On Mon, 2003-01-20 at 10:23, Charles wrote: > Jeff Kowalczyk wrote: > > I'm using Webmin on RH8.0 and want to enable SSL. Webmin requires the > > Net::SSLeay perl module, and offers to install it from CPAN. The build process > > fails for reasons I don't fully understand, but are quoted below. I do have > > openssl and openssl-devel rpms installed. > > > > a) why doesn't up2date bring us up to OpenSSL-0.9.6g if there is a security > > advisory recommending that OpenSSL-0.9.6b has a flaw? > > > > b) is there a standard RPM that I can grab to install Net:SSLeay, and get out > > of this quickly? "up2date -u perl-Net-SSLeay" doesn't find anything, and its > > not included with openssl-devel... > > > > Thanks. > > > > Compiling module > > Executing /usr/bin/perl Makefile.PL && make .. > > > > Checking for OpenSSL-0.9.6g or newer... > > openssl-0.9.6d and earlier versions have security flaws, see advisory at > > www.openssl.org, upgrading > > to openssl-0.9.6g is recommended. > > You have OpenSSL-0.9.6b installed in /usr > > *** Could not figure out which C compiler was used to compile /usr/bin/openssl. > > It is essentiall tha > > t OpenSSL, perl, and Net::SSLeay are compiled with the same compiler and flags. > > Mixing and matching > > compilers is not supported. at Makefile.PL line 132. > > Enabling gcc -fPIC optimization > > Compiler is gcc and -fpic supplied. Tweaking it to -fPIC at Makefile.PL line > > 177. > > WARNING: CCCDLFLAGS is not a known parameter. > > Checking if your kit is complete... > > Looks good > > Checking if your kit is complete... > > Looks good > > Writing Makefile for Net::SSLeay::Handle > > Writing Makefile for Net::SSLeay > > cp ptrtstrun.pl blib/lib/Net/ptrtstrun.pl > > cp SSLeay.pm blib/lib/Net/SSLeay.pm > > AutoSplitting blib/lib/Net/SSLeay.pm (blib/lib/auto/Net/SSLeay) > > blib/lib/Net/SSLeay.pm: some names are not unique when truncated to 8 > > characters: > > directory blib/lib/auto/Net/SSLeay: > > do_https3.al, do_https2.al, do_https4.al, do_https.al truncate to do_https > > get_https.al, get_https3.al, get_https4.al truncate to get_http > > head_https.al, head_https3.al, head_https4.al truncate to head_htt > > post_https.al, post_https3.al, post_https4.al truncate to post_htt > > put_https.al, put_https3.al, put_https4.al truncate to put_http > > ssl_read_all.al, ssl_read_until.al, ssl_read_CRLF.al truncate to ssl_read > > ssl_write_all.al, ssl_write_CRLF.al truncate to ssl_writ > > make[1]: Entering directory > > `/tmp/.webmin/Net_SSLeay.pm-1.21/Net-SSLeay-Handle-0.50' > > cp Handle.pm ../blib/lib/Net/SSLeay/Handle.pm > > Manifying ../blib/man3/Net::SSLeay::Handle.3pm > > make[1]: Leaving directory > > `/tmp/.webmin/Net_SSLeay.pm-1.21/Net-SSLeay-Handle-0.50' > > /usr/bin/perl /usr/lib/perl5/5.8.0/ExtUtils/xsubpp -typemap > > /usr/lib/perl5/5.8.0/ExtUtils/typemap - > > typemap typemap SSLeay.xs > SSLeay.xsc && mv SSLeay.xsc SSLeay.c > > gcc -c -I/usr/include -I/usr/inc32 -D_REENTRANT -D_GNU_SOURCE > > -fno-strict-aliasing -D_LARGEFILE_SOU > > RCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O -DVERSION=\"1.21\" > > -DXS_VERSION=\"1.21\" -fPIC " > > -I/usr/lib/perl5/5.8.0/i386-linux-thread-multi/CORE" -DPERL5 SSLeay.c > > /bin/sh: line 1: gcc: command not found > > make: *** [SSLeay.o] Error 127 > > > > Installation of Net_SSLeay.pm failed. Check the output above and try installing manually. > > > > __________________________________________________ > > Do you Yahoo!? > > Yahoo! Mail Plus - Powerful. Affordable. Sign up now. > > http://mailplus.yahoo.com > > > > > > > I am certainly no guru in these sorts of matters, but doesn't the > error from bash on the penultimate line (/bin/sh: line 1: gcc: > command not found) mean that somehow the path to your gcc was lost, > or that you don't have it installed? > ----- I think that's why he would like the rpm I don't know of an rpm for Net::SSLeay - I've always compiled it but I suppose if you want a secure firewall without gcc and other compilers, you would want the rpm but then again...why have rpm on such a system? and to answer your other question...I believe that the patch to fix the security bugs in openssl were backported into the older version which is the only one ever distributed for RH 8. It should be good until the next advisory. Craig -- Psyche-list mailing list Psyche-list@redhat.com https://listman.redhat.com/mailman/listinfo/psyche-list
