Mailing List Archive: Fwd: undefined reference to `SSL_get0_chain

Fwd: undefined reference to `SSL_get0_chain_certs' error on compile

Dec 12, 2023, 7:44 AM

Post #1 of 4 (109 views)

We have a few later Rocky 8 servers, where TLS and DKIM etc all work fine
(so I think in general config ok).

However, I'm trying to compile Exim 4.97 on a couple of older Centos
servers with TLS (fine on older versions of exim without TLS).

However, I get an error

tls.o: In function `tls_client_stapling_cb':
tls.c:(.text+0x3315): undefined reference to `SSL_get0_chain_certs'

So I'm wondering if there's some (compile?) or lib setting wrong or missing
headers, certificates ? I think I've checked I've got the openssl headers
ok...

My main deviation of config

CC=gcc -std=gnu99 -lrt
USE_OPENSSL=yes
TLS_LIBS=-lssl -lcrypto
##SUPPORT_DANE=yes

My digging isn't really coming up with anything useful, can anyone point me
in the right direction ?

Thanks,

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: Fwd: undefined reference to `SSL_get0_chain_certs' error on compile [ In reply to ]

exim-users at lists

Dec 14, 2023, 4:04 AM

Post #2 of 4 (109 views)

Permalink

On 12/12/23 15:44, Ian B via Exim-users wrote:
> My digging isn't really coming up with anything useful, can anyone point me
> in the right direction ?

What TLS library and version of library?

If it's LibreSSL you may be out of luck
--
Cheers,
Jeremy

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: Fwd: undefined reference to `SSL_get0_chain_certs' error on compile [ In reply to ]

exim-users at lists

Dec 14, 2023, 4:07 AM

Post #3 of 4 (109 views)

Permalink

> I'm trying to compile Exim 4.97 on a couple of older Centos
> servers with TLS (fine on older versions of exim without TLS).
>
> However, I get an error
>
> tls.o: In function `tls_client_stapling_cb':
> tls.c:(.text+0x3315): undefined reference to `SSL_get0_chain_certs'

man SSL_get0_chain_certs
...
These functions were added in OpenSSL 1.0.2.

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: Fwd: undefined reference to `SSL_get0_chain_certs' error on compile [ In reply to ]

exim-users at lists

Dec 14, 2023, 6:03 AM

Post #4 of 4 (109 views)

Permalink

Thanks, default was OpenSSL 1.0.1e-fips however, I've just tried compiling
a new OpenSSL 1.1.1w, (output below), but weirdly I get an error when
testing sending a message with it...

exim: malformed message id 1rDlww-000000002Hg-16uR after -Mc option

Library version: Glibc: Compile: 2.12
Runtime: 2.12
Library version: BDB: Compile: Berkeley DB 4.7.25: (November 12, 2010)
Runtime: Berkeley DB 4.7.25: (November 12, 2010)
Library version: OpenSSL: Compile: OpenSSL 1.1.1w 11 Sep 2023
Runtime: OpenSSL 1.1.1w 11 Sep 2023
: built on: Thu Dec 14 11:23:08 2023 UTC
Library version: PCRE2: Compile: 10.21
Runtime: 10.21 2016-01-12
WHITELIST_D_MACROS unset
TRUSTED_CONFIG_LIST unset
Exim version 4.97 uid=0 gid=0 pid=13958 D=4

(4.96 is ok still), so probably at the point of giving up unless anyone can
think of something else odd that changed.

Kind regards,

Ian

On 12/12/23 15:44, Ian B via Exim-users wrote:
> > My digging isn't really coming up with anything useful, can anyone point
> me
> > in the right direction ?
>
> What TLS library and version of library?
>
> If it's LibreSSL you may be out of luck
> --
> Cheers,
> Jeremy
>
>

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/