Hello everybody,

I'm trying to compile Squid 4.4 with OpenSSL 1.1.1a and I'm getting compilation 
errors like this one :


In file included from ../../src/security/Context.h:15:0,
                 from ../../src/security/forward.h:13,
                 from ../../src/SquidConfig.h:21,
                 from old_api.cc:24:
../../compat/openssl.h:121:2: error: #error missing both OpenSSL API features 
EVP_PKEY_up_ref (v1.1) and CRYPTO_LOCK_EVP_PKEY (v1.0)
 #error missing both OpenSSL API features EVP_PKEY_up_ref (v1.1) and 
CRYPTO_LOCK_EVP_PKEY (v1.0)

If I compile with the deprecated OpenSSL 1.0.2 branch it works but I don't want 
to use this branch. My goal is to offload SSL-Bump with hardware that needs 
OpenSSL 1.1.1.

I'm looking for a solution for a couple of days and I found absolutely nothing 
that helps in Squid documentation, source code and Google.


According to the "CompilingSquid" FAQ it should be feasible with Squid-4. Page 
https://wiki.squid-cache.org/SquidFaq/CompilingSquid says following :

However, please note that Squid-3.5<https://wiki.squid-cache.org/Squid-3.5> is 
not compatible with OpenSSL v1.1+. As of Debian Squeeze, or Ubuntu Zesty the 
libssl1.0-dev package must be used instead. This is resolved in the 
Squid-4<https://wiki.squid-cache.org/Squid-4> packages.


The configure script is run with following parameters :

./configure LDFLAGS=-ldl --prefix=/usr --includedir=/usr/include 
--datadir=/usr/share --bindir=/usr/sbin --libexecdir=/usr/lib/squid 
-localstatedir=/var --sysconfdir=/etc/squid --with-default-user=squid 
--with-openssl=/usr/local/ssl-1.1.1a/ --enable-ssl --enable-ssl-crtd 
--enable-linux-netfilter --enable-snmp --enable-useragent-log 
--enable-referer-log --enable-cachemgr --enable-truncate --enable-underscores 
--enable-stacktrace --enable-async-io=160 --enable-poll --enable-icmp 
--enable-ipfw-transparent --enable-forw-via-db --enable-cache-digests 
--with-included-ltdl --enable-ltdl-convenience


Can somebody tell me what's wrong ?


Regards


Yann

_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Reply via email to