TclTLS

Roderick

unread,

Jul 5, 2017, 3:33:19 PM7/5/17

to

I am trying to compile tcltls-1.7.12 in FreeBSD
(https://core.tcl.tk/tcltls/wiki/Download)
and get the error: "error: Unable to get OpenSSL Configuration".

I have configure with: "--with-ssl=openssl", but I
do not know what to put in "--with-openssl-dir="

What is "openssl-dir"?

I have the headers in "/usr/include/openssl/"
and the liebraries in "/usr/lib".

Thanks for any hint
Rodrigo.

rfr...@deltadatentechnik.de

unread,

Jul 6, 2017, 5:45:40 AM7/6/17

to

please try
configure .. --with-openssl-dir=path_to_openssl_sources ..
Roland

Roderick

unread,

Jul 6, 2017, 8:14:28 AM7/6/17

to

On Thu, 6 Jul 2017, rfrank wrote:

> please try
> configure .. --with-openssl-dir=path_to_openssl_sources ..

Well, I downloaded the system sources, because I compile from time
to time the kernel.

It seems, the openssl sources are in in "/usr/src/crypto/openssl/".
I could also download a newer version of OpenSSL or LibreSSL.

But was this meant by the authors of TclTLS?! This was not necessary
to compile the older tls1.6.7.

I wonder, why things always become more complicated.

Rodrigo.

Arjen Markus

unread,

Jul 6, 2017, 8:23:48 AM7/6/17

to

On Thursday, July 6, 2017 at 2:14:28 PM UTC+2, Roderick wrote:

>
> I wonder, why things always become more complicated.
>
> Rodrigo.

It is the universe working its way to an increasing entropy and finally heat death. Nothing that can be done about it. (At least so it seems when I am in somber of whimsical mood ...)

Regards,

Arjen

Keith Nash

unread,

Jul 6, 2017, 8:54:44 AM7/6/17

to

Try --with-openssl-dir=/usr

Keith.

Roderick

unread,

Jul 6, 2017, 9:25:55 AM7/6/17

to

On Thu, 6 Jul 2017, Keith Nash wrote:

> Try --with-openssl-dir=/usr

Thanks. With this, it compiled with tcl8.6.6, but I get an
error when loading:

>>
% package require tls
couldn't load file "/usr/opt/tcl86/lib/tcltls1.7.12/tcltls.so":
/usr/opt/tcl86/lib/tcltls1.7.12/tcltls.so: Undefined symbol "get_dhParams"
<<

Rodrigo.

Rodrigo Readi

unread,

Jul 6, 2017, 11:33:24 AM7/6/17

to

BTW, get_dhParams() ist not even declared. When compiling I get:

>>
./tls.c: In function 'CTX_Init':
./tls.c:1182:11: warning: implicit declaration of function 'get_dhParams'
[-Wimplicit-function-declaration]
dh = get_dhParams();
^
./tls.c:1182:9: warning: assignment makes pointer from integer without a
cast [-Wint-conversion]
dh = get_dhParams();
^
./tls.c: At top level:
cc1: warning: unrecognized command line option '-Wno-self-assign'
<<

Installed openssl version: OpenSSL 1.0.2j-freebsd 26 Sep 2016

Rodrigo

Roderick

unread,

Jul 8, 2017, 6:06:40 AM7/8/17

to

And compiling with "--with-ssl=nss" I get the error:

>>
% package require tls
couldn't load file "/usr/opt/tcl86/lib/tcltls1.7.12/tcltls.so":
/usr/opt/tcl86/lib/tcltls1.7.12/tcltls.so: Undefined symbol

"SSL_CTX_set_client_CA_list"
<<

Version of nss: 3.30

Keith Nash

unread,

Jul 8, 2017, 9:31:18 AM7/8/17

to

FreeBSD Ports includes a version of TclTLS 1.7.12. It might be helpful to
build OpenSSL and TclTLS using the FreeBSD recipe, and then examine how your
build procedure differs from the "official" one.

Keith.

Roderick

unread,

Jul 9, 2017, 11:30:15 AM7/9/17

to

On Sat, 8 Jul 2017, Keith Nash wrote:

> FreeBSD Ports includes a version of TclTLS 1.7.12. It might be helpful to
> build OpenSSL and TclTLS using the FreeBSD recipe, and then examine how your
> build procedure differs from the "official" one.

Thanks. I updated the "/usr/ports" directory and applied the patch in

/usr/ports/devel/tcltls/files/patch-gen_dh_params

to the file gen_dh_params

And then it compiled without warning an run without error.

To see why this patch is necessary, is another story.

Rodrigo