I am trying to upgrade from HAProxy 1.5 to 2.0 and I ran into some SSL issues during installation. I updated my make command to the following which decreased the total errors by 80% but I am still getting SSL.sock errors. Any help would be greatly appreciated.
Dist: CentOS 7
OpenSSL Data
openssl version -a
OpenSSL 3.0.0 7 sep 2021 (Library: OpenSSL 3.0.0 7 sep 2021)
built on: Thu Oct 14 17:07:54 2021 UTC
platform: linux-x86_64
options: bn(64,64)
compiler: gcc -fPIC -pthread -m64 -Wa,–noexecstack -Wall -O3 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_BUILDING_OPENSSL -DZLIB -DNDEBUG
OPENSSLDIR: “/usr/local/ssl”
ENGINESDIR: “/usr/local/ssl/lib64/engines-3”
MODULESDIR: “/usr/local/ssl/lib64/ossl-modules”
Seeding source: os-specific
CPUINFO: OPENSSL_ia32cap=0x80202001478bfffd:0x0
HAProxy Version
haproxy -v
HA-Proxy version 2.0.25-6986403 2021/09/07 - https://haproxy.org/
ERROR
make TARGET=linux-glibc USE_PCRE=1 USE_OPENSSL=1 SSL_INC=/usr/local/ssl/include/openssl SSL_LIB=/usr/local/ssl/lib64 USE_ZLIB=1 USE_CRYPT_H=1 USE_LIBCRYPT=1
LD haproxy
src/ssl_sock.o: In function ssl_sock_ocsp_stapling_cbk': /usr/src/haproxy-2.0.25/src/ssl_sock.c:1141: undefined reference to EVP_PKEY_base_id’
src/ssl_sock.o: In function ssl_get_tmp_dh': /usr/src/haproxy-2.0.25/src/ssl_sock.c:2689: undefined reference to EVP_PKEY_base_id’
/usr/src/haproxy-2.0.25/src/ssl_sock.c:2695: undefined reference to EVP_PKEY_bits' src/ssl_sock.o: In function smp_fetch_ssl_c_used’:
/usr/src/haproxy-2.0.25/src/ssl_sock.c:7108: undefined reference to SSL_get_peer_certificate' src/ssl_sock.o: In function smp_fetch_ssl_x_sig_alg’:
/usr/src/haproxy-2.0.25/src/ssl_sock.c:7181: undefined reference to SSL_get_peer_certificate' src/ssl_sock.o: In function smp_fetch_ssl_x_serial’:
/usr/src/haproxy-2.0.25/src/ssl_sock.c:6813: undefined reference to SSL_get_peer_certificate' src/ssl_sock.o: In function smp_fetch_ssl_x_s_dn’:
/usr/src/haproxy-2.0.25/src/ssl_sock.c:7056: undefined reference to SSL_get_peer_certificate' src/ssl_sock.o: In function smp_fetch_ssl_x_version’:
/usr/src/haproxy-2.0.25/src/ssl_sock.c:7141: undefined reference to SSL_get_peer_certificate' src/ssl_sock.o:/usr/src/haproxy-2.0.25/src/ssl_sock.c:6861: more undefined references to SSL_get_peer_certificate’ follow
src/ssl_sock.o: In function ssl_sock_do_create_cert': /usr/src/haproxy-2.0.25/src/ssl_sock.c:1924: undefined reference to EVP_PKEY_base_id’
src/ssl_sock.o: In function ssl_sock_load_ocsp': /usr/src/haproxy-2.0.25/src/ssl_sock.c:1327: undefined reference to EVP_PKEY_base_id’
/usr/src/haproxy-2.0.25/src/ssl_sock.c:1293: undefined reference to EVP_PKEY_base_id' src/ssl_sock.o: In function ssl_sock_load_cert_chain_file’:
/usr/src/haproxy-2.0.25/src/ssl_sock.c:3446: undefined reference to EVP_PKEY_bits' /usr/src/haproxy-2.0.25/src/ssl_sock.c:3447: undefined reference to EVP_PKEY_base_id’
src/ssl_sock.o: In function ssl_sock_get_pkey_algo': /usr/src/haproxy-2.0.25/src/ssl_sock.c:6251: undefined reference to EVP_PKEY_bits’
/usr/src/haproxy-2.0.25/src/ssl_sock.c:6252: undefined reference to EVP_PKEY_base_id' src/ssl_sock.o: In function ssl_sock_get_remote_common_name’:
/usr/src/haproxy-2.0.25/src/ssl_sock.c:6603: undefined reference to SSL_get_peer_certificate' src/ssl_sock.o: In function ssl_sock_get_cert_used_sess’:
/usr/src/haproxy-2.0.25/src/ssl_sock.c:6630: undefined reference to `SSL_get_peer_certificate’
collect2: error: ld returned 1 exit status
make: *** [haproxy] Error 1
10 posts - 2 participants