Error on startup: undefined symbol: SSL_set_ex_data
Hi all, this is my first post to the list. I am getting some startup errors now after upgrading to 1.1.1, although I never had 1.1.0 working in a real environment either. I get this error during startup in the logs: Error: radiusd.conf[10] Failed to link to module 'rlm_eap': /usr/lib/libeap-1.1.1.so: undefined symbol: SSL_set_ex_data Ive tried using the value in radiusd.conf about library paths to no avail. Ive not found a solution to this anywhere :(
Alan DeKok wrote:
Dave <dave@optionsdsl.ca> wrote:
Error: radiusd.conf[10] Failed to link to module 'rlm_eap': /usr/lib/libeap-1.1.1.so: undefined symbol: SSL_set_ex_data
You've built using an older version of OpenSSL. Use OpenSSL 0.9.7 or later.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Im using currently 0.9.7j for version openssl, I thought that may have been my problem but the version is up to date.
Alan DeKok wrote:
Dave <dave@optionsdsl.ca> wrote:
Im using currently 0.9.7j for version openssl, I thought that may have been my problem but the version is up to date.
Then you have two versions of OpenSSL installed.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
No its not the problem, even if I did, Ive never installed lower than 0.9.7 on this machine. 1.1.0 doesnt have this error, only versions 1.1.1 and 1.1.2 do. The error is also there in 0.9.8 version of openSSL
Alan DeKok wrote:
Dave <dave@optionsdsl.ca> wrote:
Error: radiusd.conf[10] Failed to link to module 'rlm_eap': /usr/lib/libeap-1.1.1.so: undefined symbol: SSL_set_ex_data
You've built using an older version of OpenSSL. Use OpenSSL 0.9.7 or later.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
freeradius 1.1.0 does not have this error, 1.1.1 and 1.1.2 both do. for me, using ssl 0.9.7j and 0.9.8b.
Dave <dave@optionsdsl.ca> wrote:
freeradius 1.1.0 does not have this error, 1.1.1 and 1.1.2 both do. for me, using ssl 0.9.7j and 0.9.8b.
1.1.2 doesn't have references to SSL_set_ex_data in libeap, and neither does 1.1.1. It looks to me like OpenSSL has wrappers around some other function that calls SSL_set_ex_data. And I don't know why it doesn't link, sorry. Alan DeKok.
types/rlm_eap_tls/rlm_eap_tls.c: SSL_set_ex_data(ssn->ssl, 0, (void *)handler); types/rlm_eap_tls/rlm_eap_tls.c: SSL_set_ex_data(ssn->ssl, 1, (void *)inst->conf); Found in the modules/rlm_eap Something in the TLS end of things. I do believe it to be a bug of some sorts either in openssl or freeradius Alan DeKok wrote:
Dave <dave@optionsdsl.ca> wrote:
freeradius 1.1.0 does not have this error, 1.1.1 and 1.1.2 both do. for me, using ssl 0.9.7j and 0.9.8b.
1.1.2 doesn't have references to SSL_set_ex_data in libeap, and neither does 1.1.1. It looks to me like OpenSSL has wrappers around some other function that calls SSL_set_ex_data.
And I don't know why it doesn't link, sorry.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dave <dave@optionsdsl.ca> wrote:
types/rlm_eap_tls/rlm_eap_tls.c: SSL_set_ex_data(ssn->ssl, 0, (void *)handler); types/rlm_eap_tls/rlm_eap_tls.c: SSL_set_ex_data(ssn->ssl, 1, (void *)inst->conf);
Found in the modules/rlm_eap
Please go back and read your earlier messages. The error message was from libeap, which is *not* the same as rlm_eap_tls.c Yes, I know those calls are in rlm_eap_tls.c.
Something in the TLS end of things. I do believe it to be a bug of some sorts either in openssl or freeradius
I would blame libtool & libltdl. FreeRADIUS asks to build libeap, and use OpenSSL. libtool says "ok". Then, when the system runs, it says "no... can't do that". Try running "ldd libeap.so", and seeing what it says. Maybe what you've done is put OpenSSL into a directory where the dynamic linker can't find it. Alan DeKok.
participants (2)
-
Alan DeKok -
Dave