Closed ealashwali closed 5 years ago
Is this still an issue?
Yes. I can't compile tls-scan with OpenSSL1.1.0g without enabling ssl3 (which I do not want to enable as if it enabled it gets negotiated, and I do not want this).
/home/e/Downloads/ts-build-root/build/tls-scan-master/cert-parser.c:514: undefined reference to `SSLv3_client_method' collect2: error: ld returned 1 exit status
You probably need to comment out the above line in order to proceed.
The line you are referring to the error message I get:
/home/e/Downloads/ts-build-root/build/tls-scan-master/cert-parser.c:514: undefined reference to
SSLv3_client_method'`
collect2: error: ld returned 1 exit status
If you mean just commenting that line, it is a return statement in a switch statement. I tried to return "null", it compiles. When I run tls-scan to connect to a host I get error dump memory
I guess.
Note that I need SSLv3 ciphers, but not version. These are two separate things.
If I want to compile my local modified version, will the ./build take my local files? or fetch a new fresh online from your repo.?
if you are using build-x86-64-openssl-1.1.0.sh
, then it pulls/overwrite locally modified version. However you may modify the script (comment-out pull/overwrite lines)
I need to compile
tls-scan
onOpenSSL 1.1.0g
with default settings (sslv3 disabled) except that I enable weak-ciphers because I need one DES cipher. Here is my config line that I edited in the 1.1.0 build file here: https://github.com/prbinu/tls-scan/blob/master/build-x86-64-openssl-1.1.0.sh I just changed the./config
command to:./config enable-static-engine enable-weak-ssl-ciphers enable-zlib no-shared --prefix=${OUTDIR} --openssldir=${OUTDIR}/ssl -I${OUTDIR}/include -L${OUTDIR}/lib --with-zlib-lib=${OUTDIR}/lib --with-zlib-include=${OUTDIR}/include
When I run this command:
sudo ./build-x86-64-openssl-1.1.0.sh
I get these errors and warnings, apparently, tls-scan requires SSLv3 methods, but I do not want to enable SSLv3 in my case. All what I need is shown in my configuration command above, weak-ciphers but no weak versions needed. Can you please help me fix the issue?