Hi.

This is what I have:

I have from Debian wheezy repository : OpenSSL 1.0.1e as a binary package. Already installed on the normal location /usr/lib. => Heartbleed bug.

I did build from tar.gz file, OpenSSL 1.0.1g and installed it on /usr/local/ . This is the default --prefix in the ./config of OpenSSL

I built freeradius using the following configure command :

./configure --with-openssl-includes=/usr/local/ssl --with-openssl-libraries=/usr/local/ssl/lib

and without the

allow_vulnerable_openssl = yes

I still get freeradius want to run on OpenSSL 1.0.1e instead of 1.0.1g , and of course it will refuse, then, to run beacause of the heartbleed bug.

Also, I did tell ldconfig in /etc/ld.so.conf about the path "/usr/local/ssl/lib" just to make freeradius use OpenSSL 1.0.1g , I still get it from /usr/lib instead..

So how should I exactly link it to 1.0.1g?