[clamav-users] Clamav 0.98.3 on RHEL4 - OpenSSL problem

[Dariusz Wojciechowski]

Hello.

I try to compile Clamav 0.98.3 on my quite old server with Red Hat EL 4. I
guess I have the same issue as Gary on his Mac OSX 10.5.8: 

http://comments.gmane.org/gmane.comp.security.virus.clamav.user/39771

I mean too old version of OpenSSL. Configure works fine, but on make I get:

crypto.c: In function `cl_validate_certificate_chain':
crypto.c:834: error: `X509_VERIFY_PARAM' undeclared (first use in this
function)

I can't just remove my current OpenSSL from my box due to too many
dependencies. But I downloaded newer 0.9.8y version, configured it with
command

./config --prefix=/usr/local/ssl

Then compiled and installed. And I checked that new version really is
locates in above directory.

So I got back to Clamav. I entered command:

./configure --with-openssl=/usr/local/ssl

And I got:

checking for OpenSSL installation... checking for SSL_library_init in
-lssl... no
configure: error: Your OpenSSL installation is misconfigured or missing

I also tried these:

export LDFLAGS="-L/usr/local/ssl/lib"
export CPPFLAGS="-I/usr/local/ssl/include/openssl"

but also, with no success.

When I check config.log, I find there following lines:

configure:16632: checking for SSL_library_init in -lssl
configure:16657: gcc -o conftest -I/usr/local/ssl/include
-L/usr/local/ssl/lib -lssl -lcrypto conftest.c -lssl  -ldl  >&5
/usr/local/ssl/lib/libssl.a(ssl_algs.o)(.text+0x4): In function
`SSL_library_init':
: undefined reference to `EVP_des_cbc'

And many, many undefined references to something. But when I go to
/usr/local/ssl/lib/ I find libcrypto.a  and libssl.a there. When I look at
the libssl.o with MC's built in viewer I find there following lines:

ssl_algs.o:
         U EVP_add_cipher
         U EVP_add_digest
         U EVP_aes_128_cbc
         U EVP_aes_192_cbc
         U EVP_aes_256_cbc
         U EVP_des_cbc
         U EVP_des_ede3_cbc
         U EVP_dss1
         U EVP_ecdsa
         U EVP_idea_cbc
         U EVP_md5
         U EVP_rc2_cbc
         U EVP_rc4
         U EVP_sha1
         U EVP_sha224
         U EVP_sha256
         U EVP_sha384
         U EVP_sha512
         U OBJ_NAME_add
         U SSL_COMP_get_compression_methods
00000000 T SSL_library_init
         U ssl_load_ciphers

So what is going on? What is the problem?

Thank You very much in advance for Your help.

Kind regards,

Dariusz Wojciechowski