현오

사원 / 전력IoT개발팀

Mobile: 010-4796-2043

Office: 02-781-0755

Address : 전라남도 나주시 우정로 56 (토담리치타워 A동 501호)

#####################################################