cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: Building curl without SSLV2

From: Ray Satiro via curl-library <curl-library_at_cool.haxx.se>
Date: Wed, 2 Mar 2016 15:42:11 -0500

On 3/2/2016 8:37 AM, ashish mahamuni wrote:
> Yesterday, openssl released 1.0.2f release, where SSLv2 is disabled by
> default.
> I am building curl library on OSX with following options:
>
> ./configure --prefix=${my_prefix} --with-pic *--with-darwinssl
> --with-ssl=/path/to/openssl/1.0.2f* --without-libidn --disable-dict
> --disable-telnet --disable-pop3 --disable-imap --disable-smtp
> --disable-gopher --enable-static --disable-shared --disable-ldap
> --without-zlib
>
> Here, I am using --with-darwinssl and --with-ssl=/path/to/openssl/1.0.2f
> ( I am not sure if specifying both make sense or not )
>
> Now, while building my shared objects I link using my openssl 1.0.2f
> and the curl library ( build using above configuration ), I am
> receiving following error:
>
> Undefined symbols for _SSLv2_client_method, referenced from:
> _ossl_connect_common in libcurl.a
>
> I was hoping that specifying --with-ssl would convince libcurl to not
> use SSLv2.
>
> Any idea how to get this working?
>

As Daniel said use only one backend. I assume you mean 1.0.2g not f.
Configure looks for SSLv2_client_method [1]. Check to make sure the
with-ssl specifies where you actually have 1.0.2g installed. Check
config.log for a line 'checking for SSLv2_client_method' and see what
comes after it. It should say undefined reference. If not check the gcc
line and make sure it's passing the right locations.

For example in Ubuntu 14 I build OpenSSL 1.0.2g and install to prefix
/usr/local/ssl. I then build curl using ./configure
--with-ssl=/usr/local/ssl and install that.

[1]: https://github.com/curl/curl/blob/curl-7_47_1/configure.ac#L1643

-------------------------------------------------------------------
List admin: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2016-03-02