[squid-users] Wrong openssl version into Squid -v info

[Alex Rousskov]

On 7/31/20 9:50 AM, Alvaro SGAD wrote:
> Our openssl version is 1.1.1g.

> When i update squid version and want to know if the process has finished
> correctly, i run *squid -v* into and this is that i receive.

> Squid Cache: Version 4.12
> This binary uses OpenSSL 1.0.2k-fips 26 Jan 2017.

How did you obtain your Squid binary? If you built it from sources, then
the build picked up a different OpenSSL version than you expected. If
you downloaded a binary Squid package, then that Squid binary was built
against a different OpenSSL version than you have on your box. In either
case, your Squid may work just fine, but YMMV. IMHO, it is best when the
build uses an OpenSSL version that matches the installed one.

Please note that you may have multiple OpenSSL versions installed.

Alex.

> configure options: ...
> '--with-openssl=/usr/local/ssl'
...
> 'PKG_CONFIG_PATH=:/usr/lib64/pkgconfig:/usr/share/pkgconfig'
...
> 'LIBOPENSSL_CFLAGS=-I/opt/openssl/include/openssl'

> My openssl version is.
> 
> *openssl version -a*
> OpenSSL 1.1.1g  21 Apr 2020
> built on: Thu Jul  9 12:28:11 2020 UTC <x-apple-data-detectors://4>
> platform: linux-x86_64
> options:  bn(64,64) rc4(16x,int) des(int) idea(int) blowfish(ptr)
> compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3
> -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ
> -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5
> -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM
> -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAESNI_ASM -DVPAES_ASM -DGHASH_ASM
> -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASM -DNDEBUG
> OPENSSLDIR: "/usr/local/ssl"
> ENGINESDIR: "/opt/openssl/lib/engines-1.1"
> 
> I have CentOS 7.