2.0.5 on Solaris with openssl 0.9.8h

[Rafiqul Ahsan]

Alan, and all ,

I am facing some challenges on building Freeradius 2.0.5 (Solaris OS)
with openssl version 0.9.8h. The Solaris 10 come with prebuilt openssl
version, and found at /usr/sfw/bin/openssl, version 0.9.7d. Prior to
building freeradius I built newer version openssl (v.0.9.8h) located
in /usr/local/ssl. here are the two openssl version now I have in my
Solaris.

bash-3.00# openssl version
OpenSSL 0.9.8h 28 May 2008

bash-3.00# /usr/sfw/bin/openssl version
OpenSSL 0.9.7d 17 Mar 2004 (+ security patches to 2006-09-29)

When I built Freeradius 2.0.5 (I simply executed three comands,
./configure make and make install) , I was expecting that it would
build with my desired openssl version.

Aparantly, I found that certain has algorithm (sha256) is not
supporting when I work with freeradius (I mean with SSL version that
it was built with). However openssl version 0.9.8h should support
this. I sent openssl community this question, they wanted me to verify
whether I actualy built the freeradius with this new openssl version.
I am not able to understand what library it is actually built with,
because I could not figure out from build log, nor the configure. But
if I use the configure options as below, I see a rolling error (that
telling me that I must not have built the freeradius with openssl
0.9.8h ?) :


....... (see portion of my out when I executed make, after ./configure
./configure \
--prefix=/usr/local/freeradius \
--with-openssl=yes \
--with-openssl-dir=/usr/local/ssl \
--with-openssl-includes=/usr/local/ssl/include \
--with-openssl-libraries=/usr/local/ssl/lib )


RB5 -c peap.c -o peap.o >/dev/null 2>&1
/export/home/dev/freeradius-server-2.0.5/libtool --mode=link gcc
-release 2.0.5 \
-module -export-dynamic   -o rlm_eap_peap.la     \
-rpath /usr/local/lib rlm_eap_peap.lo peap.lo rlm_eap_peap.c peap.c
/export/home/dev/f
radius-server-2.0.5/src/lib/libfreeradius-radius.la
../../libeap/libfreeradius-eap.la
usr/local/ssl/lib -lcrypto -lssl -lcrypto -ldl -lnsl -lresolv -lsocket
-lposix4  -lpth
d
gcc -shared -Wl,-h -Wl,rlm_eap_peap-2.0.5.so -o
.libs/rlm_eap_peap-2.0.5.so  .libs/rlm
p_peap.o .libs/peap.o
-R/export/home/dev/freeradius-server-2.0.5/src/lib/.libs -R/exp
/home/dev/freeradius-server-2.0.5/src/modules/rlm_eap/libeap/.libs
-R/usr/local/lib -L
port/home/dev/freeradius-server-2.0.5/src/lib/.libs
/export/home/dev/freeradius-server
0.5/src/lib/.libs/libfreeradius-radius.so
../../libeap/.libs/libfreeradius-eap.so -L/u
local/ssl/lib -lssl -lcrypto -ldl -lnsl -lresolv -lsocket -lposix4
-lpthread -lc
Text relocation remains                         referenced
    against symbol                  offset      in file
<unknown>                           0x0
/usr/local/ssl/lib/libssl.a(ssl_lib.o)
<unknown>                           0x4
/usr/local/ssl/lib/libssl.a(ssl_lib.o)
<unknown>                           0x8
/usr/local/ssl/lib/libssl.a(ssl_lib.o)
<unknown>                           0xc
/usr/local/ssl/lib/libssl.a(ssl_lib.o)
<unknown>                           0x10
/usr/local/ssl/lib/libssl.a(ssl_lib.o)
<unknown>                           0x14
/usr/local/ssl/lib/libssl.a(ssl_lib.o)
<unknown>                           0x18
/usr/local/ssl/lib/libssl.a(ssl_lib.o)
<unknown>                           0x1c
/usr/local/ssl/lib/libssl.a(ssl_lib.o)
<unknown>                           0x20
/usr/local/ssl/lib/libssl.a(ssl_lib.o)
<unknown>                           0x24
/usr/local/ssl/lib/libssl.a(ssl_lib.o)
<unknown>                           0x28
/usr/local/ssl/lib/libssl.a(ssl_lib.o)
<unknown>                           0x2c
/usr/local/ssl/lib/libssl.a(ssl_lib.o)
<unknown>                           0x30
/usr/local/ssl/lib/libssl.a(ssl_lib.o)
<unknown>                           0x34
/usr/local/ssl/lib/libssl.a(ssl_lib.o)
<unknown>                           0x38
/usr/local/ssl/lib/libssl.a(ssl_lib.o)
<unknown>                           0x3c
/usr/local/ssl/lib/libssl.a(ssl_lib.o)
<unknown>                           0x40
/usr/local/ssl/lib/libssl.a(ssl_lib.o)



On 8/7/08, Rafiqul Ahsan <rafiqul.ahsan at gmail.com> wrote:
> I changed the Makefile for random file creation step (as a fix for my
> earlier posted error)...
>
> This is what I found at Makefile  :
>
> random:
>        @if [ -e /dev/urandom ] ; then \
>                dd if=/dev/urandom of=./random count=10 >/dev/null 2>&1; \
>        else \
>                date > ./random; \
>        fi
>
> I Changed to ...
>
> random
>          date > ./random;
>
> That solved my earlier problem, and now my server is listening.
>
> Thanks,
> Rafi
>
>
>
>
>
>
>
> On 8/7/08, Rafiqul Ahsan <rafiqul.ahsan at gmail.com> wrote:
> > I see below error when I execute bootstrap
> >
> > bash-3.00# /usr/local/etc/raddb/certs/bootstrap
> > ...............................................
> > make: Nothing to be done for `ca'.
> > make: Nothing to be done for `server'.
> > make: `dh' is up to date.
> > /bin/sh: test: argument expected
> > make: *** [random] Error 1
> >
> > On 8/7/08, Alan DeKok <aland at deployingradius.com> wrote:
> > > Rafiqul Ahsan wrote:
> > > > Thanks, I was able to build freeradius 2.0.5 on Solaris 10. However,
> > > > server is not running, and I see below error when I run "radiusd -X".
> > > > Here is the output.
> > > ...
> > > >       make_cert_command = "/usr/local/etc/raddb/certs/bootstrap"
> > > >    }
> > > > Exec-Program output:
> > >
> > >  It's trying to run the bootstrap command.  It's not working.
> > >
> > >  Run the bootstrap command by hand, and then re-start the server.
> > >
> > >  Alan DeKok.
> > > -
> > > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> > >
> >
> >
> > --
> > Rafiqul Ahsan
> >
>
>
> --
> Rafiqul Ahsan
>


-- 
Rafiqul Ahsan