[squid-users] squid 6.10 - Debian 12 undefined reference to `EVP_MD_type' in ssl-crtd

[Alex Rousskov]

On 2024-08-21 09:37, David Touzeau wrote:
> Configure:
> ./configure --prefix=/usr --build=x86_64-linux-gnu --includedir=/include 
> --mandir=/share/man --infodir=/share/info --localstatedir=/var 
> --libexecdir=/lib/squid3 --disable-maintainer-mode 
> --disable-dependency-tracking --datadir=/usr/share/squid3 
> --sysconfdir=/etc/squid3 --enable-gnuregex --enable-removal-policy=heap 
> --enable-follow-x-forwarded-for --disable-cache-digests 
> --enable-http-violations --enable-removal-policies=lru,heap 
> --enable-arp-acl --enable-truncate --with-large-files --with-pthreads 
> --enable-esi --enable-storeio=aufs,diskd,ufs,rock 
> --enable-x-accelerator-vary --with-dl--enable-linux-netfilter 
> --with-netfilter-conntrack --enable-wccpv2 --enable-eui --enable-auth 
> --enable-auth-basic --enable-snmp --enable-icmp --enable-auth-digest 
> --enable-log-daemon-helpers --enable-url-rewrite-helpers 
> --enable-auth-ntlm --with-default-user=squid --enable-icap-client 
> --disable-cache-digests --enable-poll --enable-epoll 
> --enable-async-io=128 --enable-zph-qos --enable-delay-pools 
> --enable-http-violations --enable-url-maps --enable-ecap --enable-ssl 
> --with-openssl --enable-ssl-crtd --enable-xmalloc-statistics 
> --enable-ident-lookups --with-filedescriptors=163840 
> --with-aufs-threads=128 --disable-arch-native 
> --with-logdir=/var/log/squid --with-pidfile=/var/run/squid/squid.pid 
> --with-swapdir=/var/cache/squid
> 
> 
> Hi, after the make install got
> 
> /bin/bash ../../../../libtool  --tag=CXX   --mode=link g++ -std=c++17 
> -Wall -Wextra -Wimplicit-fallthrough=5 -Wpointer-arith -Wwrite-strings 
> -Wcomments -Wshadow -Wmissing-declarations -Woverloaded-virtual -Werror 
> -pipe -D_REENTRANT -m64 -I/usr/include/p11-kit-1    -g -O2  -m64   -g -o 
> security_file_certgen certificate_db.o security_file_certgen.o 
> ../../../../src/ssl/libsslutil.la ../../../../src/sbuf/libsbuf.la 
> ../../../../src/debug/libdebug.la ../../../../src/error/liberror.la 
> ../../../../src/comm/libminimal.la ../../../../src/mem/libminimal.la 
> ../../../../src/base/libbase.la ../../../../src/time/libtime.la -lssl 
> -lcrypto   -lgnutls   ../../../../compat/libcompatsquid.la
> libtool: link: g++ -std=c++17 -Wall -Wextra -Wimplicit-fallthrough=5 
> -Wpointer-arith -Wwrite-strings -Wcomments -Wshadow 
> -Wmissing-declarations -Woverloaded-virtual -Werror -pipe -D_REENTRANT 
> -m64 -I/usr/include/p11-kit-1 -g -O2 -m64 -g -o security_file_certgen 
> certificate_db.o security_file_certgen.o 
> ../../../../src/ssl/.libs/libsslutil.a 
> ../../../../src/sbuf/.libs/libsbuf.a 
> ../../../../src/debug/.libs/libdebug.a 
> ../../../../src/error/.libs/liberror.a 
> ../../../../src/comm/.libs/libminimal.a 
> ../../../../src/mem/.libs/libminimal.a 
> ../../../../src/base/.libs/libbase.a 
> ../../../../src/time/.libs/libtime.a -lssl -lcrypto -lgnutls 
> ../../../../compat/.libs/libcompatsquid.a
> /usr/bin/ld: ../../../../src/ssl/.libs/libsslutil.a(crtd_message.o): in 
> function `Ssl::CrtdMessage::composeRequest(Ssl::CertificateProperties 
> const&)':
> /root/squid-6.10/src/ssl/crtd_message.cc:248: undefined reference to 
> `EVP_MD_type'
> 
> How i can fix it ?

It looks like your Squid is being built with both GnuTLS (bad default) 
and OpenSSL (explicitly requested) support enabled at the same time. I 
doubt Squid code handles that combination well.

As a workaround, try adding --without-gnutls to ./configure options.


HTH,

Alex.