I ran into some issues on FreeBSD with OpenSSL and the FreeBSD built in openssl binary vs the one installed using pkg. While troubleshooting the issue, when running the configure script with the --with-ssl= argument it does not appear to output that is used this location.
Here is when I run:
./configure --enable-command-args
checking for SSL headers... found in /usr/include/openssl
checking for SSL libraries... found in /usr/lib
checking whether compiling and linking against SSL works... yes
checking for openssl... /usr/bin/openssl
Here is when I run:
./configure --enable-command-args --with-ssl=/usr/local/bin --with-ssl-inc=/usr/local/include/openssl --with-ssl-lib=/usr/local/lib
checking for SSL headers... found in /usr/local/include/openssl
checking for SSL libraries... found in /usr/local/lib
checking whether compiling and linking against SSL works... yes
checking for openssl... /usr/bin/openssl
You can see in both outputs that the line checking for openssl... /usr/bin/openssl is the same.
Here are the versions installed:
# which openssl
/usr/bin/openssl
# openssl version
OpenSSL 1.0.2j-freebsd 26 Sep 2016
# /usr/bin/openssl version
OpenSSL 1.0.2j-freebsd 26 Sep 2016
# /usr/local/bin/openssl version
OpenSSL 1.0.2l 25 May 2017
I stumbled upon this because when I run make all after running ./configure --enable-command-args I get the following output
cd ./src/; make
gcc -g -O2 -I/usr/include -I/usr/include/openssl -DHAVE_CONFIG_H -I ../include -I ./../include -o nrpe ./nrpe.c ./utils.c ./acl.c -L/usr/lib -lssl -lcrypto -lwrap
/tmp//ccqbQJTG.o: In function `init_ssl':
/tmp/nrpe-nrpe-3.2.1/src/./nrpe.c:318: undefined reference to `SSLv2_server_method'
collect2: error: ld returned 1 exit status
*** Error code 1
Stop.
make[1]: stopped in /tmp/nrpe-nrpe-3.2.1/src
*** Error code 1
Stop.
make: stopped in /tmp/nrpe-nrpe-3.2.1
However if I run ./configure --enable-command-args --with-ssl=/usr/local/bin --with-ssl-inc=/usr/local/include/openssl --with-ssl-lib=/usr/local/lib then it all succeeds (I can complete the entire installation and it runs as a daemon fine).
What I am unsure about is which openssl binary was used by the configure script.
Is the configure script using the correct binary but not displaying it correctly
Is the configure script using the incorrect binary but the correct include and library folders allow the incorrect binary to work
In addition to this I think that perhaps the output from /path/to/openssl version be displayed before the *** Generating DH Parameters for SSL/TLS *** line so it makes it easier to debug the issue.
Here is the entire output of an install on a clean build of FreeBSD 11.x:
Last login: Fri Jul 21 11:36:27 2017 from raven.box293.local
FreeBSD 11.0-RELEASE-p1 (GENERIC) #0 r306420: Thu Sep 29 01:43:23 UTC 2016
Welcome to FreeBSD!
Release Notes, Errata: https://www.FreeBSD.org/releases/
Security Advisories: https://www.FreeBSD.org/security/
FreeBSD Handbook: https://www.FreeBSD.org/handbook/
FreeBSD FAQ: https://www.FreeBSD.org/faq/
Questions List: https://lists.FreeBSD.org/mailman/listinfo/freebsd-questions/
FreeBSD Forums: https://forums.FreeBSD.org/
Documents installed with the system are in the /usr/local/share/doc/freebsd/
directory, or can be installed later with: pkg install en-freebsd-doc
For other languages, replace "en" with a language code like de or fr.
Show the version of FreeBSD installed: freebsd-version ; uname -a
Please include that output and any error messages when posting questions.
Introduction to manual pages: man man
FreeBSD directory layout: man hier
Edit /etc/motd to change this login announcement.
root@fbsd02:~ # which openssl
/usr/bin/openssl
root@fbsd02:~ # openssl version
OpenSSL 1.0.2j-freebsd 26 Sep 2016
root@fbsd02:~ # /usr/bin/openssl version
OpenSSL 1.0.2j-freebsd 26 Sep 2016
root@fbsd02:~ #
root@fbsd02:~ #
root@fbsd02:~ #
root@fbsd02:~ # find / -name '*ssl*'
\/usr/lib32/libssl.so
/usr/lib32/libssl.so.8
/usr/lib32/libssl_p.a
/usr/lib32/libssl.a
/usr/lib/libssl_p.a
/usr/lib/libssl.so
/usr/lib/libssl.so.8
/usr/lib/libssl.a
/usr/local/share/doc/cairomm-1.0/reference/html/classlu__counter__policy__base.html
/usr/local/share/doc/cairomm-1.0/reference/html/classlu__counter__policy__base__inherit__graph.png
/usr/local/share/examples/nettle/nettle-openssl.c
/usr/local/etc/ssl
/usr/local/etc/cups/ssl
/usr/local/include/glib-2.0/gio/gsubprocesslauncher.h
/usr/local/lib/python2.7/lib-dynload/_ssl.so
/usr/local/lib/python2.7/test/make_ssl_certs.py
/usr/local/lib/python2.7/test/make_ssl_certs.pyc
/usr/local/lib/python2.7/test/make_ssl_certs.pyo
/usr/local/lib/python2.7/test/ssl_cert.pem
/usr/local/lib/python2.7/test/ssl_key.passwd.pem
/usr/local/lib/python2.7/test/ssl_key.pem
/usr/local/lib/python2.7/test/ssl_servers.py
/usr/local/lib/python2.7/test/ssl_servers.pyc
/usr/local/lib/python2.7/test/ssl_servers.pyo
/usr/local/lib/python2.7/test/ssltests.py
/usr/local/lib/python2.7/test/ssltests.pyc
/usr/local/lib/python2.7/test/ssltests.pyo
/usr/local/lib/python2.7/test/test_ssl.pyc
/usr/local/lib/python2.7/test/test_ssl.pyo
/usr/local/lib/python2.7/test/test_ssl.py
/usr/local/lib/python2.7/ssl.py
/usr/local/lib/python2.7/ssl.pyc
/usr/local/lib/python2.7/ssl.pyo
/usr/local/man/man3/gnutls_x509_privkey_import_openssl.3.gz
/usr/local/openssl
/usr/share/openssl
/usr/share/openssl/man/man3/BIO_ssl_copy_session_id.3.gz
/usr/share/openssl/man/man3/SSL_get_ssl_method.3.gz
/usr/share/openssl/man/man3/BIO_new_ssl.3.gz
/usr/share/openssl/man/man3/BIO_set_ssl_mode.3.gz
/usr/share/openssl/man/man3/BIO_set_ssl_renegotiate_timeout.3.gz
/usr/share/openssl/man/man3/OpenSSL_add_ssl_algorithms.3.gz
/usr/share/openssl/man/man3/SSL_CONF_CTX_set_ssl_ctx.3.gz
/usr/share/openssl/man/man3/BIO_set_ssl_renegotiate_bytes.3.gz
/usr/share/openssl/man/man3/BIO_ssl_shutdown.3.gz
/usr/share/openssl/man/man3/SSL_CONF_CTX_set_ssl.3.gz
/usr/share/openssl/man/man3/SSL_set_ssl_method.3.gz
/usr/share/openssl/man/man3/BIO_f_ssl.3.gz
/usr/share/openssl/man/man3/BIO_get_ssl.3.gz
/usr/share/openssl/man/man3/BIO_new_ssl_connect.3.gz
/usr/share/openssl/man/man3/BIO_new_buffer_ssl_connect.3.gz
/usr/share/openssl/man/man3/ssl.3.gz
/usr/share/openssl/man/man3/BIO_set_ssl.3.gz
/usr/share/openssl/man/man3/SSLeay_add_ssl_algorithms.3.gz
/usr/share/openssl/man/man3/SSL_CTX_set_ssl_version.3.gz
/usr/share/openssl/man/man1/openssl.1.gz
/usr/include/openssl
/usr/include/openssl/ossl_typ.h
/usr/include/openssl/opensslv.h
/usr/include/openssl/opensslconf.h
/usr/include/openssl/kssl.h
/usr/include/openssl/ssl23.h
/usr/include/openssl/ssl3.h
/usr/include/openssl/ssl2.h
/usr/include/openssl/ssl.h
/usr/bin/openssl
/usr/ports/benchmarks/httperf/files/patch-nossl23
/usr/ports/devel/tla/files/patch-neonssl
/usr/ports/devel/tla/files/patch-linkopenssl
/usr/ports/devel/ice/files/patch-cpp-test-Glacier2-ssl-Server.cpp
/usr/ports/devel/poco-ssl
/usr/ports/devel/erlang-ssl_verify_fun
/usr/ports/devel/pwlib/files/patch-src-ptclib-pssl.cxx
/usr/ports/devel/mingw32-openssl
/usr/ports/devel/py-zope.processlifetime
/usr/ports/devel/qca/files/patch-plugins_qca-ossl_qca-ossl.cpp
/usr/ports/devel/qca/files/patch-plugins_qca-ossl_CMakeLists.txt
/usr/ports/Mk/Uses/ssl.mk
/usr/ports/security/distcache/files/patch-ssl__swamp__utils.c
/usr/ports/security/distcache/files/patch-ssl__swamp__swamp.c
/usr/ports/security/distcache/files/patch-ssl__swamp__swamp.h
/usr/ports/security/krb5-112/files/patch-plugins__preauth__pkinit__pkinit_crypto_openssl.c
/usr/ports/security/php55-openssl
/usr/ports/security/sslwrap
/usr/ports/security/symbion-sslproxy
/usr/ports/security/nss_compat_ossl
/usr/ports/security/nss_compat_ossl/files/patch-src_ssl.c
/usr/ports/security/osslsigncode
/usr/ports/security/polarssl13
/usr/ports/security/ssl-admin
/usr/ports/security/libressl-devel
/usr/ports/security/openssl-devel
/usr/ports/security/R-cran-openssl
/usr/ports/security/axTLS/files/patch-ssl__Config.in
/usr/ports/security/axTLS/files/patch-samples__c__axssl.c
/usr/ports/security/rubygem-openssl-ccm
/usr/ports/security/openvpn-polarssl
/usr/ports/security/ftimes/files/patch-src__ssl.c
/usr/ports/security/fpc-openssl
/usr/ports/security/py-openssl
/usr/ports/security/py-cryptography/files/patch-src___cffi__src_build__openssl.py
/usr/ports/security/py-cryptography/files/patch-src___cffi__src_openssl_ec.py
/usr/ports/security/py-passlib
/usr/ports/security/openssl_tpm_engine
/usr/ports/security/openssl_tpm_engine/files/patch-openssl.cnf.sample
/usr/ports/security/php56-openssl
/usr/ports/security/fbopenssl
/usr/ports/security/opencryptoki/files/patch-usr-sbin-pkcsslotd-log.h
/usr/ports/security/opencryptoki/files/pkcsslotd.in
/usr/ports/security/opencryptoki/files/patch-usr-sbin-pkcsslotd-pkcsslotd.h
/usr/ports/security/opencryptoki/files/patch-usr-sbin-pkcsslotd-socket_server.c
/usr/ports/security/opencryptoki/files/patch-usr-sbin-pkcsslotd-shmem.c
/usr/ports/security/opencryptoki/files/patch-usr-sbin-pkcsslotd-mutex.c
/usr/ports/security/sslscan
/usr/ports/security/sslscan/files/patch-sslscan.c
/usr/ports/security/sslsplit
/usr/ports/security/linux-c6-openssl
/usr/ports/security/sslsniffer
/usr/ports/security/wolfssl
/usr/ports/security/hydra/files/patch-fix-libressl-build
/usr/ports/security/linux-c6-openssl-compat
/usr/ports/security/matrixssl
/usr/ports/security/py-sslstrip
/usr/ports/security/libressl
/usr/ports/security/libressl/files/patch-include_openssl_opensslv.h
/usr/ports/security/php70-openssl
/usr/ports/security/openssl
/usr/ports/security/openssl/files/patch-dsa_ossl.c
/usr/ports/security/openssl/files/patch-testssl
/usr/ports/security/openssl/files/patch-ssl_sess.c
/usr/ports/security/linux-f10-openssl
/usr/ports/security/ocaml-ssl
/usr/ports/mail/courier-imap/files/courier-imap-pop3d-ssl.in
/usr/ports/mail/courier-imap/files/courier-imap-imapd-ssl.in
/usr/ports/mail/pop3proxy/files/patch-ssl
/usr/ports/mail/panda-cclient/pkg-message-ssl
/usr/ports/mail/imap-uw/pkg-req.ssl
/usr/ports/mail/heirloom-mailx/files/patch-openssl.c
/usr/ports/mail/sylpheed/files/extra-patch-libsylph_ssl.c
/usr/ports/mail/up-imapproxy/files/patch-ssl
/usr/ports/mail/dovecot/files/patch-src_login-common_ssl-proxy-openssl.c
/usr/ports/mail/tkrat2/files/patch-ssl
/usr/ports/mail/cclient/pkg-message-ssl
/usr/ports/mail/qpopper/files/patch-popper__pop_tls_openssl.c
/usr/ports/mail/sendmail/files/site.config.m4.ssl
/usr/ports/mail/panda-imap/pkg-req.ssl
/usr/ports/deskutils/fusenshi/files/patch-src_net_fusenshisslserversocket.cpp
/usr/ports/deskutils/fusenshi/files/patch-src_net_fusenshisslclientsocket.cpp
/usr/ports/graphics/kipi-plugin-jpeglossless
/usr/ports/irc/ircd-ratbox/files/patch-libratbox_src_openssl.c
/usr/ports/irc/hexchat/files/patch-src__common__ssl.c
/usr/ports/irc/irssi/files/patch-src_core_network-openssl.c
/usr/ports/textproc/dsssl-docbook-modular
/usr/ports/databases/puppetdb4/files/patch-ext_cli_ssl-setup
/usr/ports/databases/mysql57-server/files/patch-mysys__ssl_my__default.cc
/usr/ports/databases/mariadb101-server/files/patch-cmake_ssl.cmake
/usr/ports/databases/mysql57-client/files/patch-mysys__ssl_my__default.cc
/usr/ports/databases/pglesslog
/usr/ports/databases/mariadb101-client/files/patch-cmake_ssl.cmake
/usr/ports/databases/mariadb55-server/files/patch-extra_yassl_taocrypt_src_integer.cpp
/usr/ports/databases/mysql-connector-c/files/patch-cmake_ssl.cmake
/usr/ports/databases/mysql-connector-c/files/patch-vio_viossl.c
/usr/ports/databases/mariadb55-client/files/patch-extra_yassl_taocrypt_src_integer.cpp
/usr/ports/databases/percona56-client/files/patch-mysys_ssl_my_default.cc
/usr/ports/databases/mongodb32-tools/files/patch-vendor_src_github.com_spacemonkeygo_openssl_init__posix.go
/usr/ports/databases/mongodb32-tools/files/patch-vendor_src_github.com_spacemonkeygo_openssl_build.go
/usr/ports/databases/virtuoso/files/patch-openssl
/usr/ports/databases/percona56-server/files/patch-mysys_ssl_my_default.cc
/usr/ports/databases/mariadb100-server/files/patch-extra_yassl_taocrypt_src_integer.cpp
/usr/ports/databases/puppetdb/files/patch-ext__files__puppetdb-ssl-setup
/usr/ports/databases/mysql56-server/files/patch-mysys_ssl_my_default.cc
/usr/ports/databases/mysql56-client/files/patch-mysys_ssl_my_default.cc
/usr/ports/net/socat/files/patch-sslcls.h
/usr/ports/net/socat/files/patch-xio-openssl.c
/usr/ports/net/socat/files/patch-sslcls.c
/usr/ports/net/ulxmlrpcpp/files/patch-ulxmlrpcpp__ulxr_ssl_connection.cpp
/usr/ports/net/ulxmlrpcpp/files/patch-ulxmlrpcpp__contrib__ssl_connection.cpp
/usr/ports/net/qt4-network/files/patch-src_network_ssl_qsslsocket__openssl.cpp
/usr/ports/net/qt4-network/files/patch-src_network_ssl_qsslsocket__openssl__symbols.cpp
/usr/ports/net/ssldump
/usr/ports/net/ssldump/files/patch-ssldump.1
/usr/ports/net/ssldump/files/patch-ssl_ssldecode.c
/usr/ports/net/ssldump/files/patch-ssl_ssl_analyze.c
/usr/ports/net/ssltunnel-client
/usr/ports/net/qt5-network/files/patch-src_network_ssl_qsslcontext__openssl.cpp
/usr/ports/net/qt5-network/files/patch-src_network_ssl_qsslsocket__openssl__symbols.cpp
/usr/ports/net/ssltunnel-server
/usr/ports/net/ssltunnel-server/files/ssltunnel.in
/usr/ports/net/p5-Socket-Class/files/patch-xs_sc__ssl_Makefile.PL
/usr/ports/net/passlogd
/usr/ports/net/sslh
/usr/ports/net/sslh/files/sslh.in
/usr/ports/net/opentracker/files/patch-ot_accesslist.c
/usr/ports/sysutils/ucspi-ssl-tls
/usr/ports/sysutils/ucspi-ssl
/usr/ports/sysutils/webjob/files/patch-tools_webjob-dsvtool_ssl.c
/usr/ports/sysutils/webjob/files/patch-src_ssl.c
/usr/ports/comms/cqrlog/files/patch-src_ssl__openssl__lib.pas
/usr/ports/net-p2p/uhub/files/patch-src__network__openssl.c
/usr/ports/net-p2p/dclib/files/extra-dclib-core_cssl.cpp
/usr/ports/lang/erlang-runtime15/files/patch-lib_ssl_src_ssl__manager.erl
/usr/ports/lang/ruby21/files/patch-ext_openssl_extconf.rb
/usr/ports/lang/python27/files/patch-Modules___ssl.c
/usr/ports/lang/phantomjs/files/patch-src_qt_qtbase_src_network_ssl_qsslsocket__openssl__symbols.cpp
/usr/ports/lang/phantomjs/files/patch-src_qt_qtbase_src_network_ssl_qsslcontext.cpp
/usr/ports/www/publicfile/files/publicfile.sslserver
/usr/ports/www/aria2/files/patch-src-LibsslTLSContext.cc
/usr/ports/www/apache22/files/patch-modules__ssl__ssl_util_ssl.c
/usr/ports/www/apache22/files/patch-modules__ssl__ssl_engine_rand.c
/usr/ports/www/apache22/files/patch-modules__ssl__ssl_engine_init.c
/usr/ports/www/apache22/files/patch-docs__conf__extra__httpd-ssl.conf.in
/usr/ports/www/apache22/files/patch-modules__ssl__ssl_util_ssl.h
/usr/ports/www/apache22/files/patch-modules__ssl__ssl_engine_vars.c
/usr/ports/www/mod_spdy/files/patch-build_modssl_with_npn.sh
/usr/ports/www/rubygem-rack-ssl
/usr/ports/www/aws/files/patch-regtests_0213__check__mem__nossl_test.opt
/usr/ports/www/aws/files/patch-ssl__crypto_lib.gpr
/usr/ports/www/apache24/files/patch-docs__conf__extra__httpd-ssl.conf.in
/usr/ports/www/gitlab/files/patch-lib_support_nginx_gitlab-ssl
/usr/ports/www/hydra/files/patch-src__cgi_ssl.c
/usr/ports/www/hydra/files/patch-src__ssl.h
/usr/ports/www/hydra/files/patch-src__ssl.c
/usr/ports/www/webstone-ssl
/usr/ports/net-mgmt/nrpe-ssl
/usr/ports/net-mgmt/nagios-plugins/files/patch-plugins_sslutils.c
/usr/ports/net-im/libstrophe/files/patch-use-openssl-sha1
/usr/ports/net-im/ayttm/files/patch-libproxy__ssl_certificate.c
/usr/ports/ftp/bsdftpd-ssl
/usr/ports/ftp/bsdftpd-ssl/files/rc_conf_d.bsdftpd_ssl
/usr/ports/ftp/bsdftpd-ssl/files/bsdftpd-ssl.in
/usr/ports/ftp/pavuk/files/patch-src-myssl_openssl.c
/etc/ssl
/etc/ssl/openssl.cnf
/var/db/etcupdate/current/etc/ssl
/var/db/etcupdate/current/etc/ssl/openssl.cnf
/var/db/etcupdate/current/usr/share/openssl
root@fbsd02:~ # find / -name '*openssl*'
/usr/local/share/examples/nettle/nettle-openssl.c
/usr/local/man/man3/gnutls_x509_privkey_import_openssl.3.gz
/usr/local/openssl
/usr/share/openssl
/usr/share/openssl/man/man1/openssl.1.gz
/usr/include/openssl
/usr/include/openssl/opensslv.h
/usr/include/openssl/opensslconf.h
/usr/bin/openssl
/usr/ports/devel/tla/files/patch-linkopenssl
/usr/ports/devel/mingw32-openssl
/usr/ports/security/krb5-112/files/patch-plugins__preauth__pkinit__pkinit_crypto_openssl.c
/usr/ports/security/php55-openssl
/usr/ports/security/openssl-devel
/usr/ports/security/R-cran-openssl
/usr/ports/security/rubygem-openssl-ccm
/usr/ports/security/fpc-openssl
/usr/ports/security/py-openssl
/usr/ports/security/py-cryptography/files/patch-src___cffi__src_build__openssl.py
/usr/ports/security/py-cryptography/files/patch-src___cffi__src_openssl_ec.py
/usr/ports/security/openssl_tpm_engine
/usr/ports/security/openssl_tpm_engine/files/patch-openssl.cnf.sample
/usr/ports/security/php56-openssl
/usr/ports/security/fbopenssl
/usr/ports/security/linux-c6-openssl
/usr/ports/security/linux-c6-openssl-compat
/usr/ports/security/libressl/files/patch-include_openssl_opensslv.h
/usr/ports/security/php70-openssl
/usr/ports/security/openssl
/usr/ports/security/linux-f10-openssl
/usr/ports/mail/heirloom-mailx/files/patch-openssl.c
/usr/ports/mail/dovecot/files/patch-src_login-common_ssl-proxy-openssl.c
/usr/ports/mail/qpopper/files/patch-popper__pop_tls_openssl.c
/usr/ports/irc/ircd-ratbox/files/patch-libratbox_src_openssl.c
/usr/ports/irc/irssi/files/patch-src_core_network-openssl.c
/usr/ports/databases/mongodb32-tools/files/patch-vendor_src_github.com_spacemonkeygo_openssl_init__posix.go
/usr/ports/databases/mongodb32-tools/files/patch-vendor_src_github.com_spacemonkeygo_openssl_build.go
/usr/ports/databases/virtuoso/files/patch-openssl
/usr/ports/net/socat/files/patch-xio-openssl.c
/usr/ports/net/qt4-network/files/patch-src_network_ssl_qsslsocket__openssl.cpp
/usr/ports/net/qt4-network/files/patch-src_network_ssl_qsslsocket__openssl__symbols.cpp
/usr/ports/net/qt5-network/files/patch-src_network_ssl_qsslcontext__openssl.cpp
/usr/ports/net/qt5-network/files/patch-src_network_ssl_qsslsocket__openssl__symbols.cpp
/usr/ports/comms/cqrlog/files/patch-src_ssl__openssl__lib.pas
/usr/ports/net-p2p/uhub/files/patch-src__network__openssl.c
/usr/ports/lang/ruby21/files/patch-ext_openssl_extconf.rb
/usr/ports/lang/phantomjs/files/patch-src_qt_qtbase_src_network_ssl_qsslsocket__openssl__symbols.cpp
/usr/ports/net-im/libstrophe/files/patch-use-openssl-sha1
/usr/ports/ftp/pavuk/files/patch-src-myssl_openssl.c
/etc/ssl/openssl.cnf
/var/db/etcupdate/current/etc/ssl/openssl.cnf
/var/db/etcupdate/current/usr/share/openssl
root@fbsd02:~ #
root@fbsd02:~ #
root@fbsd02:~ #
root@fbsd02:~ #
root@fbsd02:~ # pkg install -y wget autoconf automake gettext gcc openssl libmcrypt
Updating FreeBSD repository catalogue...
Fetching meta.txz: 100% 944 B 0.9kB/s 00:01
Fetching packagesite.txz: 100% 6 MiB 230.6kB/s 00:26
Processing entries: 100%
FreeBSD repository update completed. 26489 packages processed.
All repositories are up to date.
The following 15 package(s) will be affected (of 0 checked):
New packages to be INSTALLED:
autoconf: 2.69_1
automake: 1.15.1
gettext: 0.19.8.1
gcc: 5.4.0_2
openssl: 1.0.2l,1
libmcrypt: 2.5.8_3
m4: 1.4.18,1
autoconf-wrapper: 20131203
automake-wrapper: 20131203
gettext-tools: 0.19.8.1
gcc5: 5.4.0_3
mpfr: 3.1.5_1
mpc: 1.0.3
gcc-ecj: 4.5
binutils: 2.28,1
Number of packages to be installed: 15
The process will require 626 MiB more space.
108 MiB to be downloaded.
[1/15] Fetching autoconf-2.69_1.txz: 100% 527 KiB 135.0kB/s 00:04
[2/15] Fetching automake-1.15.1.txz: 100% 439 KiB 149.8kB/s 00:03
[3/15] Fetching gettext-0.19.8.1.txz: 100% 504 B 0.5kB/s 00:01
[4/15] Fetching gcc-5.4.0_2.txz: 100% 804 B 0.8kB/s 00:01
[5/15] Fetching openssl-1.0.2l,1.txz: 100% 3 MiB 192.8kB/s 00:16
[6/15] Fetching libmcrypt-2.5.8_3.txz: 100% 114 KiB 117.0kB/s 00:01
[7/15] Fetching m4-1.4.18,1.txz: 100% 204 KiB 104.4kB/s 00:02
[8/15] Fetching autoconf-wrapper-20131203.txz: 100% 2 KiB 2.2kB/s 00:01
[9/15] Fetching automake-wrapper-20131203.txz: 100% 2 KiB 2.1kB/s 00:01
[10/15] Fetching gettext-tools-0.19.8.1.txz: 100% 2 MiB 193.3kB/s 00:12
[11/15] Fetching gcc5-5.4.0_3.txz: 100% 81 MiB 528.6kB/s 02:40
[12/15] Fetching mpfr-3.1.5_1.txz: 100% 366 KiB 374.3kB/s 00:01
[13/15] Fetching mpc-1.0.3.txz: 100% 72 KiB 73.7kB/s 00:01
[14/15] Fetching gcc-ecj-4.5.txz: 100% 1 MiB 200.6kB/s 00:07
[15/15] Fetching binutils-2.28,1.txz: 100% 19 MiB 363.7kB/s 00:54
Checking integrity... done (0 conflicting)
[1/15] Installing mpfr-3.1.5_1...
[1/15] Extracting mpfr-3.1.5_1: 100%
[2/15] Installing m4-1.4.18,1...
[2/15] Extracting m4-1.4.18,1: 100%
[3/15] Installing autoconf-wrapper-20131203...
[3/15] Extracting autoconf-wrapper-20131203: 100%
[4/15] Installing mpc-1.0.3...
[4/15] Extracting mpc-1.0.3: 100%
[5/15] Installing gcc-ecj-4.5...
[5/15] Extracting gcc-ecj-4.5: 100%
[6/15] Installing binutils-2.28,1...
[6/15] Extracting binutils-2.28,1: 100%
[7/15] Installing autoconf-2.69_1...
[7/15] Extracting autoconf-2.69_1: 100%
[8/15] Installing automake-wrapper-20131203...
[8/15] Extracting automake-wrapper-20131203: 100%
[9/15] Installing gettext-tools-0.19.8.1...
[9/15] Extracting gettext-tools-0.19.8.1: 100%
[10/15] Installing gcc5-5.4.0_3...
[10/15] Extracting gcc5-5.4.0_3: 100%
[11/15] Installing automake-1.15.1...
[11/15] Extracting automake-1.15.1: 100%
[12/15] Installing gettext-0.19.8.1...
[13/15] Installing gcc-5.4.0_2...
[13/15] Extracting gcc-5.4.0_2: 100%
[14/15] Installing openssl-1.0.2l,1...
[14/15] Extracting openssl-1.0.2l,1: 100%
[15/15] Installing libmcrypt-2.5.8_3...
Extracting libmcrypt-2.5.8_3: 100%
Message from gcc5-5.4.0_3:
To ensure binaries built with this toolchain find appropriate versions
of the necessary run-time libraries, you may want to link using
-Wl,-rpath=/usr/local/lib/gcc5
For ports leveraging USE_GCC, USES=compiler, or USES=fortran this happens
transparently.
Message from openssl-1.0.2l,1:
Edit /usr/local/openssl/openssl.cnf to fit your needs.
Message from libmcrypt-2.5.8_3:
===> NOTICE:
The libmcrypt port currently does not have a maintainer. As a result, it is
more likely to have unresolved issues, not be up-to-date, or even be removed in
the future. To volunteer to maintain this port, please create an issue at:
https://bugs.freebsd.org/bugzilla
More information about port maintainership is available at:
https://www.freebsd.org/doc/en/articles/contributing/ports-contributing.html#maintain-port
root@fbsd02:~ #
root@fbsd02:~ # cd /tmp
root@fbsd02:/tmp # wget --no-check-certificate -O nrpe.tar.gz https://github.com/NagiosEnterprises/nrpe/archive/nrpe-3.2.1.tar.gz
--2017-09-12 16:59:26-- https://github.com/NagiosEnterprises/nrpe/archive/nrpe-3.2.1.tar.gz
Resolving github.com (github.com)... 192.30.255.112, 192.30.255.113
Connecting to github.com (github.com)|192.30.255.112|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://codeload.github.com/NagiosEnterprises/nrpe/tar.gz/nrpe-3.2.1 [following]
--2017-09-12 16:59:27-- https://codeload.github.com/NagiosEnterprises/nrpe/tar.gz/nrpe-3.2.1
Resolving codeload.github.com (codeload.github.com)... 192.30.255.121, 192.30.255.120
Connecting to codeload.github.com (codeload.github.com)|192.30.255.121|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [application/x-gzip]
Saving to: 'nrpe.tar.gz'
nrpe.tar.gz [ <=> ] 505.89K 286KB/s in 1.8s
2017-09-12 16:59:30 (286 KB/s) - 'nrpe.tar.gz' saved [518035]
root@fbsd02:/tmp # tar xzf nrpe.tar.gz
root@fbsd02:/tmp #
root@fbsd02:/tmp # cd /tmp/nrpe-nrpe-3.2.1/
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # ./configure --enable-command-args
checking for a BSD-compatible install... /usr/bin/install -c
checking what the operating system is ... bsd
checking what the distribution type is ... freebsd
checking what init system is being used ... newbsd
checking what inetd is being used ... inetd (Not running)
checking for which paths to use ... default
checking for which init file to use ... newbsd-init
checking for which inetd files to use ... default-inetd
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking whether make sets $(MAKE)... yes
checking how to run the C preprocessor... gcc -E
checking for grep that handles long lines and -e... /usr/bin/grep
checking for egrep... /usr/bin/grep -E
checking for ANSI C header files... yes
checking whether time.h and sys/time.h may both be included... yes
checking for sys/wait.h that is POSIX.1 compatible... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking ctype.h usability... yes
checking ctype.h presence... yes
checking for ctype.h... yes
checking dirent.h usability... yes
checking dirent.h presence... yes
checking for dirent.h... yes
checking errno.h usability... yes
checking errno.h presence... yes
checking for errno.h... yes
checking fcntl.h usability... yes
checking fcntl.h presence... yes
checking for fcntl.h... yes
checking getopt.h usability... yes
checking getopt.h presence... yes
checking for getopt.h... yes
checking grp.h usability... yes
checking grp.h presence... yes
checking for grp.h... yes
checking for inttypes.h... (cached) yes
checking netdb.h usability... yes
checking netdb.h presence... yes
checking for netdb.h... yes
checking pwd.h usability... yes
checking pwd.h presence... yes
checking for pwd.h... yes
checking signal.h usability... yes
checking signal.h presence... yes
checking for signal.h... yes
checking for stdint.h... (cached) yes
checking for strings.h... (cached) yes
checking for string.h... (cached) yes
checking syslog.h usability... yes
checking syslog.h presence... yes
checking for syslog.h... yes
checking tcpd.h usability... yes
checking tcpd.h presence... yes
checking for tcpd.h... yes
checking for unistd.h... (cached) yes
checking arpa/inet.h usability... yes
checking arpa/inet.h presence... yes
checking for arpa/inet.h... yes
checking netinet/in.h usability... yes
checking netinet/in.h presence... yes
checking for netinet/in.h... yes
checking socket.h usability... no
checking socket.h presence... no
checking for socket.h... no
checking for sys/types.h... (cached) yes
checking sys/time.h usability... yes
checking sys/time.h presence... yes
checking for sys/time.h... yes
checking sys/resource.h usability... yes
checking sys/resource.h presence... yes
checking for sys/resource.h... yes
checking for sys/wait.h... (cached) yes
checking sys/socket.h usability... yes
checking sys/socket.h presence... yes
checking for sys/socket.h... yes
checking for sys/stat.h... (cached) yes
checking paths.h usability... yes
checking paths.h presence... yes
checking for paths.h... yes
checking for an ANSI C-conforming const... yes
checking whether struct tm is in sys/time.h or time.h... time.h
checking for mode_t... yes
checking for pid_t... yes
checking for size_t... yes
checking return type of signal handlers... void
checking for uid_t in sys/types.h... yes
checking type of array argument to getgroups... gid_t
checking size of int... 4
checking size of short... 2
checking size of long... 8
checking for uint32_t... yes
checking for u_int32_t... yes
checking for int32_t... yes
checking for struct sockaddr_storage... yes
checking for seteuid... yes
checking for va_copy... yes
checking for vsnprintf... yes
checking for snprintf... yes
checking for asprintf... yes
checking for vasprintf... yes
checking for C99 vsnprintf... yes
checking for getopt_long... yes
checking for main in -lnsl... no
checking for socket in -lsocket... no
checking for main in -lwrap... yes
checking for strdup... yes
checking for strstr... yes
checking for strtoul... yes
checking for strtok_r... yes
checking for initgroups... yes
checking for closesocket... no
checking for sigaction... yes
checking for scandir... yes
checking for socklen_t... yes
checking for type of socket size... size_t
checking for Kerberos include files... found Kerberos include files in /usr/include
checking for pkg-config... no
checking for SSL headers... found in /usr/include/openssl
checking for SSL libraries... found in /usr/lib
checking whether compiling and linking against SSL works... yes
checking for openssl... /usr/bin/openssl
*** Generating DH Parameters for SSL/TLS ***
Generating DH parameters, 2048 bit long safe prime, generator 2
This is going to take a long time
.........................................................................................................................................................+...........................................................+......................................................+.......................................................................................................................................................+...........................................................................+..............................................................+.....................................+.................................................................................+.............+..+.........................................................................+.......................................................................................................+...................+..........................................+.............+.....+..............+..........+.....+............................................+...........................+...........+...........................................................................................+............................................+............................................................................................................+..........................................................................................................................+..................................................................................................................................+......................................................+........................................................................................+.........................................................................................................++*++*
checking for perl... /usr/local/bin/perl
configure: creating ./config.status
config.status: creating Makefile
config.status: creating src/Makefile
config.status: creating nrpe.spec
config.status: creating uninstall
config.status: creating sample-config/nrpe.cfg
config.status: creating startup/bsd-init
config.status: creating startup/debian-init
config.status: creating startup/default-init
config.status: creating startup/default-inetd
config.status: creating startup/default-service
config.status: creating startup/default-socket
config.status: creating startup/default-socket-svc
config.status: creating startup/default-xinetd
config.status: creating startup/mac-init.plist
config.status: creating startup/mac-inetd.plist
config.status: creating startup/newbsd-init
config.status: creating startup/openbsd-init
config.status: creating startup/openrc-conf
config.status: creating startup/openrc-init
config.status: creating startup/solaris-init.xml
config.status: creating startup/solaris-inetd.xml
config.status: creating startup/tmpfile.conf
config.status: creating startup/upstart-init
config.status: creating startup/rh-upstart-init
config.status: creating include/common.h
config.status: creating include/config.h
*** Configuration summary for nrpe 3.2.1 2017-09-01 ***:
General Options:
-------------------------
NRPE port: 5666
NRPE user: nagios
NRPE group: nagios
Nagios user: nagios
Nagios group: nagios
Review the options above for accuracy. If they look okay,
type 'make all' to compile the NRPE daemon and client
or type 'make' to get a list of make options.
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # make all
cd ./src/; make
gcc -g -O2 -I/usr/include -I/usr/include/openssl -DHAVE_CONFIG_H -I ../include -I ./../include -o nrpe ./nrpe.c ./utils.c ./acl.c -L/usr/lib -lssl -lcrypto -lwrap
/tmp//ccqbQJTG.o: In function `init_ssl':
/tmp/nrpe-nrpe-3.2.1/src/./nrpe.c:318: undefined reference to `SSLv2_server_method'
collect2: error: ld returned 1 exit status
*** Error code 1
Stop.
make[1]: stopped in /tmp/nrpe-nrpe-3.2.1/src
*** Error code 1
Stop.
make: stopped in /tmp/nrpe-nrpe-3.2.1
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # ./configure --enable-command-args --with-ssl=/usr/local/bin --with-ssl-inc=/usr/local/include/openssl --with-ssl-lib=/usr/local/lib
checking for a BSD-compatible install... /usr/bin/install -c
checking what the operating system is ... bsd
checking what the distribution type is ... freebsd
checking what init system is being used ... newbsd
checking what inetd is being used ... inetd (Not running)
checking for which paths to use ... default
checking for which init file to use ... newbsd-init
checking for which inetd files to use ... default-inetd
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking whether make sets $(MAKE)... yes
checking how to run the C preprocessor... gcc -E
checking for grep that handles long lines and -e... /usr/bin/grep
checking for egrep... /usr/bin/grep -E
checking for ANSI C header files... yes
checking whether time.h and sys/time.h may both be included... yes
checking for sys/wait.h that is POSIX.1 compatible... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking ctype.h usability... yes
checking ctype.h presence... yes
checking for ctype.h... yes
checking dirent.h usability... yes
checking dirent.h presence... yes
checking for dirent.h... yes
checking errno.h usability... yes
checking errno.h presence... yes
checking for errno.h... yes
checking fcntl.h usability... yes
checking fcntl.h presence... yes
checking for fcntl.h... yes
checking getopt.h usability... yes
checking getopt.h presence... yes
checking for getopt.h... yes
checking grp.h usability... yes
checking grp.h presence... yes
checking for grp.h... yes
checking for inttypes.h... (cached) yes
checking netdb.h usability... yes
checking netdb.h presence... yes
checking for netdb.h... yes
checking pwd.h usability... yes
checking pwd.h presence... yes
checking for pwd.h... yes
checking signal.h usability... yes
checking signal.h presence... yes
checking for signal.h... yes
checking for stdint.h... (cached) yes
checking for strings.h... (cached) yes
checking for string.h... (cached) yes
checking syslog.h usability... yes
checking syslog.h presence... yes
checking for syslog.h... yes
checking tcpd.h usability... yes
checking tcpd.h presence... yes
checking for tcpd.h... yes
checking for unistd.h... (cached) yes
checking arpa/inet.h usability... yes
checking arpa/inet.h presence... yes
checking for arpa/inet.h... yes
checking netinet/in.h usability... yes
checking netinet/in.h presence... yes
checking for netinet/in.h... yes
checking socket.h usability... no
checking socket.h presence... no
checking for socket.h... no
checking for sys/types.h... (cached) yes
checking sys/time.h usability... yes
checking sys/time.h presence... yes
checking for sys/time.h... yes
checking sys/resource.h usability... yes
checking sys/resource.h presence... yes
checking for sys/resource.h... yes
checking for sys/wait.h... (cached) yes
checking sys/socket.h usability... yes
checking sys/socket.h presence... yes
checking for sys/socket.h... yes
checking for sys/stat.h... (cached) yes
checking paths.h usability... yes
checking paths.h presence... yes
checking for paths.h... yes
checking for an ANSI C-conforming const... yes
checking whether struct tm is in sys/time.h or time.h... time.h
checking for mode_t... yes
checking for pid_t... yes
checking for size_t... yes
checking return type of signal handlers... void
checking for uid_t in sys/types.h... yes
checking type of array argument to getgroups... gid_t
checking size of int... 4
checking size of short... 2
checking size of long... 8
checking for uint32_t... yes
checking for u_int32_t... yes
checking for int32_t... yes
checking for struct sockaddr_storage... yes
checking for seteuid... yes
checking for va_copy... yes
checking for vsnprintf... yes
checking for snprintf... yes
checking for asprintf... yes
checking for vasprintf... yes
checking for C99 vsnprintf... yes
checking for getopt_long... yes
checking for main in -lnsl... no
checking for socket in -lsocket... no
checking for main in -lwrap... yes
checking for strdup... yes
checking for strstr... yes
checking for strtoul... yes
checking for strtok_r... yes
checking for initgroups... yes
checking for closesocket... no
checking for sigaction... yes
checking for scandir... yes
checking for socklen_t... yes
checking for type of socket size... size_t
checking for Kerberos include files... found Kerberos include files in /usr/include
checking for pkg-config... no
checking for SSL headers... found in /usr/local/include/openssl
checking for SSL libraries... found in /usr/local/lib
checking whether compiling and linking against SSL works... yes
checking for openssl... /usr/bin/openssl
*** Generating DH Parameters for SSL/TLS ***
Generating DH parameters, 2048 bit long safe prime, generator 2
This is going to take a long time
......................................................................................................................................................................................................................................................+............+.............................................+...................................................+......+.................................................................................................................................................+......................................................................................+............................+.................................................................................................+..........................................................................................................................................+..................................................................+.......................................................................................................................................+......+..............................................................................................................................................................................................................++*++*
checking for perl... /usr/local/bin/perl
configure: creating ./config.status
config.status: creating Makefile
config.status: creating src/Makefile
config.status: creating nrpe.spec
config.status: creating uninstall
config.status: creating sample-config/nrpe.cfg
config.status: creating startup/bsd-init
config.status: creating startup/debian-init
config.status: creating startup/default-init
config.status: creating startup/default-inetd
config.status: creating startup/default-service
config.status: creating startup/default-socket
config.status: creating startup/default-socket-svc
config.status: creating startup/default-xinetd
config.status: creating startup/mac-init.plist
config.status: creating startup/mac-inetd.plist
config.status: creating startup/newbsd-init
config.status: creating startup/openbsd-init
config.status: creating startup/openrc-conf
config.status: creating startup/openrc-init
config.status: creating startup/solaris-init.xml
config.status: creating startup/solaris-inetd.xml
config.status: creating startup/tmpfile.conf
config.status: creating startup/upstart-init
config.status: creating startup/rh-upstart-init
config.status: creating include/common.h
config.status: creating include/config.h
config.status: include/config.h is unchanged
*** Configuration summary for nrpe 3.2.1 2017-09-01 ***:
General Options:
-------------------------
NRPE port: 5666
NRPE user: nagios
NRPE group: nagios
Nagios user: nagios
Nagios group: nagios
Review the options above for accuracy. If they look okay,
type 'make all' to compile the NRPE daemon and client
or type 'make' to get a list of make options.
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # make all
cd ./src/; make
gcc -g -O2 -I/usr/include -I/usr/local/include/openssl -DHAVE_CONFIG_H -I ../include -I ./../include -o nrpe ./nrpe.c ./utils.c ./acl.c -L/usr/local/lib -lssl -lcrypto -lwrap
gcc -g -O2 -I/usr/include -I/usr/local/include/openssl -DHAVE_CONFIG_H -I ../include -I ./../include -o check_nrpe ./check_nrpe.c ./utils.c -L/usr/local/lib -lssl -lcrypto
*** Compile finished ***
You can now continue with the installation or upgrade process.
Read the PDF documentation (docs/NRPE.pdf) for information on the next
steps you should take to complete the installation or upgrade.
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # make install-groups-users
pw add group nagios
pw add user nagios -g nagios -s /usr/bin/false
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # make install
cd ./src/; make install
make install-plugin
/usr/bin/install -c -m 755 -d /usr/local/nagios/bin
/usr/bin/install -c -m 755 ../uninstall /usr/local/nagios/bin/nrpe-uninstall
/usr/bin/install -c -m 775 -o nagios -g nagios -d /usr/local/nagios/libexec
/usr/bin/install -c -m 775 -o nagios -g nagios -d /usr/local/nagios/libexec
/usr/bin/install -c -m 775 -o nagios -g nagios check_nrpe /usr/local/nagios/libexec
make install-daemon
/usr/bin/install -c -m 755 -d /usr/local/nagios/bin
/usr/bin/install -c -m 755 ../uninstall /usr/local/nagios/bin/nrpe-uninstall
/usr/bin/install -c -m 755 nrpe /usr/local/nagios/bin
/usr/bin/install -c -m 755 -o nagios -g nagios -d /usr/local/nagios/var
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # make install-config
/usr/bin/install -c -m 775 -o nagios -g nagios -d /usr/local/nagios/etc
/usr/bin/install -c -m 644 -o nagios -g nagios sample-config/nrpe.cfg /usr/local/nagios/etc
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # echo >> /etc/services
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # echo '# Nagios services' >> /etc/services
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # echo 'nrpe 5666/tcp' >> /etc/services
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # make install-init
/usr/bin/install -c -m 755 startup/newbsd-init /etc/rc.d/nrpe
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # echo '/etc/rc.d/nrpe start' >> /etc/rc.local
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # sed -i '' '/^allowed_hosts=/s/$/,10.25.0.0\/16/' /usr/local/nagios/etc/nrpe.cfg
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # sed -i '' 's/^dont_blame_nrpe=.*/dont_blame_nrpe=1/g' /usr/local/nagios/etc/nrpe.cfg
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # service nrpe start
Starting nrpe.
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # /usr/local/nagios/libexec/check_nrpe -H 127.0.0.1
NRPE v3.2.1
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # which openssl
/usr/bin/openssl
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # find / -name '*openssl*'
/usr/local/share/licenses/openssl-1.0.2l,1
/usr/local/share/doc/openssl
/usr/local/share/doc/openssl/openssl.txt
/usr/local/share/examples/nettle/nettle-openssl.c
/usr/local/include/openssl
/usr/local/include/openssl/opensslconf.h
/usr/local/include/openssl/opensslv.h
/usr/local/libdata/pkgconfig/openssl.pc
/usr/local/man/man3/gnutls_x509_privkey_import_openssl.3.gz
/usr/local/man/man1/openssl.1.gz
/usr/local/bin/openssl
/usr/local/openssl
/usr/local/openssl/openssl.cnf
/usr/local/openssl/openssl.cnf.sample
/usr/share/openssl
/usr/share/openssl/man/man1/openssl.1.gz
/usr/include/openssl
/usr/include/openssl/opensslv.h
/usr/include/openssl/opensslconf.h
/usr/bin/openssl
/usr/ports/devel/tla/files/patch-linkopenssl
/usr/ports/devel/mingw32-openssl
/usr/ports/security/krb5-112/files/patch-plugins__preauth__pkinit__pkinit_crypto_openssl.c
/usr/ports/security/php55-openssl
/usr/ports/security/openssl-devel
/usr/ports/security/R-cran-openssl
/usr/ports/security/rubygem-openssl-ccm
/usr/ports/security/fpc-openssl
/usr/ports/security/py-openssl
/usr/ports/security/py-cryptography/files/patch-src___cffi__src_build__openssl.py
/usr/ports/security/py-cryptography/files/patch-src___cffi__src_openssl_ec.py
/usr/ports/security/openssl_tpm_engine
/usr/ports/security/openssl_tpm_engine/files/patch-openssl.cnf.sample
/usr/ports/security/php56-openssl
/usr/ports/security/fbopenssl
/usr/ports/security/linux-c6-openssl
/usr/ports/security/linux-c6-openssl-compat
/usr/ports/security/libressl/files/patch-include_openssl_opensslv.h
/usr/ports/security/php70-openssl
/usr/ports/security/openssl
/usr/ports/security/linux-f10-openssl
/usr/ports/mail/heirloom-mailx/files/patch-openssl.c
/usr/ports/mail/dovecot/files/patch-src_login-common_ssl-proxy-openssl.c
/usr/ports/mail/qpopper/files/patch-popper__pop_tls_openssl.c
/usr/ports/irc/ircd-ratbox/files/patch-libratbox_src_openssl.c
/usr/ports/irc/irssi/files/patch-src_core_network-openssl.c
/usr/ports/databases/mongodb32-tools/files/patch-vendor_src_github.com_spacemonkeygo_openssl_init__posix.go
/usr/ports/databases/mongodb32-tools/files/patch-vendor_src_github.com_spacemonkeygo_openssl_build.go
/usr/ports/databases/virtuoso/files/patch-openssl
/usr/ports/net/socat/files/patch-xio-openssl.c
/usr/ports/net/qt4-network/files/patch-src_network_ssl_qsslsocket__openssl.cpp
/usr/ports/net/qt4-network/files/patch-src_network_ssl_qsslsocket__openssl__symbols.cpp
/usr/ports/net/qt5-network/files/patch-src_network_ssl_qsslcontext__openssl.cpp
/usr/ports/net/qt5-network/files/patch-src_network_ssl_qsslsocket__openssl__symbols.cpp
/usr/ports/comms/cqrlog/files/patch-src_ssl__openssl__lib.pas
/usr/ports/net-p2p/uhub/files/patch-src__network__openssl.c
/usr/ports/lang/ruby21/files/patch-ext_openssl_extconf.rb
/usr/ports/lang/phantomjs/files/patch-src_qt_qtbase_src_network_ssl_qsslsocket__openssl__symbols.cpp
/usr/ports/net-im/libstrophe/files/patch-use-openssl-sha1
/usr/ports/ftp/pavuk/files/patch-src-myssl_openssl.c
/etc/ssl/openssl.cnf
/var/cache/pkg/openssl-1.0.2l,1-a1d53fa1ad.txz
/var/cache/pkg/openssl-1.0.2l,1.txz
/var/db/etcupdate/current/etc/ssl/openssl.cnf
/var/db/etcupdate/current/usr/share/openssl
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # /usr/local/bin/openssl version
OpenSSL 1.0.2l 25 May 2017
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # /usr/bin/openssl version
OpenSSL 1.0.2j-freebsd 26 Sep 2016
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # openssl version
OpenSSL 1.0.2j-freebsd 26 Sep 2016
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 # pkg info openssl
openssl-1.0.2l,1
Name : openssl
Version : 1.0.2l,1
Installed on : Tue Sep 12 16:59:12 2017 AEST
Origin : security/openssl
Architecture : FreeBSD:11:amd64
Prefix : /usr/local
Categories : security devel
Licenses : OpenSSL
Maintainer : brnrd@FreeBSD.org
WWW : http://www.openssl.org/
Comment : SSL and crypto library
Options :
ASM : on
DOCS : on
EC : on
EXPCIPHERS : off
MAN3 : on
MD2 : on
PADLOCK : off
RC5 : off
RFC3779 : off
SCTP : on
SHARED : on
SSE2 : on
SSL2 : on
SSL3 : on
THREADS : on
ZLIB : off
Shared Libs provided:
libaep.so
libnuron.so
libgmp.so
libubsec.so
libcapi.so
libssl.so.9
libcrypto.so.9
libpadlock.so
libatalla.so
libsureware.so
lib4758cca.so
libcswift.so
libgost.so
libchil.so
Annotations :
cpe : cpe:2.3:a:openssl:openssl:1.0.2l:::::freebsd11:x64
repo_type : binary
repository : FreeBSD
Flat size : 11.6MiB
Description :
The OpenSSL Project is a collaborative effort to develop a robust,
commercial-grade, full-featured, and Open Source toolkit implementing
the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security
(TLS v1) protocols with full-strength cryptography world-wide. The
project is managed by a worldwide community of volunteers that use
the Internet to communicate, plan, and develop the OpenSSL tookit
and its related documentation.
OpenSSL is based on the excellent SSLeay library developed by Eric
A. Young and Tim J. Hudson. The OpenSSL toolkit is licensed under
an Apache-style licence, which basically means that you are free
to get and use it for commercial and non-commercial purposes subject
to some simple license conditions.
WWW: http://www.openssl.org/
WWW: http://sctp.fh-muenster.de/dtls-patches.html
root@fbsd02:/tmp/nrpe-nrpe-3.2.1 #
onkelbeh
commented
5 years ago
I ran into some issues on FreeBSD with OpenSSL and the FreeBSD built in openssl binary vs the one installed using pkg. While troubleshooting the issue, when running the configure script with the
--with-ssl=argument it does not appear to output that is used this location.Here is when I run:
./configure --enable-command-argsHere is when I run:
./configure --enable-command-args --with-ssl=/usr/local/bin --with-ssl-inc=/usr/local/include/openssl --with-ssl-lib=/usr/local/libYou can see in both outputs that the line
checking for openssl... /usr/bin/opensslis the same.Here are the versions installed:
I stumbled upon this because when I run
make allafter running./configure --enable-command-argsI get the following outputHowever if I run
./configure --enable-command-args --with-ssl=/usr/local/bin --with-ssl-inc=/usr/local/include/openssl --with-ssl-lib=/usr/local/libthen it all succeeds (I can complete the entire installation and it runs as a daemon fine).What I am unsure about is which openssl binary was used by the configure script.
In addition to this I think that perhaps the output from
/path/to/openssl versionbe displayed before the*** Generating DH Parameters for SSL/TLS ***line so it makes it easier to debug the issue.Here is the entire output of an install on a clean build of FreeBSD 11.x: