Compiling freeRadius with latest OPENSSL
Hi, I am trying to compile Freeradius 3.0.x with openSSL 1.1.0g . I am getting following errors. openssl version gives following output: OpenSSL 1.1.0g 2 Nov 2017 /modules/rlm_eap/libeap/eapsimlib.c CC src/modules/rlm_eap/libeap/fips186prf.c CC src/modules/rlm_eap/libeap/comp128.c CC src/modules/rlm_eap/libeap/eap_tls.c In file included from src/modules/rlm_eap/libeap/eap_tls.c:46:0: src/modules/rlm_eap/libeap/eap_tls.h:58:1: error: unknown type name ‘fr_tls_status_t’ fr_tls_status_t eaptls_process(eap_handler_t *handler); ^ src/modules/rlm_eap/libeap/eap_tls.h:62:36: error: unknown type name ‘tls_session_t’ int eaptls_request(EAP_DS *eap_ds, tls_session_t *ssn) CC_HINT(nonnull); ^ In file included from src/modules/rlm_eap/libeap/eap_tls.c:46:0: src/modules/rlm_eap/libeap/eap_tls.h:66:45: error: unknown type name ‘SSL’ void eaptls_gen_mppe_keys(REQUEST *request, SSL *s, char const *prf_label); ^ src/modules/rlm_eap/libeap/eap_tls.h:67:28: error: unknown type name ‘SSL’ void eapttls_gen_challenge(SSL *s, uint8_t *buffer, size_t size); ^ src/modules/rlm_eap/libeap/eap_tls.h:68:48: error: unknown type name ‘SSL’ void eaptls_gen_eap_key(RADIUS_PACKET *packet, SSL *s, uint32_t header); ^ src/modules/rlm_eap/libeap/eap_tls.h:69:35: error: unknown type name ‘SSL’ void eap_fast_tls_gen_challenge(SSL *ssl, uint8_t *buffer, uint8_t *scratch, size_t size, char const *prf_label) CC_HINT(nonnull); ^ src/modules/rlm_eap/libeap/eap_tls.h:103:1: error: unknown type name ‘tls_session_t’ tls_session_t *eaptls_session(eap_handler_t *handler, fr_tls_server_conf_t *tls_conf, bool client_cert); ^ src/modules/rlm_eap/libeap/eap_tls.h:103:55: error: unknown type name ‘fr_tls_server_conf_t’ tls_session_t *eaptls_session(eap_handler_t *handler, fr_tls_server_conf_t *tls_conf, bool client_cert); ^ src/modules/rlm_eap/libeap/eap_tls.h:107:1: error: unknown type name ‘fr_tls_server_conf_t’ fr_tls_server_conf_t *eaptls_conf_parse(CONF_SECTION *cs, char const *key); ^ src/modules/rlm_eap/libeap/eap_tls.c:64:1: error: unknown type name ‘tls_session_t’ tls_session_t *eaptls_session(eap_handler_t *handler, fr_tls_server_conf_t *tls_conf, bool client_cert) ^ src/modules/rlm_eap/libeap/eap_tls.c:64:55: error: unknown type name ‘fr_tls_server_conf_t’ If i compile with openssl 1.0.0f it works fine. Is it possible to compile freeradius with latest OPENSSL version. I have a requirement for using latest SSL. Regard Kavita
On Nov 22, 2017, at 6:18 AM, kavita jindal <kavita.jindal@gmail.com> wrote:
I am trying to compile Freeradius 3.0.x with openSSL 1.1.0g . I am getting following errors.
openssl version gives following output: ... src/modules/rlm_eap/libeap/eap_tls.h:66:45: error: unknown type name ‘SSL’
The "SSL" type is defined in the OpenSSL header files. If that isn't defined, then you're not building with OpenSSL. Alan DeKok.
Hi Alan, I am compiling freeradius using: ./configure --with-openssl-includes=/usr/include/ --with-openssl-libraries=/usr/lib/ CPPFLAGS="-I /usr/include/openssl/" CFLAGS="-I /usr/include/openssl/" Also i have verified the path and they contain SSL header files. Since the error is below "*fr_tls_status_t unknown" ..* this is defined in \freeradius-server-3.0.x\src\include\tls-h . Why the corresponding .h file is not present. In file included from src/modules/rlm_eap/libeap/eap_tls.c:46:0: src/modules/rlm_eap/libeap/eap_tls.*h:58:1: error: unknown type name ‘fr_tls_status_t’* fr_tls_status_t eaptls_process(eap_handler_t *handler); ^ src/modules/rlm_eap/libeap/eap_tls.h:62:36: error: unknown type name ‘tls_session_t’ int eaptls_request(EAP_DS *eap_ds, tls_session_t *ssn) CC_HINT(nonnull); ^ In file included from src/modules/rlm_eap/libeap/eap_tls.c:46:0: -Kavita On Wed, Nov 22, 2017 at 6:20 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Nov 22, 2017, at 6:18 AM, kavita jindal <kavita.jindal@gmail.com> wrote:
I am trying to compile Freeradius 3.0.x with openSSL 1.1.0g . I am
getting
following errors.
openssl version gives following output: ... src/modules/rlm_eap/libeap/eap_tls.h:66:45: error: unknown type name ‘SSL’
The "SSL" type is defined in the OpenSSL header files. If that isn't defined, then you're not building with OpenSSL.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
On Nov 22, 2017, at 11:52 PM, kavita jindal <kavita.jindal@gmail.com> wrote:
I am compiling freeradius using:
./configure --with-openssl-includes=/usr/include/ --with-openssl-libraries=/usr/lib/ CPPFLAGS="-I /usr/include/openssl/" CFLAGS="-I /usr/include/openssl/"
That doesn't make sense. You're supposed to pass the paths to --with-openssl-, NOT as CPPFLAGS and CFLAGS. In short, if you're not familiar with customizing software, you shouldn't customize software.
Also i have verified the path and they contain SSL header files.
Since the error is below "*fr_tls_status_t unknown" ..* this is defined in \freeradius-server-3.0.x\src\include\tls-h . Why the corresponding .h file is not present.
Because the "configure" process didn't find OpenSSL. If you read the output of "configure", it will tell you what's going on. Honestly, find an OS which has OpenSSL 1.1.0 pre-installed, and use that. Alan DeKok.
Hi Alan, Is it possible to install free radius with open ssl 1.1.0g forcefully or I have to manually compile with Openssl 1.1.0g?Has this combination been tested? Currently when I install free radius using apt-get It links libssl.1.0.0 present in lib directory. ldd command shows that. If I remove libssl1.1.0 and install libssl1.1.0g and then install free radius shall it link with libssl1.1.0 Automatically? Regards Kavita On Thursday, November 23, 2017, Alan DeKok <aland@deployingradius.com> wrote:
On Nov 22, 2017, at 11:52 PM, kavita jindal <kavita.jindal@gmail.com <javascript:;>> wrote:
I am compiling freeradius using:
./configure --with-openssl-includes=/usr/include/ --with-openssl-libraries=/usr/lib/ CPPFLAGS="-I /usr/include/openssl/" CFLAGS="-I /usr/include/openssl/"
That doesn't make sense. You're supposed to pass the paths to --with-openssl-, NOT as CPPFLAGS and CFLAGS.
In short, if you're not familiar with customizing software, you shouldn't customize software.
Also i have verified the path and they contain SSL header files.
Since the error is below "*fr_tls_status_t unknown" ..* this is defined in \freeradius-server-3.0.x\src\include\tls-h . Why the corresponding .h file is not present.
Because the "configure" process didn't find OpenSSL. If you read the output of "configure", it will tell you what's going on.
Honestly, find an OS which has OpenSSL 1.1.0 pre-installed, and use that.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
On Nov 23, 2017, at 8:54 AM, kavita jindal <kavita.jindal@gmail.com> wrote:
Is it possible to install free radius with open ssl 1.1.0g forcefully or I have to manually compile with Openssl 1.1.0g?Has this combination been tested?
Yes... FreeRADIUS works with OpenSSL 1.1.0
Currently when I install free radius using apt-get It links libssl.1.0.0 present in lib directory. ldd command shows that.
That's nice.
If I remove libssl1.1.0 and install libssl1.1.0g and then install free radius shall it link with libssl1.1.0 Automatically?
I'd hope so. Again, if you can't debug build issues, you shouldn't be doing custom builds. This list isn't the place to learn how your local C compiler and linker works. Alan DeKok.
participants (2)
-
Alan DeKok -
kavita jindal