Re: configure bug with static openssl 1.1.1? - bugid 77288
| From: | Jan Ehrhardt | Date: | Sat, 26 Oct 2019 12:20:33 +0000 |
| Subject: | Re: configure bug with static openssl 1.1.1? - bugid 77288 | ||
| References: | 1 2 3 4 5 6 7 8 9 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-107704@lists.php.net to get a copy of this message | ||
"Helmut K. C. Tessarek" in php.internals (Tue, 22 Oct 2019 22:33:39
-0400):
>After a few more hours of trial and error I managed to get it working.
>
>However, the
-lpthread in OPENSSL_LIBS is ignored. I checked the
>config.log,
> but it wasn't added to the linker command. But adding it to LIBS solved the
>issue.
>
>This is the command that finally worked:
>
>./configure [snip] --with-openssl=/usr/local/ssl-1.1.1 [snip]
>CFLAGS=-I/usr/local/include LDFLAGS=-L/usr/local/lib LIBS="-lpthread"
>OPENSSL_LIBS="-L/usr/local/ssl-1.1.1/lib -l:libssl.a -l:libcrypto.a -ldl
>-lpthread" OPENSSL_CFLAGS="-I/usr/local/ssl-1.1.1/include"
>
>I will also update the bug, so that people have this info on file as a reference.
In my implementation I ran into a serious problem. PHPMailer stopped
sending mails to a remote smtp server over port 587. After really a lot
of debugging I found out that stream_socket_enable_crypto failed:
Warning: stream_socket_enable_crypto(): SSL operation failed with code 1
OpenSSL Error messages: error:1416F086:SSL routines:
tls_process_server_certificate:certificate verify failed
I wrote an example program to illustrate this:
https://gist.github.com/Jan-E/7f0055624b82c39dee6ae5b712f2c97a
Fill in a smtp-server of your choice (like smtp.gmail.com) and run it.
It is non optimized for speed, so it might take 2 minutes before the
results show. @Helmut and @Nikita: could you test this and share your
results here?
I had to revert back to PHP versions, compiled with the system OpenSSL
libs.
--
Jan