RE: [cobalt-security] SSLeay installation

["Gary M. Root" <groot@xxxxxxxxxxxxxxx>]

Hi John,

Yes, I've installed it on a bunch of machines. The key is to do a
standard install of OpenSSL first. Here is what works for us:

Install openSSL and Crypt-SSLeay using standard extract, build, and
install procedures;
a.	openssl-0.9.6b.tar.gz example:
i.	gzip -dc openssl-0.9.6b.tar.gz | tar -xof -
ii.	cd openssl-0.9.6b
iii.	./config
iv.	make
v.	make test
vi.	make install
b.	Crypt-SSLeay-0.31.tar.gz example:
i.	gzip -dc Crypt-SSLeay-0.31.tar.gz | tar -xof -
ii.	cd Crypt-SSLeay-0.31
iii.	perl Makefile.PL
iv.	make
v.	make test
vi.	make install

Good luck,
Gary

|-----Original Message-----
|From: cobalt-security-admin@xxxxxxxxxxxxxxx 
|[mailto:cobalt-security-admin@xxxxxxxxxxxxxxx] On Behalf Of 
|johnm@xxxxxxxxxxxxxxxxxxxx
|Sent: Tuesday, March 05, 2002 1:02 AM
|To: cobalt-security@xxxxxxxxxxxxxxx
|Subject: [cobalt-security] SSLeay installation
|
|
|Hi there,
|
|I've been monitoring the list for some time and have a question that I 
|think fits into the security '"mould", if not I apologise.
|
|I'm running a RaQ4i and have a web hosting client that needs 
|to use the 
|Net::SSLeay perl module to access the credit card processor 
|that he has 
|signed up with,  This is not installed on the server and I 
|have downloaded 
|the module from the relevent web site.
|
|However when I try :- ./Makefile.PL -t
|
|I get the following :-
|
|Checking for OpenSSL-0.9.6c or newer...
|You have OpenSSL-0.9.6b installed in /usr
|openssl-0.9.6a and some earlier versions have weaknesses and 
|also 0.9.6b 
|has some (nonfatal) bugs (read CHANGES file in the openssl-0.9.6c 
|distribution, www.openssl.org), upgrading to openssl-0.9.6c is 
|recommended.
|Note (probably harmless): No library found for -lssl
|Note (probably harmless): No library found for -lcrypto
|Writing Makefile for Net::SSLeay::Handle
|Writing Makefile for Net::SSLeay
|make[1]: Entering directory 
|`/home/packages/Net_SSLeay.pm-1.13/Net-SSLeay-Handle-0.50'
|Manifying ../blib/man3/Net::SSLeay::Handle.3
|make[1]: Leaving directory 
|`/home/packages/Net_SSLeay.pm-1.13/Net-SSLeay-Handle-0.50'
|cc -c -I/usr/include -Dbool=char -DHAS_BOOL -I/usr/local/include -O2 
|-DVERSION=\"1.13\" -DXS_VERSION=\"1.13\" -fpic 
|-I/usr/lib/perl5/5.00503/i386-linux/CORE  SSLeay.c
|SSLeay.xs:61: openssl/err.h: No such file or directory
|SSLeay.xs:62: openssl/lhash.h: No such file or directory
|SSLeay.xs:63: openssl/rand.h: No such file or directory
|SSLeay.xs:64: openssl/buffer.h: No such file or directory
|SSLeay.xs:65: openssl/ssl.h: No such file or directory
|SSLeay.xs:66: openssl/comp.h: No such file or directory
|make: *** [SSLeay.o] Error 1
|
|Has anyone else installed this module and if so can you give 
|me some hints 
|?
|
|Is the upgrade to openssl-0.9.6c recommended, and if so will 
|it interfer 
|with the rest of the Raq ?
|
|Regards
|
|John
|
|_______________________________________________
|cobalt-security mailing list
|cobalt-security@xxxxxxxxxxxxxxx 
|http://list.cobalt.com/mailman/listinfo/cobalt-|security
|
|