>> certificate_db.cc: In member function 'bool >> Ssl::CertificateDb::deleteInvalidCertificate()': >> certificate_db.cc:441: error: cannot convert 'stack_st_OPENSSL_PSTRING*' >> to 'const _STACK*' for argument '1' to 'int sk_num(const _STACK*)' >> certificate_db.cc:442: error: cannot convert 'stack_st_OPENSSL_PSTRING*' >> to 'const _STACK*' for argument '1' to 'void* sk_value(const _STACK*, int) >> >> I don't quite understand what Michael did to work-around it. I would just >> like to know if this can be worked around given my environment and if so, >> how exactly? > > > He installed a different verioon of OpenSSL and used the --with-openssl= > configure option to tell Squid exactly which library to build against. > > The early 1.0.0 had symbol issues and all signs are pointing at those -fips > libraries being patched with ABI breaking stuff. > One more way to fix this is, ..... replace all "#if OPENSSL_VERSION_NUMBER >= 0x1000004fL" with #if OPENSSL_VERSION_NUMBER >= your-openssl-abi-version" and replace all "const char **row = (const char **)sk_OPENSSL_PSTRING_value(..." with "const char **row = (const char **)sk_value((const _STACK *)(..." -- Regards, Nipun
