openldap安装遇到的openssl版本问题

骑猪看日落 2024-03-25 22:32 79阅读 0赞

### 安装openldap ###

执行`./configure --datadir /root/ldap/data` 遇到错误：

configure: error: in `/root/ldap/openldap-2.5.14':
    configure: error: OpenSSL 1.1.1 or newer required
    See `config.log' for more details

执行openssl version，看到它是1.1.1版本。更新openssl

### 更新openssl ###

wget https://www.openssl.org/source/openssl-3.1.0.tar.gz --no-check-certificate
    ./config --prefix=/usr/local/openssl
    make && make install
    openssl version

看到版本是3.1.0

### 回到openldap ###

执行`./configure --datadir /root/ldap/data`仍然报上面的错误  
此时再执行`openssl version` 发现openssl挂了：

openssl: error while loading shared libraries: libssl.so.3: cannot open shared object file: No such ...

### 解决openssl崩坏的问题 ###

为了定位原因，对比了刚刚安装（重装）openssl时的ldd

# ldd /usr/local/openssl/bin/openssl
            linux-vdso.so.1 =>  (0x00007ffd22bdd000)
            libssl.so.3  (0x00007f5a7ff4c000)
            libcrypto.so.3 (0x00007f5a7f8d1000)
            libdl.so.2 => /lib64/libdl.so.2 (0x00007f5a7f6cd000)
            libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f5a7f4b1000)
            libc.so.6 => /lib64/libc.so.6 (0x00007f5a7f0e3000)
            /lib64/ld-linux-x86-64.so.2 (0x00007f5a801f1000)

执行了openldap的configure之后的openssl：

# ldd /usr/local/openssl/bin/openssl
            linux-vdso.so.1 =>  (0x00007ffe521a9000)
            libssl.so.3  => not found
            libcrypto.so.3  => not found
            libdl.so.2 => /lib64/libdl.so.2 (0x00007f86fc06f000)
            libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f86fbe53000)
            libc.so.6 => /lib64/libc.so.6 (0x00007f86fba85000)
            /lib64/ld-linux-x86-64.so.2 (0x00007f86fc273000)

在openssl安装目录下，/usr/local/openssl/bin里找到了这两个so，在/usr/lib里建立链接：

ln -s /usr/local/openssl/lib64/libssl.so.3 /usr/lib/libssl.so.3
    ln -s /usr/local/openssl/lib64/libcrypto.so.3 libcrypto.so.3
    ldconfig

通过`ldconfig`刷新linker的缓存。验证这个库被linker正确识别，执行`ldconfig -v`  
这时openssl的ldd变成：

# ldd /usr/local/openssl/bin/openssl
            linux-vdso.so.1 =>  (0x00007ffe67bcd000)
            libssl.so.3 => /lib/libssl.so.3 (0x00007f96163d8000)
            libcrypto.so.3 => /lib/libcrypto.so.3 (0x00007f9615d5d000)
            libdl.so.2 => /lib64/libdl.so.2 (0x00007f9615b59000)
            libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f961593d000)
            libc.so.6 => /lib64/libc.so.6 (0x00007f961556f000)
            /lib64/ld-linux-x86-64.so.2 (0x00007f961667d000)

nice!, `openssl version`正常。至于为什么执行配置openldap会崩坏openssl，不得而知。

### 回来安装openldap ###

再次执行configure，还是报上面的错误。看config.log，发现这样一行：

| #include <openssl/opensslv.h>
    | #if OPENSSL_VERSION_NUMBER < 0x1010100fL
    | #error "OpenSSL is too old"
    | #endif
    configure:17443: error: in `/root/ldap/openldap-2.5.14':
    configure:17445: error: OpenSSL 1.1.1 or newer required
    See `config.log' for more details

在系统中搜索这个文件opensslv.h，发现有好几处。最可疑的/usr/include/openssl/opensslv.h，这里`OPENSSL_VERSION_NUMBER` 被定义为1.1  
在openssl的安装目录/usr/local/openssl/include找到这些h文件，删除/usr/local下面的openssl，建链接

ln -s /usr/local/openssl/include /usr/include/openssl

执行

./configure --datadir /root/ldap/data --prefix=/usr/local/openldap
    make depend
    make

done!