<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><tt>It looks like your distro's libssl still has priority over
the custom one. To avoid both uninstalling libssl and forcing
all apps to use the newest library, I suggest you compile a
hardcoded search path into tls_mgm.so.</tt></p>
<p><tt>Just make a small modification in modules/tls_mgm/Makefile,
like in this example:</tt></p>
<p><tt></tt><tt>LIBS += -Wl,-rpath /home/liviu/lib $(shell
$(SSL_BUILDER) --libs)</tt></p>
<p><tt>Compile the tls_mgm, and if all goes well, the linker should
spot the custom libssl first:</tt></p>
<p><tt>[liviu ◄ Y510P opensips (master)]$ ldd
modules/tls_mgm/tls_mgm.so <br>
linux-vdso.so.1 => (0x00007ffff040d000)<br>
libssl.so.1.0.0 => /home/liviu/lib/libssl.so.1.0.0
(0x00007fd9cde0a000) <---- the forced "runtime path" is
working!<br>
libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6
(0x00007fd9cda21000)<br>
libcrypto.so.1.0.0 =>
/lib/x86_64-linux-gnu/libcrypto.so.1.0.0 (0x00007fd9cd5dc000)<br>
/lib64/ld-linux-x86-64.so.2 (0x000055a69a1b7000)<br>
libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2
(0x00007fd9cd3d8000)</tt></p>
<p><tt>Another solution could be:<br>
</tt></p>
<p><tt>echo "/usr/local/lib" > /etc/ld.so.conf.d/libssl.conf;
ldconfig<br>
</tt></p>
<p><tt>But note that this will "upgrade" the library for all apps in
your system that require it.<br>
</tt></p>
<pre class="moz-signature" cols="72">Liviu Chircu
OpenSIPS Developer
<a class="moz-txt-link-freetext" href="http://www.opensips-solutions.com">http://www.opensips-solutions.com</a></pre>
<div class="moz-cite-prefix">On 11.07.2017 21:58, Tito Cumpen wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CANZPVB4bbaS4XiTD2kJcsFM9T7XuAGBxUTaVXOnyca3r8yb7ew@mail.gmail.com">
<div dir="ltr">Group,
<div><br>
</div>
<div><br>
</div>
<div>I've updated openssl in order to use opensips 2.3 but I am
having issues after compiling and running </div>
<div><br>
</div>
<div><br>
</div>
<div>
<div> openssl version -a</div>
<div>OpenSSL 1.0.2k 26 Jan 2017</div>
<div>built on: reproducible build, date unspecified</div>
<div>platform: linux-x86_64</div>
<div>options: bn(64,64) rc4(8x,int) des(idx,cisc,16,int)
idea(int) blowfish(idx) </div>
<div>compiler: gcc -I. -I.. -I../include -DOPENSSL_THREADS
-D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -Wa,--noexecstack
-m64 -DL_ENDIAN -O3 -Wall -DOPENSSL_IA32_SSE2
-DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5
-DOPENSSL_BN_ASM_GF2m -DRC4_ASM -DSHA1_ASM -DSHA256_ASM
-DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM
-DWHIRLPOOL_ASM -DGHASH_ASM -DECP_NISTZ256_ASM</div>
<div>OPENSSLDIR: "/usr/local/ssl"</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div>but when I run opensips I get </div>
<div><br>
</div>
<div>
<div> ERROR:tls_mgm:mod_init: unable to set the memory
allocation functions</div>
<div>Jul 11 18:52:56 cloud-server-06 /sbin/opensips[32421]:
ERROR:tls_mgm:mod_init: NOTE: check if you are using openssl
1.0.1e-fips, (or other FIPS version of openssl, as this is
known to be broken; if so, you need to upgrade or downgrade
to a different openssl version!</div>
<div>Jul 11 18:52:56 cloud-server-06 /sbin/opensips[32421]:
ERROR:tls_mgm:mod_init: current version: OpenSSL 1.0.1e-fips
11 Feb 2013</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div>How so I force opensips to use the newer version??</div>
<div><br>
</div>
<div>Thanks,</div>
<div>Tito</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a>
<a class="moz-txt-link-freetext" href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a>
</pre>
</blockquote>
<br>
</body>
</html>