Page 1 of 1

OpenVPN reports different version of OpenSSL from what is installed

Posted: Sat Jun 03, 2017 9:57 am
by banjo
Another noob question:

I built from source and installed OpenSSL 1.0.2l into the standard system libraries successfully.

I then installed prerequisite packages for OpenVPN which caused OpenSSL 1.0.1t to be installed, overwriting my newly created OpenSSL. So, before building OpenVPN, I ran a "make install" from the OpenSSL 1.0.2l libraries, which overwrote the newly installed 1.0.1t OpenSSL. Following the "make install", an "openssl version" command reported that it was 1.0.2l (so far so good I thought).

I then built OpenVPN using the dpkg suite and installed it. Now, an "openvpn --version" command reports that it is using OpenSSL 1.0.1t even though OpenSSL is still reporting that it is 1.0.2l

noob questions:
a. why the discrepency
b. is openvpn using 1.0.1t or 1.0.2l
c. what have I done wrong
d. how do I fix this (do I need to)

regards, Banjo

Re: OpenVPN reports different version of OpenSSL from what is installed

Posted: Wed Jun 07, 2017 8:30 am
by banjo
bump

I have even run "sudo apt-get remove openssl" followed by a re-install of my compiled binaries. Same result.

Surely there must be some boffin out there that can answer this ...

Re: OpenVPN reports different version of OpenSSL from what is installed

Posted: Wed Jun 07, 2017 8:55 am
by TiTex
your are probably building openvpn against openssl OpenSSL 1.0.1t headers

Re: OpenVPN reports different version of OpenSSL from what is installed

Posted: Wed Jun 07, 2017 11:06 am
by banjo
Thanks Titex.

That is what I am concluding BUT I could not verify that fact. Noob here thinks "I have run apt-get remove openssl" so why are the headers still there? And, if they are still there, how do I get rid of them once and for all? And, do you know what directory they would be in? I have found headers in /usr/include/openssl but they seem to be the headers from the newly build openssl

Re: OpenVPN reports different version of OpenSSL from what is installed

Posted: Wed Jun 07, 2017 11:15 am
by TiTex
headers are not included in openssl package , those are usually in dev or devel packages depending on what type of distribution you have
and you should never remove a package like openssl that is provided by your distro , you risk messing it up, instead you should install the new version to a different location (/usr/local/ssl/ by default i think) and if you need to use that version for some things just add it to your PATH before the distribution's version.

Re: OpenVPN reports different version of OpenSSL from what is installed

Posted: Wed Jun 07, 2017 12:06 pm
by banjo
Thanks TiTex - will start again and see how I go