Vpnc with OpenSSL

Hi Folks,
I am a longtime ubuntu user switching to Arch. Just installed Arch on my thinkpad R50p  and extremely impressed with it. I have gotten almost everything working properly but setting up vpn.
I am aware that vpnc does not come with OpenSSL. Can someone guide me for building VPNC with OpenSSL? On ubuntu, I usually get the VPNC source and uncomment the OpenSSL lines, build a debian package and install it. The procedure is:
sudo apt-get update
sudo apt-get build-dep vpnc
sudo apt-get install libssl-dev
mkdir ~/src/vpnc -p
cd ~/src/vpnc
apt-get source vpnc
cd vpnc-*
sudo gedit Makefile
These two lines need to be uncommented in the makefile
OPENSSL_GPL_VIOLATION = DOPENSSL_GPL_VIOLATION
OPENSSLLIBS = -lcrypto
dpkg-buildpackage
sudo dpkg -i ../vpnc*.deb
Looking to learn how to do this on Arch - if someone can point me the right direction, I'll be grateful!

Pierre wrote:
Afaik our vpnc packages comes with openssl support.
And to answer your question: Look for ABS in our wiki and documentation.
Thanks for pointing me to ABS - that's what I wanted.
And I just checked and you are right, vpnc does come with openssl support. I am able to connect now, but I get this error:
Device "eth0
eth0" does not exist.
SIOCSIFMTU: Invalid argument
There is a bug report in launchpad about this: https://bugs.launchpad.net/ubuntu/+sour … bug/382168
and changing line 93 in /etc/vpnc/cpnc-script to the following fixes the above issue:
DEV=$($IPROUTE route \
| sed -ne 's/^default.* dev \([[:alnum:]-]\+\)\(.*metric \([0-9]\+\)\)\{0,1\}.*$/\1 \3/p' \
| sort -n -k2 \
| sed -e '1{s/^\([[:alnum:]-]\+\).*$/\1/;q}')
Last edited by psrivats (2010-03-21 18:33:36)

Similar Messages

  • [SOLVED] Problem building php 5.3 with openssl

    Hi,
    I stuck with this issue and don't really know what's wrong and what to do:
    $ pacman -Qs openssl
    local/lib32-openssl 1.0.1.i-1
    The Open Source toolkit for Secure Sockets Layer and Transport Layer Security (32-bit)
    local/openssl 1.0.1.i-1
    The Open Source toolkit for Secure Sockets Layer and Transport Layer Security
    $ ./configure --with-openssl && make
    loading cache ./config.cache
    checking for Cygwin environment... (cached) no
    checking for mingw32 environment... (cached) no
    checking for egrep... (cached) grep -E
    checking for a sed that does not truncate output... (cached) /usr/bin/sed
    checking host system type... x86_64-unknown-linux-gnu
    checking target system type... x86_64-unknown-linux-gnu
    checking for gcc... (cached) gcc
    checking whether the C compiler (gcc ) works... yes
    checking whether the C compiler (gcc ) is a cross-compiler... no
    checking whether we are using GNU C... (cached) yes
    checking whether gcc accepts -g... (cached) yes
    checking how to run the C preprocessor... (cached) gcc -E
    checking for icc... no
    checking for suncc... no
    checking whether gcc and cc understand -c and -o together... (cached) yes
    checking how to run the C preprocessor... gcc -E
    checking for AIX... no
    checking whether ln -s works... (cached) yes
    checking for system library directory... lib
    checking whether to enable runpaths... yes
    checking if compiler supports -R... (cached) no
    checking if compiler supports -Wl,-rpath,... (cached) yes
    checking for gawk... (cached) gawk
    checking for bison... (cached) bison -y
    checking for bison version... (cached) 2.6.4 (ok)
    checking for re2c... (cached) re2c
    checking for re2c version... (cached) 0.13.7.5 (ok)
    checking whether to enable computed goto gcc extension with re2c... no
    checking whether to force non-PIC code in shared modules... no
    checking whether /dev/urandom exists... yes
    checking for pthreads_cflags... (cached) -pthread
    checking for pthreads_lib... (cached)
    [1mConfiguring SAPI modules[m
    checking for AOLserver support... no
    checking for Apache 1.x module support via DSO through APXS... no
    checking for Apache 1.x module support... no
    checking whether to enable Apache charset compatibility option... no
    checking for Apache 2.0 filter-module support via DSO through APXS... no
    checking for Apache 2.0 handler-module support via DSO through APXS... no
    checking for Apache 1.x (hooks) module support via DSO through APXS... no
    checking for Apache 1.x (hooks) module support... no
    checking whether to enable Apache charset compatibility option... no
    checking for Caudium support... no
    checking for CLI build... yes
    checking for Continuity support... no
    checking for embedded SAPI library support... no
    checking for FPM build... no
    checking for Zeus ISAPI support... no
    checking for LiteSpeed support... no
    checking for Milter support... no
    checking for NSAPI support... no
    checking for PHTTPD support... no
    checking for Pi3Web support... no
    checking whether Roxen module is build using ZTS... no
    checking for Roxen/Pike support...
    checking for thttpd... no
    checking for TUX... no
    checking for webjames... no
    checking whether to build CGI binary... yes
    checking for socklen_t in sys/socket.h... yes
    checking for sun_len in sys/un.h... no
    checking whether cross-process locking is required by accept()... no
    checking for chosen SAPI module... cgi
    [1mRunning system checks[m
    checking for sendmail... no
    checking whether system uses EBCDIC... (cached) no
    checking whether byte ordering is bigendian... (cached) no
    checking whether writing to stdout works... (cached) yes
    checking for socket... yes
    checking for socketpair... yes
    checking for htonl... yes
    checking for gethostname... yes
    checking for gethostbyaddr... yes
    checking for yp_get_default_domain... no
    checking for __yp_get_default_domain... no
    checking for yp_get_default_domain in -lnsl... yes
    checking for dlopen... no
    checking for __dlopen... no
    checking for dlopen in -ldl... yes
    checking for sin in -lm... (cached) yes
    checking for inet_aton... yes
    checking for ANSI C header files... (cached) yes
    checking for dirent.h that defines DIR... (cached) yes
    checking for opendir in -ldir... (cached) no
    checking for inttypes.h... (cached) yes
    checking for stdint.h... (cached) yes
    checking for dirent.h... (cached) yes
    checking for ApplicationServices/ApplicationServices.h... (cached) no
    checking for sys/param.h... (cached) yes
    checking for sys/types.h... (cached) yes
    checking for sys/time.h... (cached) yes
    checking for netinet/in.h... (cached) yes
    checking for alloca.h... (cached) yes
    checking for arpa/inet.h... (cached) yes
    checking for arpa/nameser.h... (cached) yes
    checking for assert.h... (cached) yes
    checking for crypt.h... (cached) yes
    checking for dns.h... (cached) no
    checking for fcntl.h... (cached) yes
    checking for grp.h... (cached) yes
    checking for ieeefp.h... (cached) no
    checking for langinfo.h... (cached) yes
    checking for limits.h... (cached) yes
    checking for locale.h... (cached) yes
    checking for monetary.h... (cached) yes
    checking for netdb.h... (cached) yes
    checking for pwd.h... (cached) yes
    checking for resolv.h... (cached) yes
    checking for signal.h... (cached) yes
    checking for stdarg.h... (cached) yes
    checking for stdlib.h... (cached) yes
    checking for string.h... (cached) yes
    checking for syslog.h... (cached) yes
    checking for sysexits.h... (cached) yes
    checking for sys/ioctl.h... (cached) yes
    checking for sys/file.h... (cached) yes
    checking for sys/mman.h... (cached) yes
    checking for sys/mount.h... (cached) yes
    checking for sys/poll.h... (cached) yes
    checking for sys/resource.h... (cached) yes
    checking for sys/select.h... (cached) yes
    checking for sys/socket.h... (cached) yes
    checking for sys/stat.h... (cached) yes
    checking for sys/statfs.h... (cached) yes
    checking for sys/statvfs.h... (cached) yes
    checking for sys/vfs.h... (cached) yes
    checking for sys/sysexits.h... (cached) no
    checking for sys/varargs.h... (cached) no
    checking for sys/wait.h... (cached) yes
    checking for sys/loadavg.h... (cached) no
    checking for termios.h... (cached) yes
    checking for unistd.h... (cached) yes
    checking for unix.h... (cached) no
    checking for utime.h... (cached) yes
    checking for sys/utsname.h... (cached) yes
    checking for sys/ipc.h... (cached) yes
    checking for dlfcn.h... (cached) yes
    checking for assert.h... (cached) yes
    checking for fopencookie... (cached) yes
    checking for broken getcwd... no
    checking for broken libc stdio... (cached) yes
    checking whether struct tm is in sys/time.h or time.h... (cached) time.h
    checking for tm_zone in struct tm... (cached) yes
    checking for missing declarations of reentrant functions... done
    checking for fclose declaration... ok
    checking for tm_gmtoff in struct tm... (cached) yes
    checking for struct flock... (cached) yes
    checking for socklen_t... (cached) yes
    checking size of size_t... (cached) 8
    checking size of long long... (cached) 8
    checking size of long long int... (cached) 8
    checking size of long... (cached) 8
    checking size of int... (cached) 4
    checking size of intmax_t... (cached) 8
    checking size of ssize_t... (cached) 8
    checking size of ptrdiff_t... (cached) 8
    checking for st_blksize in struct stat... (cached) yes
    checking for st_blocks in struct stat... (cached) yes
    checking for st_rdev in struct stat... (cached) yes
    checking for size_t... (cached) yes
    checking for uid_t in sys/types.h... (cached) yes
    checking for struct sockaddr_storage... (cached) yes
    checking for field sa_len in struct sockaddr... (cached) no
    checking for IPv6 support... (cached) yes
    checking for vprintf... (cached) yes
    checking for alphasort... (cached) yes
    checking for asctime_r... (cached) yes
    checking for chroot... (cached) yes
    checking for ctime_r... (cached) yes
    checking for cuserid... (cached) yes
    checking for crypt... (cached) no
    checking for flock... (cached) yes
    checking for ftok... (cached) yes
    checking for funopen... (cached) no
    checking for gai_strerror... (cached) yes
    checking for gcvt... (cached) yes
    checking for getloadavg... (cached) yes
    checking for getlogin... (cached) yes
    checking for getprotobyname... (cached) yes
    checking for getprotobynumber... (cached) yes
    checking for getservbyname... (cached) yes
    checking for getservbyport... (cached) yes
    checking for gethostname... (cached) yes
    checking for getrusage... (cached) yes
    checking for gettimeofday... (cached) yes
    checking for gmtime_r... (cached) yes
    checking for getpwnam_r... (cached) yes
    checking for getgrnam_r... (cached) yes
    checking for getpwuid_r... (cached) yes
    checking for grantpt... (cached) yes
    checking for inet_ntoa... (cached) yes
    checking for inet_ntop... (cached) yes
    checking for inet_pton... (cached) yes
    checking for isascii... (cached) yes
    checking for link... (cached) yes
    checking for localtime_r... (cached) yes
    checking for lockf... (cached) yes
    checking for lchown... (cached) yes
    checking for lrand48... (cached) yes
    checking for memcpy... (cached) yes
    checking for memmove... (cached) yes
    checking for mkstemp... (cached) yes
    checking for mmap... (cached) yes
    checking for nl_langinfo... (cached) yes
    checking for perror... (cached) yes
    checking for poll... (cached) yes
    checking for ptsname... (cached) yes
    checking for putenv... (cached) yes
    checking for realpath... (cached) yes
    checking for random... (cached) yes
    checking for rand_r... (cached) yes
    checking for scandir... (cached) yes
    checking for setitimer... (cached) yes
    checking for setlocale... (cached) yes
    checking for localeconv... (cached) yes
    checking for setenv... (cached) yes
    checking for setpgid... (cached) yes
    checking for setsockopt... (cached) yes
    checking for setvbuf... (cached) yes
    checking for shutdown... (cached) yes
    checking for sin... (cached) yes
    checking for snprintf... (cached) yes
    checking for srand48... (cached) yes
    checking for srandom... (cached) yes
    checking for statfs... (cached) yes
    checking for statvfs... (cached) yes
    checking for std_syslog... (cached) no
    checking for strcasecmp... (cached) yes
    checking for strcoll... (cached) yes
    checking for strdup... (cached) yes
    checking for strerror... (cached) yes
    checking for strftime... (cached) yes
    checking for strnlen... (cached) yes
    checking for strptime... (cached) yes
    checking for strstr... (cached) yes
    checking for strtok_r... (cached) yes
    checking for symlink... (cached) yes
    checking for tempnam... (cached) yes
    checking for tzset... (cached) yes
    checking for unlockpt... (cached) yes
    checking for unsetenv... (cached) yes
    checking for usleep... (cached) yes
    checking for utime... (cached) yes
    checking for vsnprintf... (cached) yes
    checking for vasprintf... (cached) yes
    checking for asprintf... (cached) yes
    checking for nanosleep... (cached) yes
    checking for nanosleep in -lrt... yes
    checking for getaddrinfo... (cached) yes
    checking for __sync_fetch_and_add... (cached) yes
    checking for strlcat... (cached) no
    checking for strlcpy... (cached) no
    checking for getopt... (cached) yes
    checking whether utime accepts a null argument... (cached) yes
    checking for working alloca.h... (cached) yes
    checking for alloca... (cached) yes
    checking for declared timezone... (cached) yes
    checking for type of reentrant time-related functions... (cached) POSIX
    checking for readdir_r... (cached) yes
    checking for type of readdir_r... (cached) POSIX
    checking for in_addr_t... (cached) yes
    checking for crypt_r... (cached) no
    [1mGeneral settings[m
    checking whether to include gcov symbols... no
    checking whether to include debugging symbols... no
    checking layout of installed files... PHP
    checking path to configuration file... DEFAULT
    checking where to scan for configuration files...
    checking whether to enable safe mode by default... no
    checking for safe mode exec dir... /usr/local/php/bin
    checking whether to enable PHP's own SIGCHLD handler... no
    checking whether to enable magic quotes by default... no
    checking whether to explicitly link against libgcc... no
    checking whether to enable short tags by default... yes
    checking whether to enable dmalloc... no
    checking whether to enable IPv6 support... yes
    checking how big to make fd sets... using system default
    [1mConfiguring extensions[m
    checking size of long... (cached) 8
    checking size of int... (cached) 4
    checking for int32_t... (cached) yes
    checking for uint32_t... (cached) yes
    checking for sys/types.h... (cached) yes
    checking for inttypes.h... (cached) yes
    checking for stdint.h... (cached) yes
    checking for string.h... (cached) yes
    checking for stdlib.h... (cached) yes
    checking for strtoll... (cached) yes
    checking for atoll... (cached) yes
    checking for strftime... (cached) yes
    checking which regex library to use... php
    checking whether to enable LIBXML support... yes
    checking libxml2 install dir... no
    checking for xml2-config path... (cached) /usr/bin/xml2-config
    checking whether libxml build works... (cached) yes
    checking for OpenSSL support... yes
    checking for Kerberos support... no
    checking for DSA_get_default_method in -lssl... (cached) no
    checking for X509_free in -lcrypto... (cached) yes
    checking for pkg-config... (cached) /usr/bin/pkg-config
    checking for PCRE library to use... bundled
    checking whether to enable the SQLite3 extension... yes
    checking bundled sqlite3 library... yes
    checking for ZLIB support... no
    checking if the location of ZLIB install directory is defined... no
    checking whether to enable bc style precision math functions... no
    checking for BZip2 support... no
    checking whether to enable calendar conversion support... no
    checking whether to enable ctype functions... yes
    checking for cURL support... no
    checking if we should use cURL for url streams... no
    checking for QDBM support... no
    checking for GDBM support... no
    checking for NDBM support... no
    checking for Berkeley DB4 support... no
    checking for Berkeley DB3 support... no
    checking for Berkeley DB2 support... no
    checking for DB1 support... no
    checking for DBM support... no
    checking for CDB support... no
    checking for INI File support... no
    checking for FlatFile support... no
    checking whether to enable DBA interface... no
    checking whether to enable DOM support... yes
    checking for xml2-config path... (cached) /usr/bin/xml2-config
    checking whether libxml build works... (cached) yes
    checking for ENCHANT support... no
    checking whether to enable EXIF (metadata from images) support... no
    checking for fileinfo support... yes
    checking for utimes... (cached) yes
    checking for strndup... (cached) yes
    checking whether to enable input filter support... yes
    checking pcre install prefix... no
    checking whether to enable FTP support... no
    checking OpenSSL dir for FTP... no
    checking for GD support... no
    checking for the location of libjpeg... no
    checking for the location of libpng... no
    checking for the location of libXpm... no
    checking for FreeType 2... no
    checking for T1lib support... no
    checking whether to enable truetype string function in GD... no
    checking whether to enable JIS-mapped Japanese font support in GD... no
    checking for GNU gettext support... no
    checking for GNU MP support... no
    checking for mhash support... no
    checking whether to enable hash support... yes
    checking whether byte ordering is bigendian... (cached) no
    checking size of short... (cached) 2
    checking size of int... (cached) 4
    checking size of long... (cached) 8
    checking size of long long... (cached) 8
    checking for iconv support... yes
    checking for iconv... (cached) yes
    checking if iconv is glibc's... yes
    checking if iconv supports errno... yes
    checking if your cpp allows macro usage in include lines... yes
    checking for IMAP support... no
    checking for IMAP Kerberos support... no
    checking for IMAP SSL support... no
    checking for InterBase support... no
    checking whether to enable internationalization support... no
    checking whether to enable JavaScript Object Serialization support... yes
    checking for ANSI C header files... (cached) yes
    checking for LDAP support... no
    checking for LDAP Cyrus SASL support... no
    checking whether to enable multibyte string support... no
    checking whether to enable multibyte regex support... yes
    checking whether to check multibyte regex backtrack... yes
    checking for external libmbfl... no
    checking for external oniguruma... no
    checking for mcrypt support... no
    checking for MSSQL support via FreeTDS... no
    checking for MySQL support... no
    checking for specified location of the MySQL UNIX socket... no
    checking for MySQLi support... no
    checking whether to enable embedded MySQLi support... no
    checking for Oracle Database OCI8 support... no
    checking whether to enable pcntl support... no
    checking whether to enable PDO support... yes
    checking for PDO_DBLIB support via FreeTDS... no
    checking for Firebird support for PDO... no
    checking for MySQL support for PDO... no
    checking Oracle OCI support for PDO... no
    checking for ODBC v3 support for PDO... no
    checking for PostgreSQL support for PDO... no
    checking for sqlite 3 support for PDO... yes
    checking for PDO includes... checking for PDO includes... /home/yuri/_/php-5.3.29/ext
    checking for usleep... (cached) yes
    checking for nanosleep... (cached) yes
    checking for time.h... (cached) yes
    checking for fdatasync in -lrt... (cached) yes
    checking for PostgreSQL support... no
    checking for phar archive support... yes
    checking for phar openssl support... yes
    checking whether to enable POSIX-like functions... yes
    checking for sys/mkdev.h... (cached) no
    checking for seteuid... (cached) yes
    checking for setegid... (cached) yes
    checking for setsid... (cached) yes
    checking for getsid... (cached) yes
    checking for setpgid... (cached) yes
    checking for getpgid... (cached) yes
    checking for ctermid... (cached) yes
    checking for mkfifo... (cached) yes
    checking for mknod... (cached) yes
    checking for getrlimit... (cached) yes
    checking for getlogin... (cached) yes
    checking for getgroups... (cached) yes
    checking for makedev... (cached) no
    checking for initgroups... (cached) yes
    checking for getpwuid_r... (cached) yes
    checking for getgrgid_r... (cached) yes
    checking for working ttyname_r() implementation... yes
    checking for utsname.domainname... (cached) yes
    checking for PSPELL support... no
    checking for libedit readline replacement... no
    checking for readline support... no
    checking for recode support... no
    checking whether to enable PHP sessions... yes
    checking for mm support... no
    checking whether pwrite works... (cached) yes
    checking whether pread works... (cached) yes
    checking whether to enable shmop support... no
    checking whether to enable SimpleXML support... yes
    checking for xml2-config path... (cached) /usr/bin/xml2-config
    checking whether libxml build works... (cached) yes
    checking for SNMP support... no
    checking OpenSSL dir for SNMP... no
    checking whether to enable UCD SNMP hack... no
    checking whether to enable SOAP support... no
    checking whether to enable sockets support... no
    checking whether zend_object_value is packed... no
    checking for sqlite support... yes
    checking whether to enable UTF-8 support in sqlite (default: ISO-8859-1)... no
    checking for PDO includes... (cached) /home/yuri/_/php-5.3.29/ext
    checking for lemon... (cached) lemon
    checking for lemon version... (cached) 1.0 (ok)
    checking size of char *... (cached) 8
    checking for usleep... (cached) yes
    checking for nanosleep... (cached) yes
    checking for time.h... (cached) yes
    checking whether flush should be called explicitly after a buffered io... (cached) no
    checking for crypt in -lcrypt... (cached) yes
    checking for standard DES crypt... (cached) yes
    checking for extended DES crypt... (cached) no
    checking for MD5 crypt... (cached) yes
    checking for Blowfish crypt... (cached) no
    checking for SHA512 crypt... (cached) no
    checking for SHA256 crypt... (cached) no
    checking whether the compiler supports __alignof__... (cached) yes
    checking whether the compiler supports aligned attribute... (cached) yes
    checking for getcwd... (cached) yes
    checking for getwd... (cached) yes
    checking for asinh... (cached) yes
    checking for acosh... (cached) yes
    checking for atanh... (cached) yes
    checking for log1p... (cached) yes
    checking for hypot... (cached) yes
    checking for glob... (cached) yes
    checking for strfmon... (cached) yes
    checking for nice... (cached) yes
    checking for fpclass... (cached) no
    checking for isinf... (cached) yes
    checking for isnan... (cached) yes
    checking for mempcpy... (cached) yes
    checking for strpncpy... (cached) no
    checking for working fnmatch... (cached) yes
    checking for fork... (cached) yes
    checking if your OS can spawn processes with inherited handles... yes
    checking for res_nsearch... no
    checking for __res_nsearch... no
    checking for res_nsearch in -lresolv... no
    checking for __res_nsearch in -lresolv... yes
    checking for dns_search... no
    checking for __dns_search... no
    checking for dns_search in -lresolv... no
    checking for __dns_search in -lresolv... no
    checking for dns_search in -lbind... no
    checking for __dns_search in -lbind... no
    checking for dns_search in -lsocket... no
    checking for __dns_search in -lsocket... no
    checking for dn_expand... no
    checking for __dn_expand... yes
    checking for dn_skipname... no
    checking for __dn_skipname... yes
    checking for res_search... no
    checking for __res_search... yes
    checking whether atof() accepts NAN... (cached) yes
    checking whether atof() accepts INF... (cached) yes
    checking whether HUGE_VAL == INF... (cached) yes
    checking whether HUGE_VAL + -HUGEVAL == NAN... (cached) yes
    checking whether strptime() declaration fails... (cached) no
    checking for wchar.h... (cached) yes
    checking for mblen... (cached) yes
    checking for mbrlen... (cached) yes
    checking for mbsinit... (cached) yes
    checking for mbstate_t... (cached) yes
    checking for atomic.h... (cached) no
    checking for Sybase-CT support... no
    checking whether to enable System V IPC support... no
    checking whether to enable System V semaphore support... no
    checking whether to enable System V shared memory support... no
    checking for TIDY support... no
    checking whether to enable tokenizer support... yes
    checking whether to enable WDDX support... no
    checking libexpat dir for WDDX... no
    checking whether to enable XML support... yes
    checking libexpat install dir... no
    checking for xml2-config path... (cached) /usr/bin/xml2-config
    checking whether libxml build works... (cached) yes
    checking whether to enable XMLReader support... yes
    checking for xml2-config path... (cached) /usr/bin/xml2-config
    checking whether libxml build works... (cached) yes
    checking for XMLRPC-EPI support... no
    checking libexpat dir for XMLRPC-EPI... no
    checking iconv dir for XMLRPC-EPI... no
    checking whether to enable XMLWriter support... yes
    checking for xml2-config path... (cached) /usr/bin/xml2-config
    checking whether libxml build works... (cached) yes
    checking for XSL support... no
    checking for zip archive read/writesupport... no
    checking pcre install prefix... no
    checking whether to enable mysqlnd... no
    checking whether to disable compressed protocol support in mysqlnd... yes
    [1mConfiguring PEAR[m
    checking whether to install PEAR... yes
    [1mConfiguring Zend[m
    checking for bison version... (cached) 2.6.4 (ok)
    checking for inttypes.h... (cached) yes
    checking for stdint.h... (cached) yes
    checking for limits.h... (cached) yes
    checking for malloc.h... (cached) yes
    checking for string.h... (cached) yes
    checking for unistd.h... (cached) yes
    checking for stdarg.h... (cached) yes
    checking for sys/types.h... (cached) yes
    checking for sys/time.h... (cached) yes
    checking for signal.h... (cached) yes
    checking for unix.h... (cached) no
    checking for stdlib.h... (cached) yes
    checking for dlfcn.h... (cached) yes
    checking for size_t... (cached) yes
    checking return type of signal handlers... (cached) void
    checking for uint... (cached) yes
    checking for ulong... (cached) yes
    checking for int32_t... yes
    checking for uint32_t... yes
    checking for vprintf... (cached) yes
    checking for 8-bit clean memcmp... (cached) yes
    checking for working alloca.h... (cached) yes
    checking for alloca... (cached) yes
    checking for memcpy... (cached) yes
    checking for strdup... (cached) yes
    checking for getpid... (cached) yes
    checking for kill... (cached) yes
    checking for strtod... (cached) yes
    checking for strtol... (cached) yes
    checking for finite... (cached) yes
    checking for fpclass... (cached) no
    checking for sigsetjmp... (cached) no
    checking whether sprintf is broken... (cached) no
    checking for finite... (cached) yes
    checking for isfinite... (cached) no
    checking for isinf... (cached) yes
    checking for isnan... (cached) yes
    checking whether fp_except is defined... (cached) no
    checking for usable _FPU_SETCW... yes
    checking for usable fpsetprec... no
    checking for usable _controlfp... no
    checking for usable _controlfp_s... no
    checking whether FPU control word can be manipulated by inline assembler... yes
    checking whether double cast to long preserves least significant bits... no
    checking for dlfcn.h... (cached) yes
    checking whether dlsym() requires a leading underscore in symbol names... no
    checking virtual machine dispatch method... CALL
    checking whether to enable thread-safety... no
    checking whether to enable inline optimization for GCC... yes
    checking whether to enable Zend debugging... no
    checking whether to enable Zend multibyte... no
    checking for inline... (cached) inline
    checking target system is Darwin... no
    checking for MM alignment and log values... done
    checking for memory allocation using mmap(MAP_ANON)... yes
    checking for memory allocation using mmap(/dev/zero)... yes
    checking for mremap... (cached) yes
    [1mConfiguring TSRM[m
    checking for stdarg.h... (cached) yes
    [1mConfiguring libtool[m
    checking build system type... x86_64-unknown-linux-gnu
    checking for ld used by gcc... (cached) /usr/bin/ld
    checking if the linker (/usr/bin/ld) is GNU ld... (cached) yes
    checking for /usr/bin/ld option to reload object files... (cached) -r
    checking for BSD-compatible nm... (cached) /usr/bin/nm -B
    checking how to recognize dependent libraries... (cached) pass_all
    checking for object suffix... (cached) o
    checking for executable suffix... (cached) no
    checking the maximum length of command line arguments... (cached) 1572864
    checking command to parse /usr/bin/nm -B output from gcc object... (cached) ok
    checking for objdir... (cached) .libs
    checking for ar... (cached) ar
    checking for ranlib... (cached) ranlib
    checking for strip... (cached) strip
    checking if gcc supports -fno-rtti -fno-exceptions... (cached) no
    checking for gcc option to produce PIC... -fPIC
    checking if gcc PIC flag -fPIC works... (cached) yes
    checking if gcc static flag -static works... (cached) yes
    checking if gcc supports -c -o file.o... (cached) yes
    checking whether the gcc linker (/usr/bin/ld -m elf_x86_64) supports shared libraries... yes
    checking dynamic linker characteristics... GNU/Linux ld.so
    (cached) (cached) checking how to hardcode library paths into programs... immediate
    checking whether stripping libraries is possible... yes
    checking if libtool supports shared libraries... yes
    checking whether to build shared libraries... no
    checking whether to build static libraries... yes
    creating libtool
    appending configuration tag "CXX" to libtool
    [1mGenerating files[m
    creating ./config.status
    creating php5.spec
    creating main/build-defs.h
    creating scripts/phpize
    creating scripts/man1/phpize.1
    creating scripts/php-config
    creating scripts/man1/php-config.1
    creating sapi/cli/php.1
    creating main/php_config.h
    main/php_config.h is unchanged
    creating main/internal_functions.c
    creating main/internal_functions_cli.c
    +--------------------------------------------------------------------+
    | License: |
    | This software is subject to the PHP License, available in this |
    | distribution in the file LICENSE. By continuing this installation |
    | process, you are bound by the terms of this license agreement. |
    | If you do not agree with the terms of this license, you must abort |
    | the installation process at this point. |
    +--------------------------------------------------------------------+
    Thank you for using PHP.
    /bin/sh /home/yuri/_/php-5.3.29/libtool --silent --preserve-dup-deps --mode=compile gcc -Iext/standard/ -I/home/yuri/_/php-5.3.29/ext/standard/ -DPHP_ATOM_INC -I/home/yuri/_/php-5.3.29/include -I/home/yuri/_/php-5.3.29/main -I/home/yuri/_/php-5.3.29 -I/home/yuri/_/php-5.3.29/ext/date/lib -I/home/yuri/_/php-5.3.29/ext/ereg/regex -I/usr/include/libxml2 -I/home/yuri/_/php-5.3.29/ext/sqlite3/libsqlite -I/home/yuri/_/php-5.3.29/TSRM -I/home/yuri/_/php-5.3.29/Zend -I/usr/include -g -O2 -fvisibility=hidden -c /home/yuri/_/php-5.3.29/ext/standard/info.c -o ext/standard/info.lo
    /bin/sh /home/yuri/_/php-5.3.29/libtool --silent --preserve-dup-deps --mode=compile gcc -Imain/ -I/home/yuri/_/php-5.3.29/main/ -DPHP_ATOM_INC -I/home/yuri/_/php-5.3.29/include -I/home/yuri/_/php-5.3.29/main -I/home/yuri/_/php-5.3.29 -I/home/yuri/_/php-5.3.29/ext/date/lib -I/home/yuri/_/php-5.3.29/ext/ereg/regex -I/usr/include/libxml2 -I/home/yuri/_/php-5.3.29/ext/sqlite3/libsqlite -I/home/yuri/_/php-5.3.29/TSRM -I/home/yuri/_/php-5.3.29/Zend -I/usr/include -g -O2 -fvisibility=hidden -c main/internal_functions.c -o main/internal_functions.lo
    /bin/sh /home/yuri/_/php-5.3.29/libtool --silent --preserve-dup-deps --mode=link gcc -export-dynamic -I/usr/include -g -O2 -fvisibility=hidden ext/date/php_date.lo ext/date/lib/astro.lo ext/date/lib/dow.lo ext/date/lib/parse_date.lo ext/date/lib/parse_tz.lo ext/date/lib/timelib.lo ext/date/lib/tm2unixtime.lo ext/date/lib/unixtime2tm.lo ext/date/lib/parse_iso_intervals.lo ext/date/lib/interval.lo ext/ereg/ereg.lo ext/ereg/regex/regcomp.lo ext/ereg/regex/regexec.lo ext/ereg/regex/regerror.lo ext/ereg/regex/regfree.lo ext/libxml/libxml.lo ext/openssl/openssl.lo ext/openssl/xp_ssl.lo ext/pcre/pcrelib/pcre_chartables.lo ext/pcre/pcrelib/pcre_ucd.lo ext/pcre/pcrelib/pcre_compile.lo ext/pcre/pcrelib/pcre_config.lo ext/pcre/pcrelib/pcre_exec.lo ext/pcre/pcrelib/pcre_fullinfo.lo ext/pcre/pcrelib/pcre_get.lo ext/pcre/pcrelib/pcre_globals.lo ext/pcre/pcrelib/pcre_maketables.lo ext/pcre/pcrelib/pcre_newline.lo ext/pcre/pcrelib/pcre_ord2utf8.lo ext/pcre/pcrelib/pcre_refcount.lo ext/pcre/pcrelib/pcre_study.lo ext/pcre/pcrelib/pcre_tables.lo ext/pcre/pcrelib/pcre_valid_utf8.lo ext/pcre/pcrelib/pcre_version.lo ext/pcre/pcrelib/pcre_xclass.lo ext/pcre/php_pcre.lo ext/sqlite3/sqlite3.lo ext/sqlite3/libsqlite/sqlite3.lo ext/ctype/ctype.lo ext/dom/php_dom.lo ext/dom/attr.lo ext/dom/document.lo ext/dom/domerrorhandler.lo ext/dom/domstringlist.lo ext/dom/domexception.lo ext/dom/namelist.lo ext/dom/processinginstruction.lo ext/dom/cdatasection.lo ext/dom/documentfragment.lo ext/dom/domimplementation.lo ext/dom/element.lo ext/dom/node.lo ext/dom/string_extend.lo ext/dom/characterdata.lo ext/dom/documenttype.lo ext/dom/domimplementationlist.lo ext/dom/entity.lo ext/dom/nodelist.lo ext/dom/text.lo ext/dom/comment.lo ext/dom/domconfiguration.lo ext/dom/domimplementationsource.lo ext/dom/entityreference.lo ext/dom/notation.lo ext/dom/xpath.lo ext/dom/dom_iterators.lo ext/dom/typeinfo.lo ext/dom/domerror.lo ext/dom/domlocator.lo ext/dom/namednodemap.lo ext/dom/userdatahandler.lo ext/fileinfo/fileinfo.lo ext/fileinfo/libmagic/apprentice.lo ext/fileinfo/libmagic/apptype.lo ext/fileinfo/libmagic/ascmagic.lo ext/fileinfo/libmagic/cdf.lo ext/fileinfo/libmagic/cdf_time.lo ext/fileinfo/libmagic/compress.lo ext/fileinfo/libmagic/encoding.lo ext/fileinfo/libmagic/fsmagic.lo ext/fileinfo/libmagic/funcs.lo ext/fileinfo/libmagic/is_tar.lo ext/fileinfo/libmagic/magic.lo ext/fileinfo/libmagic/print.lo ext/fileinfo/libmagic/readcdf.lo ext/fileinfo/libmagic/readelf.lo ext/fileinfo/libmagic/softmagic.lo ext/filter/filter.lo ext/filter/sanitizing_filters.lo ext/filter/logical_filters.lo ext/filter/callback_filter.lo ext/hash/hash.lo ext/hash/hash_md.lo ext/hash/hash_sha.lo ext/hash/hash_ripemd.lo ext/hash/hash_haval.lo ext/hash/hash_tiger.lo ext/hash/hash_gost.lo ext/hash/hash_snefru.lo ext/hash/hash_whirlpool.lo ext/hash/hash_adler32.lo ext/hash/hash_crc32.lo ext/hash/hash_salsa.lo ext/iconv/iconv.lo ext/json/json.lo ext/json/utf8_to_utf16.lo ext/json/utf8_decode.lo ext/json/JSON_parser.lo ext/pdo/pdo.lo ext/pdo/pdo_dbh.lo ext/pdo/pdo_stmt.lo ext/pdo/pdo_sql_parser.lo ext/pdo/pdo_sqlstate.lo ext/pdo_sqlite/pdo_sqlite.lo ext/pdo_sqlite/sqlite_driver.lo ext/pdo_sqlite/sqlite_statement.lo ext/phar/util.lo ext/phar/tar.lo ext/phar/zip.lo ext/phar/stream.lo ext/phar/func_interceptors.lo ext/phar/dirstream.lo ext/phar/phar.lo ext/phar/phar_object.lo ext/phar/phar_path_check.lo ext/posix/posix.lo ext/reflection/php_reflection.lo ext/session/session.lo ext/session/mod_files.lo ext/session/mod_mm.lo ext/session/mod_user.lo ext/simplexml/simplexml.lo ext/simplexml/sxe.lo ext/spl/php_spl.lo ext/spl/spl_functions.lo ext/spl/spl_engine.lo ext/spl/spl_iterators.lo ext/spl/spl_array.lo ext/spl/spl_directory.lo ext/spl/spl_exceptions.lo ext/spl/spl_observer.lo ext/spl/spl_dllist.lo ext/spl/spl_heap.lo ext/spl/spl_fixedarray.lo ext/sqlite/sqlite.lo ext/sqlite/sess_sqlite.lo ext/sqlite/pdo_sqlite2.lo ext/sqlite/libsqlite/src/opcodes.lo ext/sqlite/libsqlite/src/parse.lo ext/sqlite/libsqlite/src/encode.lo ext/sqlite/libsqlite/src/auth.lo ext/sqlite/libsqlite/src/btree.lo ext/sqlite/libsqlite/src/build.lo ext/sqlite/libsqlite/src/delete.lo ext/sqlite/libsqlite/src/expr.lo ext/sqlite/libsqlite/src/func.lo ext/sqlite/libsqlite/src/hash.lo ext/sqlite/libsqlite/src/insert.lo ext/sqlite/libsqlite/src/main.lo ext/sqlite/libsqlite/src/os.lo ext/sqlite/libsqlite/src/pager.lo ext/sqlite/libsqlite/src/printf.lo ext/sqlite/libsqlite/src/random.lo ext/sqlite/libsqlite/src/select.lo ext/sqlite/libsqlite/src/table.lo ext/sqlite/libsqlite/src/tokenize.lo ext/sqlite/libsqlite/src/update.lo ext/sqlite/libsqlite/src/util.lo ext/sqlite/libsqlite/src/vdbe.lo ext/sqlite/libsqlite/src/attach.lo ext/sqlite/libsqlite/src/btree_rb.lo ext/sqlite/libsqlite/src/pragma.lo ext/sqlite/libsqlite/src/vacuum.lo ext/sqlite/libsqlite/src/copy.lo ext/sqlite/libsqlite/src/vdbeaux.lo ext/sqlite/libsqlite/src/date.lo ext/sqlite/libsqlite/src/where.lo ext/sqlite/libsqlite/src/trigger.lo ext/standard/crypt_freesec.lo ext/standard/crypt_blowfish.lo ext/standard/crypt_sha512.lo ext/standard/crypt_sha256.lo ext/standard/php_crypt_r.lo ext/standard/array.lo ext/standard/base64.lo ext/standard/basic_functions.lo ext/standard/browscap.lo ext/standard/crc32.lo ext/standard/crypt.lo ext/standard/cyr_convert.lo ext/standard/datetime.lo ext/standard/dir.lo ext/standard/dl.lo ext/standard/dns.lo ext/standard/exec.lo ext/standard/file.lo ext/standard/filestat.lo ext/standard/flock_compat.lo ext/standard/formatted_print.lo ext/standard/fsock.lo ext/standard/head.lo ext/standard/html.lo ext/standard/image.lo ext/standard/info.lo ext/standard/iptc.lo ext/standard/lcg.lo ext/standard/link.lo ext/standard/mail.lo ext/standard/math.lo ext/standard/md5.lo ext/standard/metaphone.lo ext/standard/microtime.lo ext/standard/pack.lo ext/standard/pageinfo.lo ext/standard/quot_print.lo ext/standard/rand.lo ext/standard/soundex.lo ext/standard/string.lo ext/standard/scanf.lo ext/standard/syslog.lo ext/standard/type.lo ext/standard/uniqid.lo ext/standard/url.lo ext/standard/var.lo ext/standard/versioning.lo ext/standard/assert.lo ext/standard/strnatcmp.lo ext/standard/levenshtein.lo ext/standard/incomplete_class.lo ext/standard/url_scanner_ex.lo ext/standard/ftp_fopen_wrapper.lo ext/standard/http_fopen_wrapper.lo ext/standard/php_fopen_wrapper.lo ext/standard/credits.lo ext/standard/css.lo ext/standard/var_unserializer.lo ext/standard/ftok.lo ext/standard/sha1.lo ext/standard/user_filters.lo ext/standard/uuencode.lo ext/standard/filters.lo ext/standard/proc_open.lo ext/standard/streamsfuncs.lo ext/standard/http.lo ext/tokenizer/tokenizer.lo ext/tokenizer/tokenizer_data.lo ext/xml/xml.lo ext/xml/compat.lo ext/xmlreader/php_xmlreader.lo ext/xmlwriter/php_xmlwriter.lo TSRM/TSRM.lo TSRM/tsrm_strtok_r.lo TSRM/tsrm_virtual_cwd.lo main/main.lo main/snprintf.lo main/spprintf.lo main/php_sprintf.lo main/safe_mode.lo main/fopen_wrappers.lo main/alloca.lo main/php_scandir.lo main/php_ini.lo main/SAPI.lo main/rfc1867.lo main/php_content_types.lo main/strlcpy.lo main/strlcat.lo main/mergesort.lo main/reentrancy.lo main/php_variables.lo main/php_ticks.lo main/network.lo main/php_open_temporary_file.lo main/php_logos.lo main/output.lo main/getopt.lo main/streams/streams.lo main/streams/cast.lo main/streams/memory.lo main/streams/filter.lo main/streams/plain_wrapper.lo main/streams/userspace.lo main/streams/transports.lo main/streams/xp_socket.lo main/streams/mmap.lo main/streams/glob_wrapper.lo Zend/zend_language_parser.lo Zend/zend_language_scanner.lo Zend/zend_ini_parser.lo Zend/zend_ini_scanner.lo Zend/zend_alloc.lo Zend/zend_compile.lo Zend/zend_constants.lo Zend/zend_dynamic_array.lo Zend/zend_execute_API.lo Zend/zend_highlight.lo Zend/zend_llist.lo Zend/zend_opcode.lo Zend/zend_operators.lo Zend/zend_ptr_stack.lo Zend/zend_stack.lo Zend/zend_variables.lo Zend/zend.lo Zend/zend_API.lo Zend/zend_extensions.lo Zend/zend_hash.lo Zend/zend_list.lo Zend/zend_indent.lo Zend/zend_builtin_functions.lo Zend/zend_sprintf.lo Zend/zend_ini.lo Zend/zend_qsort.lo Zend/zend_multibyte.lo Zend/zend_ts_hash.lo Zend/zend_stream.lo Zend/zend_iterators.lo Zend/zend_interfaces.lo Zend/zend_exceptions.lo Zend/zend_strtod.lo Zend/zend_gc.lo Zend/zend_closures.lo Zend/zend_float.lo Zend/zend_objects.lo Zend/zend_object_handlers.lo Zend/zend_objects_API.lo Zend/zend_default_classes.lo Zend/zend_execute.lo sapi/cgi/cgi_main.lo sapi/cgi/fastcgi.lo main/internal_functions.lo -lcrypt -lresolv -lcrypt -lrt -lrt -lm -ldl -lnsl -lxml2 -lz -lm -ldl -lxml2 -lz -lm -ldl -lxml2 -lz -lm -ldl -lcrypt -lxml2 -lz -lm -ldl -lxml2 -lz -lm -ldl -lxml2 -lz -lm -ldl -lcrypt -o sapi/cgi/php-cgi
    ext/openssl/openssl.o: In function `zm_startup_openssl':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:992: undefined reference to `SSL_library_init'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:993: undefined reference to `OpenSSL_add_all_ciphers'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:994: undefined reference to `OpenSSL_add_all_digests'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:995: undefined reference to `OPENSSL_add_all_algorithms_noconf'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:997: undefined reference to `ERR_load_ERR_strings'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:998: undefined reference to `ERR_load_crypto_strings'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:999: undefined reference to `ERR_load_EVP_strings'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1003: undefined reference to `SSL_get_ex_new_index'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1078: undefined reference to `X509_get_default_cert_area'
    ext/openssl/openssl.o: In function `zm_info_openssl':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1108: undefined reference to `SSLeay_version'
    ext/openssl/openssl.o: In function `zm_shutdown_openssl':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1118: undefined reference to `EVP_cleanup'
    ext/openssl/openssl.o: In function `add_assoc_name_entry':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:567: undefined reference to `X509_NAME_entry_count'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:572: undefined reference to `X509_NAME_get_entry'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:573: undefined reference to `X509_NAME_ENTRY_get_object'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:574: undefined reference to `OBJ_obj2nid'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:578: undefined reference to `OBJ_nid2sn'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:593: undefined reference to `X509_NAME_get_entry'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:594: undefined reference to `X509_NAME_ENTRY_get_data'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:595: undefined reference to `ASN1_STRING_type'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:596: undefined reference to `ASN1_STRING_to_UTF8'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:588: undefined reference to `X509_NAME_get_index_by_OBJ'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:567: undefined reference to `X509_NAME_entry_count'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:601: undefined reference to `ASN1_STRING_data'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:602: undefined reference to `ASN1_STRING_length'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:580: undefined reference to `OBJ_nid2ln'
    ext/openssl/openssl.o: In function `asn1_time_to_time_t':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:647: undefined reference to `ASN1_STRING_type'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:652: undefined reference to `ASN1_STRING_length'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:652: undefined reference to `ASN1_STRING_data'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:657: undefined reference to `ASN1_STRING_length'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:662: undefined reference to `ASN1_STRING_data'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:668: undefined reference to `ASN1_STRING_length'
    ext/openssl/openssl.o: In function `setup_verify':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1686: undefined reference to `X509_STORE_new'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1728: undefined reference to `X509_LOOKUP_file'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1728: undefined reference to `X509_STORE_add_lookup'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1730: undefined reference to `X509_LOOKUP_ctrl'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1734: undefined reference to `X509_LOOKUP_hash_dir'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1734: undefined reference to `X509_STORE_add_lookup'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1736: undefined reference to `X509_LOOKUP_ctrl'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1709: undefined reference to `X509_LOOKUP_file'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1709: undefined reference to `X509_STORE_add_lookup'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1710: undefined reference to `X509_LOOKUP_ctrl'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1717: undefined reference to `X509_LOOKUP_hash_dir'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1717: undefined reference to `X509_STORE_add_lookup'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1718: undefined reference to `X509_LOOKUP_ctrl'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1728: undefined reference to `X509_LOOKUP_file'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1728: undefined reference to `X509_STORE_add_lookup'
    ext/openssl/openssl.o: In function `php_sk_X509_free':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1786: undefined reference to `X509_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1784: undefined reference to `sk_pop'
    ext/openssl/openssl.o: In function `zif_openssl_pkcs12_read':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2024: undefined reference to `BIO_s_mem'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2024: undefined reference to `BIO_new'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2026: undefined reference to `BIO_write'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2092: undefined reference to `BIO_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2095: undefined reference to `EVP_PKEY_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2098: undefined reference to `X509_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2029: undefined reference to `d2i_PKCS12_bio'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2030: undefined reference to `PKCS12_parse'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2036: undefined reference to `BIO_s_mem'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2036: undefined reference to `BIO_new'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2037: undefined reference to `PEM_write_bio_X509'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2044: undefined reference to `BIO_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2046: undefined reference to `BIO_s_mem'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2046: undefined reference to `BIO_new'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2047: undefined reference to `PEM_write_bio_PrivateKey'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2054: undefined reference to `BIO_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2073: undefined reference to `BIO_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2075: undefined reference to `X509_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2061: undefined reference to `sk_pop'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2064: undefined reference to `BIO_s_mem'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2064: undefined reference to `BIO_new'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2065: undefined reference to `PEM_write_bio_X509'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2067: undefined reference to `BIO_ctrl'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2078: undefined reference to `sk_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2086: undefined reference to `PKCS12_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2049: undefined reference to `BIO_ctrl'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2039: undefined reference to `BIO_ctrl'
    ext/openssl/openssl.o: In function `php_openssl_dispose_config':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:859: undefined reference to `EVP_PKEY_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:863: undefined reference to `CONF_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:867: undefined reference to `CONF_free'
    ext/openssl/openssl.o: In function `php_openssl_load_rand_file':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:884: undefined reference to `RAND_egd'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:883: undefined reference to `RAND_file_name'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:890: undefined reference to `RAND_load_file'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:891: undefined reference to `RAND_status'
    ext/openssl/openssl.o: In function `php_openssl_write_rand_file':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:916: undefined reference to `RAND_write_file'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:914: undefined reference to `RAND_file_name'
    ext/openssl/openssl.o: In function `php_openssl_generate_private_key':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2855: undefined reference to `CONF_get_string'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2858: undefined reference to `EVP_PKEY_new'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2909: undefined reference to `EVP_PKEY_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2885: undefined reference to `DH_generate_parameters'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2889: undefined reference to `DH_get_default_method'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2889: undefined reference to `DH_set_method'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2890: undefined reference to `DH_check'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2895: undefined reference to `DH_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2861: undefined reference to `RSA_generate_key'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2861: undefined reference to `EVP_PKEY_assign'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2868: undefined reference to `DSA_generate_parameters'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2870: undefined reference to `DSA_get_default_method'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2870: undefined reference to `DSA_set_method'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2871: undefined reference to `DSA_generate_key'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2872: undefined reference to `EVP_PKEY_assign'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2876: undefined reference to `DSA_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2890: undefined reference to `DH_generate_key'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2891: undefined reference to `EVP_PKEY_assign'
    ext/openssl/openssl.o: In function `zif_openssl_pkey_get_details':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3282: undefined reference to `BIO_s_mem'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3282: undefined reference to `BIO_new'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3283: undefined reference to `PEM_write_bio_PUBKEY'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3284: undefined reference to `BIO_ctrl'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3287: undefined reference to `EVP_PKEY_bits'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3292: undefined reference to `EVP_PKEY_type'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3361: undefined reference to `BIO_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3302: undefined reference to `BN_num_bits'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3302: undefined reference to `BN_bn2bin'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3303: undefined reference to `BN_num_bits'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3303: undefined reference to `BN_bn2bin'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3304: undefined reference to `BN_num_bits'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3304: undefined reference to `BN_bn2bin'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3305: undefined reference to `BN_num_bits'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3305: undefined reference to `BN_bn2bin'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3306: undefined reference to `BN_num_bits'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3306: undefined reference to `BN_bn2bin'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3307: undefined reference to `BN_num_bits'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3307: undefined reference to `BN_bn2bin'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3308: undefined reference to `BN_num_bits'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3308: undefined reference to `BN_bn2bin'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3309: undefined reference to `BN_num_bits'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3309: undefined reference to `BN_bn2bin'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3325: undefined reference to `BN_num_bits'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3325: undefined reference to `BN_bn2bin'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3326: undefined reference to `BN_num_bits'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3326: undefined reference to `BN_bn2bin'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3327: undefined reference to `BN_num_bits'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3327: undefined reference to `BN_bn2bin'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3328: undefined reference to `BN_num_bits'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3328: undefined reference to `BN_bn2bin'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3329: undefined reference to `BN_num_bits'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3329: undefined reference to `BN_bn2bin'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3342: undefined reference to `BN_num_bits'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3342: undefined reference to `BN_bn2bin'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3343: undefined reference to `BN_num_bits'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3343: undefined reference to `BN_bn2bin'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3344: undefined reference to `BN_num_bits'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3344: undefined reference to `BN_bn2bin'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3345: undefined reference to `BN_num_bits'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3345: undefined reference to `BN_bn2bin'
    ext/openssl/openssl.o: In function `verify_callback':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4408: undefined reference to `X509_STORE_CTX_get_current_cert'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4409: undefined reference to `X509_STORE_CTX_get_error'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4410: undefined reference to `X509_STORE_CTX_get_error_depth'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4413: undefined reference to `SSL_get_ex_data_X509_STORE_CTX_idx'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4413: undefined reference to `X509_STORE_CTX_get_ex_data'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4414: undefined reference to `SSL_get_ex_data'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4427: undefined reference to `X509_STORE_CTX_set_error'
    ext/openssl/openssl.o: In function `zif_openssl_get_md_methods':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4663: undefined reference to `OBJ_NAME_do_all_sorted'
    ext/openssl/openssl.o: In function `zif_openssl_get_cipher_methods':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4679: undefined reference to `OBJ_NAME_do_all_sorted'
    ext/openssl/openssl.o: In function `zif_openssl_digest':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4700: undefined reference to `EVP_get_digestbyname'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4706: undefined reference to `EVP_MD_size'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4709: undefined reference to `EVP_DigestInit'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4710: undefined reference to `EVP_DigestUpdate'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4711: undefined reference to `EVP_DigestFinal'
    ext/openssl/openssl.o: In function `zif_openssl_dh_compute_key':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4965: undefined reference to `EVP_PKEY_type'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4969: undefined reference to `BN_bin2bn'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4971: undefined reference to `DH_size'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4972: undefined reference to `DH_compute_key'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4982: undefined reference to `BN_free'
    ext/openssl/openssl.o: In function `zif_openssl_random_pseudo_bytes':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:5010: undefined reference to `RAND_pseudo_bytes'
    ext/openssl/openssl.o: In function `zif_openssl_error_string':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4079: undefined reference to `ERR_get_error'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4081: undefined reference to `ERR_error_string'
    ext/openssl/openssl.o: In function `zif_openssl_cipher_iv_length':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4938: undefined reference to `EVP_get_cipherbyname'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4944: undefined reference to `EVP_CIPHER_iv_length'
    ext/openssl/openssl.o: In function `zif_openssl_encrypt':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4780: undefined reference to `EVP_get_cipherbyname'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4786: undefined reference to `EVP_CIPHER_key_length'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4795: undefined reference to `EVP_CIPHER_iv_length'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4801: undefined reference to `EVP_CIPHER_block_size'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4804: undefined reference to `EVP_EncryptInit'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4808: undefined reference to `EVP_EncryptInit_ex'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4810: undefined reference to `EVP_EncryptUpdate'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4813: undefined reference to `EVP_EncryptFinal'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4836: undefined reference to `EVP_CIPHER_CTX_cleanup'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4806: undefined reference to `EVP_CIPHER_CTX_set_key_length'
    ext/openssl/openssl.o: In function `zif_openssl_decrypt':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4864: undefined reference to `EVP_get_cipherbyname'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4880: undefined reference to `EVP_CIPHER_key_length'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4889: undefined reference to `EVP_CIPHER_iv_length'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4891: undefined reference to `EVP_CIPHER_block_size'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4894: undefined reference to `EVP_DecryptInit'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4898: undefined reference to `EVP_DecryptInit_ex'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4899: undefined reference to `EVP_DecryptUpdate'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4901: undefined reference to `EVP_DecryptFinal'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4918: undefined reference to `EVP_CIPHER_CTX_cleanup'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4896: undefined reference to `EVP_CIPHER_CTX_set_key_length'
    ext/openssl/openssl.o: In function `php_openssl_csr_from_zval':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2295: undefined reference to `BIO_new_mem_buf'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2297: undefined reference to `PEM_read_bio_X509_REQ'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2298: undefined reference to `BIO_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2293: undefined reference to `BIO_new_file'
    ext/openssl/openssl.o: In function `zif_openssl_csr_export':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2376: undefined reference to `BIO_s_mem'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2376: undefined reference to `BIO_new'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2381: undefined reference to `PEM_write_bio_X509_REQ'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2394: undefined reference to `BIO_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2392: undefined reference to `X509_REQ_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2384: undefined reference to `BIO_ctrl'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2378: undefined reference to `X509_REQ_print'
    ext/openssl/openssl.o: In function `zif_openssl_csr_get_public_key':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2662: undefined reference to `X509_REQ_get_pubkey'
    ext/openssl/openssl.o: In function `php_openssl_x509_from_zval':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1200: undefined reference to `BIO_new_mem_buf'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1205: undefined reference to `d2i_X509'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1205: undefined reference to `PEM_ASN1_read_bio'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1209: undefined reference to `BIO_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1191: undefined reference to `BIO_new_file'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1195: undefined reference to `PEM_read_bio_X509'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1196: undefined reference to `BIO_free'
    ext/openssl/openssl.o: In function `zif_openssl_x509_export_to_file':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1247: undefined reference to `BIO_new_file'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1252: undefined reference to `PEM_write_bio_X509'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1261: undefined reference to `BIO_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1250: undefined reference to `X509_print'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1259: undefined reference to `X509_free'
    ext/openssl/openssl.o: In function `zif_openssl_x509_export':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1286: undefined reference to `BIO_s_mem'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1286: undefined reference to `BIO_new'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1290: undefined reference to `PEM_write_bio_X509'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1294: undefined reference to `BIO_ctrl'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1303: undefined reference to `BIO_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1301: undefined reference to `X509_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1288: undefined reference to `X509_print'
    ext/openssl/openssl.o: In function `php_openssl_evp_from_zval':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2813: undefined reference to `BIO_new_mem_buf'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2811: undefined reference to `BIO_new_file'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2819: undefined reference to `PEM_read_bio_PrivateKey'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2820: undefined reference to `BIO_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2826: undefined reference to `X509_get_pubkey'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2830: undefined reference to `X509_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2795: undefined reference to `BIO_new_mem_buf'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2800: undefined reference to `PEM_read_bio_PUBKEY'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2801: undefined reference to `BIO_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2826: undefined reference to `X509_get_pubkey'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:2793: undefined reference to `BIO_new_file'
    ext/openssl/openssl.o: In function `zif_openssl_private_encrypt':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3844: undefined reference to `EVP_PKEY_size'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3850: undefined reference to `RSA_private_encrypt'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3871: undefined reference to `EVP_PKEY_free'
    ext/openssl/openssl.o: In function `zif_openssl_private_decrypt':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3902: undefined reference to `EVP_PKEY_size'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3908: undefined reference to `RSA_private_decrypt'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3934: undefined reference to `EVP_PKEY_free'
    ext/openssl/openssl.o: In function `zif_openssl_public_encrypt':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3967: undefined reference to `EVP_PKEY_size'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3973: undefined reference to `RSA_public_encrypt'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:3992: undefined reference to `EVP_PKEY_free'
    ext/openssl/openssl.o: In function `zif_openssl_public_decrypt':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4026: undefined reference to `EVP_PKEY_size'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4032: undefined reference to `RSA_public_decrypt'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4063: undefined reference to `EVP_PKEY_free'
    ext/openssl/openssl.o: In function `zif_openssl_sign':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4129: undefined reference to `EVP_PKEY_size'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4132: undefined reference to `EVP_DigestInit'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4133: undefined reference to `EVP_DigestUpdate'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4134: undefined reference to `EVP_SignFinal'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4143: undefined reference to `EVP_MD_CTX_cleanup'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4145: undefined reference to `EVP_PKEY_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4119: undefined reference to `EVP_get_digestbyname'
    ext/openssl/openssl.o: In function `zif_openssl_verify':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4191: undefined reference to `EVP_DigestInit'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4192: undefined reference to `EVP_DigestUpdate'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4193: undefined reference to `EVP_VerifyFinal'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4194: undefined reference to `EVP_MD_CTX_cleanup'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4175: undefined reference to `EVP_get_digestbyname'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4197: undefined reference to `EVP_PKEY_free'
    ext/openssl/openssl.o: In function `zif_openssl_seal':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4232: undefined reference to `EVP_get_cipherbyname'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4259: undefined reference to `EVP_PKEY_size'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4264: undefined reference to `EVP_EncryptInit'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4316: undefined reference to `EVP_PKEY_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4275: undefined reference to `EVP_CIPHER_CTX_block_size'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4277: undefined reference to `EVP_SealInit'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4277: undefined reference to `EVP_EncryptUpdate'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4283: undefined reference to `EVP_SealFinal'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4238: undefined reference to `EVP_rc4'
    ext/openssl/openssl.o: In function `zif_openssl_open':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4356: undefined reference to `EVP_get_cipherbyname'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4367: undefined reference to `EVP_OpenInit'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4367: undefined reference to `EVP_DecryptUpdate'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4371: undefined reference to `EVP_PKEY_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4368: undefined reference to `EVP_OpenFinal'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4362: undefined reference to `EVP_rc4'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:4383: undefined reference to `EVP_PKEY_free'
    ext/openssl/openssl.o: In function `zif_openssl_x509_check_private_key':
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1327: undefined reference to `X509_check_private_key'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1331: undefined reference to `EVP_PKEY_free'
    /home/yuri/_/php-5.3.29/ext/openssl/openssl.c:1334: undefined reference to `X509_free'
    ext/openssl/openssl.o: In function `zif_openssl_x509_parse':
    /hom

    Which one is it supposed to be? I have both versions installed side-by-side in /usr/lib, the prefix was /usr. Also, I was thinking about openssl installing header files into /usr/include. Aren't they needed to compile this php extension? openssl098 basically installs just the library:
    $ pacaur -Ql openssl098
    openssl098 /usr/
    openssl098 /usr/bin/
    openssl098 /usr/bin/openssl098
    openssl098 /usr/lib/
    openssl098 /usr/lib/libcrypto.so.0.9.8
    openssl098 /usr/lib/libssl.so.0.9.8
    openssl098 /usr/share/
    openssl098 /usr/share/licenses/
    openssl098 /usr/share/licenses/openssl098
    Maybe I should go with compiling openssl from sources after all...
    On a side note
    x33a wrote:In case you do try out an older version, make sure to use one with the heartbleed patch.
    Does it matter? I'm going to use it for development.

  • Problem compiling apache (2.4.4) with openssl 1.0.1e

    Hi Experts
    i am struggling since last 2 weeks to compile apache2.4.4 with openssl 1.0.1e on sun spark server.
    System Details: SunOS hostname 5.10 Generic_147440-19 sun4v sparc SUNW,Sun-Blade-T6320
    bash-3.00# cat /etc/release
    Oracle Solaris 10 8/11 s10s_u10wos_17b SPARC
    Copyright (c) 1983, 2011, Oracle and/or its affiliates. All rights reserved.
    Assembled 23 August 2011
    We already have apache 2.2 running on this server, now we need 2.4.4 with latest openssl.
    i donwloaded apr, apr-utils, pcre, openssl and httpd2.4.4 from their respective websites.
    then i comiled these prerequisites into the path /local/apache/2.44/apr, /local/apache/2.44/apr-util, /local/apache/2.44/pcre, /local/apache/2.44/openssl
    and finally i am trying to build httpd2.4.4 with above compiled modules.
    so i used this command:
    ./configure prefix=/local/apache/2.44 with-apr=/local/apache/2.44 with-apr-util=/local/apache/2.44/apr-utils with-pcre=/local/apache/2.44/pcre enable-proxy enable-proxy-http enable-so enable-auth-digest enable-mime enable-deflate enable-rewrite enable-headers enable-ssl  with-ssl=/local/apache/2.44/openssl
    when i run make, i received this error:
    dlopen 0x44 /local/apache/2.44/openssl/lib/libcrypto.a(dso_dlfcn.o)
    dlopen 0x748 /local/apache/2.44/openssl/lib/libcrypto.a(dso_dlfcn.o)
    dlclose 0xb4 /local/apache/2.44/openssl/lib/libcrypto.a(dso_dlfcn.o)
    dlclose 0x1a0 /local/apache/2.44/openssl/lib/libcrypto.a(dso_dlfcn.o)
    dlclose 0x770 /local/apache/2.44/openssl/lib/libcrypto.a(dso_dlfcn.o)
    dlsym 0x268 /local/apache/2.44/openssl/lib/libcrypto.a(dso_dlfcn.o)
    dlsym 0x388 /local/apache/2.44/openssl/lib/libcrypto.a(dso_dlfcn.o)
    dlsym 0x764 /local/apache/2.44/openssl/lib/libcrypto.a(dso_dlfcn.o)
    dlerror 0xdc /local/apache/2.44/openssl/lib/libcrypto.a(dso_dlfcn.o)
    dlerror 0x2cc /local/apache/2.44/openssl/lib/libcrypto.a(dso_dlfcn.o)
    dlerror 0x3dc /local/apache/2.44/openssl/lib/libcrypto.a(dso_dlfcn.o)
    dlerror 0x714 /local/apache/2.44/openssl/lib/libcrypto.a(dso_dlfcn.o)
    __umoddi3 0x64 /local/apache/2.44/openssl/lib/libcrypto.a(bn_word.o)
    __umoddi3 0xac /local/apache/2.44/openssl/lib/libcrypto.a(b_print.o)
    __udivdi3 0xe8 /local/apache/2.44/openssl/lib/libcrypto.a(b_print.o)
    __udivdi3 0x394 /local/apache/2.44/openssl/lib/libcrypto.a(bn_div.o)
    ld: fatal: relocations remain against allocatable but non-writable sections
    collect2: ld returned 1 exit status
    *** Error code 1
    make: Fatal error: Command failed for target `mod_ssl.la'
    Current working directory /local/apache244pkg/httpd-2.4.4/modules/ssl
    *** Error code 1
    The following command caused the error:
    if test `pwd` = "/local/apache244pkg/httpd-2.4.4"; then \
    echo "" ; \
    fi; \
    list=''; for i in $list; do \
    target="shared-build"; \
    if test "$i" = "."; then \
    made_local=yes; \
    target="local-shared-build"; \
    fi; \
    if test "$i" != "srclib"; then \
    (cd $i && make $target) || exit 1; \
    fi; \
    done; \
    if test -f 'modules.mk'; then \
    if test -n 'mod_ssl.la'; then \
    echo "Building shared: mod_ssl.la"; \
    if test "$made_local" != "yes"; then \
    make "local-shared-build" || exit 1; \
    fi; \
    fi; \
    fi; \
    if test `pwd` = "/local/apache244pkg/httpd-2.4.4"; then \
    echo "" ; \
    fi
    make: Fatal error: Command failed for target `shared-build-recursive'
    Current working directory /local/apache244pkg/httpd-2.4.4/modules/ssl
    *** Error code 1
    The following command caused the error:
    if test `pwd` = "/local/apache244pkg/httpd-2.4.4"; then \
    echo "" ; \
    fi; \
    list='aaa cache core database debugging filters http loggers metadata proxy session slotmem ssl proxy/balan cers arch/unix dav/main generators dav/fs mappers'; for i in $list; do \
    target="shared-build"; \
    if test "$i" = "."; then \
    made_local=yes; \
    target="local-shared-build"; \
    fi; \
    if test "$i" != "srclib"; then \
    (cd $i && make $target) || exit 1; \
    fi; \
    done; \
    if test -f 'modules.mk'; then \
    if test -n ''; then \
    echo "Building shared: "; \
    if test "$made_local" != "yes"; then \
    make "local-shared-build" || exit 1; \
    fi; \
    fi; \
    fi; \
    if test `pwd` = "/local/apache244pkg/httpd-2.4.4"; then \
    echo "" ; \
    fi
    make: Fatal error: Command failed for target `shared-build-recursive'
    Current working directory /local/apache244pkg/httpd-2.4.4/modules
    *** Error code 1
    The following command caused the error:
    if test `pwd` = "/local/apache244pkg/httpd-2.4.4"; then \
    echo "" ; \
    fi; \
    list='srclib os server modules support'; for i in $list; do \
    target="shared-build"; \
    if test "$i" = "."; then \
    made_local=yes; \
    target="local-shared-build"; \
    fi; \
    if test "$i" != "srclib"; then \
    (cd $i && make $target) || exit 1; \
    fi; \
    done; \
    if test -f 'modules.mk'; then \
    if test -n ''; then \
    echo "Building shared: "; \
    if test "$made_local" != "yes"; then \
    make "local-shared-build" || exit 1; \
    fi; \
    fi; \
    fi; \
    if test `pwd` = "/local/apache244pkg/httpd-2.4.4"; then \
    echo "" ; \
    fi
    make: Fatal error: Command failed for target `shared-build-recursive'
    Current working directory /local/apache244pkg/httpd-2.4.4
    *** Error code 1
    The following command caused the error:
    otarget=`echo all-recursive|sed s/-recursive//`; \
    list=' srclib os server modules support'; \
    for i in $list; do \
    if test -d "$i"; then \
    target="$otarget"; \
    echo "Making $target in $i"; \
    if test "$i" = "."; then \
    made_local=yes; \
    target="local-$target"; \
    fi; \
    (cd $i && make $target) || exit 1; \
    fi; \
    done; \
    if test "$otarget" = "all" && test -z 'httpd shared-build '; then \
    made_local=yes; \
    fi; \
    if test "$made_local" != "yes"; then \
    make "local-$otarget" || exit 1; \
    fi
    make: Fatal error: Command failed for target `all-recursive'
    your help will be highly appreciated.
    thanks
    Edited by: 990086 on May 28, 2013 2:01 AM

    freaks wrote:if somebody can give me an example of ssl.conf
    Hi freaks; you can find an example SSL configuration file here on your system:
    /etc/httpd/conf/extra/httpd-ssl.conf
    It’s full of comments describing what the different options are.
    Apache’s documentation on SSL is full of good stuff, including a howto.
    As far as selecting ciphers go, you could do worse than following Qualys’ advice on the subject.
    Paul
    Last edited by prelog (2014-03-19 04:05:40)

  • Creating Oracle Wallets (pkcs#12 files) with OpenSSL

    I am attempting to create pkcs12 file that will be recoginized by the Oracle Wallet Manager.
    I found a procedure here:
    http://web.metacircles.com/oracle%20wallet%20manager
    but I'm not having much luck with it.
    This is what I have done:
    1. Created a private key with the command:
         openssl genrsa -des3 -out privkey.pem 2048
    2. Used the private key to create a certificate request:
         openssl req -new -key privkey.pem -out cert.csr
    3. Used cert.csr to generate a test site certificate from Thawte (http://www.thawte.com/)
    4. Converted the Thawte ServerCA certificate into PEM format:
         openssl x509 -inform der -in ThawteServerCA.cer -outform pem -out serverCA.pem
    5. Created the pkcs#12 file:
              openssl pkcs12 -export -certfile serverCA.pem -inkey privkey.pem -in sitetest.crt -name "Test Wallet"
              -certpbe PBE-SHA1-RC2-40 -keypbe PBE-SHA1-3 DES -noiter -out ewallet.p12
    However, the Oracle Wallet Manager does not like the resulting pkcs#12 file. I am getting the unhelpful "Invalid Password" error even though I am using the same password I used when I created the private key.
    If anyone has had any success creating an Oracle ewallet with OpenSSL, I would be appreciative to any suggestions they may have.
    Jim

    Which one is it supposed to be? I have both versions installed side-by-side in /usr/lib, the prefix was /usr. Also, I was thinking about openssl installing header files into /usr/include. Aren't they needed to compile this php extension? openssl098 basically installs just the library:
    $ pacaur -Ql openssl098
    openssl098 /usr/
    openssl098 /usr/bin/
    openssl098 /usr/bin/openssl098
    openssl098 /usr/lib/
    openssl098 /usr/lib/libcrypto.so.0.9.8
    openssl098 /usr/lib/libssl.so.0.9.8
    openssl098 /usr/share/
    openssl098 /usr/share/licenses/
    openssl098 /usr/share/licenses/openssl098
    Maybe I should go with compiling openssl from sources after all...
    On a side note
    x33a wrote:In case you do try out an older version, make sure to use one with the heartbleed patch.
    Does it matter? I'm going to use it for development.

  • Signing with openssl verify with java fails

    Hi!
    I've been itching my head for the last 6 hours on why I can't sign something with openssl and verify it in java. Anyone out there that can help me out?
    I'm using OpenSSL 0.9.8k 25 Mar 2009 on Ubuntu 10.04 and using java version:
    java version "1.6.0_17"
    Java(TM) SE Runtime Environment (build 1.6.0_17-b04)
    Java HotSpot(TM) Server VM (build 14.3-b01, mixed mode)
    1. Generation of the private key
    openssl genrsa -out private_key.pem 2048
    echo "Testing signing" >data.txt
    openssl rsautl -sign -in data.txt -inkey private_key.pem -out data.signedOk, now I have the signature for the content of data.txt in the file data.signed. Let's try and verify this signature.
    2. I'm using Bouncy Castle version 1.45 with the following code (just check verify for this case)
    package test.signature;
    import java.io.DataInputStream;
    import java.io.File;
    import java.io.FileInputStream;
    import java.io.FileOutputStream;
    import java.io.FileReader;
    import java.io.IOException;
    import java.security.InvalidKeyException;
    import java.security.KeyPair;
    import java.security.NoSuchAlgorithmException;
    import java.security.Security;
    import java.security.Signature;
    import java.security.SignatureException;
    import java.security.spec.InvalidKeySpecException;
    import org.bouncycastle.jce.provider.BouncyCastleProvider;
    import org.bouncycastle.openssl.PEMReader;
    public class BouncySignatureHandler  {
         static String TYPE = "SHA1withRSA";
         public static void main(String[] args) throws Exception {
              if (args.length < 2)
                   printInfoAndExit();
              String cmd = args[0];
              Security.addProvider(new BouncyCastleProvider());
              Signature signature = Signature.getInstance(TYPE, "BC");
              if ("verify".equalsIgnoreCase(cmd)) {
                   String pubKeyFileName = args[1];
                   String dataFileName = args[2];
                   String signatureFileName = args[3];
                   System.out.println("Using key " + pubKeyFileName
                             + " to verify signature " + signatureFileName
                             + " with the content of " + dataFileName);
                   byte[] dataBytes = readFile(dataFileName);
                   byte[] signatureBytes = readFile(signatureFileName);
                   FileReader fr = new FileReader(new File(pubKeyFileName));
                   PEMReader pemReader = new PEMReader(fr);
                   KeyPair keyPair = (KeyPair) pemReader.readObject();
                   fr.close();
                   Signature verifier = Signature.getInstance(TYPE, "BC");
                   verifier.initVerify(keyPair.getPublic());
                   verifier.update(dataBytes);
                   if (verifier.verify(signatureBytes)) {
                        System.out.println("Signature is valid");
                   } else {
                        System.out.println("Signature is NOT valid");
              } else if ("sign".equalsIgnoreCase(cmd)) {
                   String pemFileName = args[1];
                   String dataFileName = args[2];
                   System.out.println("Creating a signature with " + pemFileName
                             + " over the content of " + dataFileName);
                   byte[] data = readFile(dataFileName);
                   FileReader fr = new FileReader(new File(pemFileName));
                   PEMReader pemReader = new PEMReader(fr);
                   KeyPair keyPair = (KeyPair) pemReader.readObject();
                   fr.close();
                   signature.initSign(keyPair.getPrivate());
                   signature.update(data);
                   byte[] signatureBytes = signature.sign();
                   writeFile(signatureBytes, dataFileName + ".signed");
                   String encoded = Base64.encode(signatureBytes);
                   writeFile(encoded.getBytes(), dataFileName + ".signed.base64");
                   System.out.println("Signature for " + dataFileName + " saved in "
                             + dataFileName + ".signed");
              } else {
                   printInfoAndExit();
         private static void writeFile(byte[] signatureBytes, String fName)
                   throws IOException {
              FileOutputStream fout = new FileOutputStream(new File(fName));
              fout.write(signatureBytes);
              fout.close();
         private static void printInfoAndExit() {
              System.out
                        .println("BouncySignatureHandler <sign privKeyFile dataFile |verify pubkeyFile dataFile signedDataFile>");
              System.exit(1);
         public static byte[] readFile(String fileName) throws IOException {
              File f = new File(fileName);
              FileInputStream fis = new FileInputStream(f);
              DataInputStream dis = new DataInputStream(fis);
              byte[] bytes = new byte[(int) f.length()];
              dis.readFully(bytes);
              dis.close();
              return bytes;
    }3. Running this code (no classpath here)
    java -cp .... BouncySignatureHandler verify private_key.pem data.txt data.txt.signedThis gives the output, ..... NOT valid
    Any ideas what I'm doing wrong????
    Edited by: trouthunter on Sep 7, 2010 3:50 PM
    Edited by: trouthunter on Sep 7, 2010 3:53 PM

    The "openssl rsautl -sign" is not doing what you think it is. If one applies                   Cipher cipher = Cipher.getInstance("RSA", "BC");
                        cipher.init(Cipher.DECRYPT_MODE, keyPair.getPublic());
                        byte[] decryptedSignature= cipher.doFinal(signatureBytes);
                        HexEncoder hexEncoder =new HexEncoder();
                        System.out.println("Decrypted signature (hex) = " + hexEncoder.encodeAsString(decryptedSignature));
                        System.out.println("Decrypted as String = " + new String(decryptedSignature, decryptedSignature.length-16, 16));
    one gets as a result
    Decrypted signature (hex) = 01ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0054657374696e67207369676e696e670a
    Decrypted as String = Testing signingwhich indicates that the openssl signature using the 'rsautl' command does not actually encrypt the digest of the message. It just pads the message with something approaching PKCS1 and encrypts that with the private key.
    If you need the background to signing then [RFC3447|http://www.ietf.org/rfc/rfc3447.txt] describes how a signature for a given digest and encryption scheme is formed.
    Since this is a Java forum, I will leave it to you to correct your use of openssl command.

  • Exporting an encrypted key using DESede that is compatible with openssl

    I have been banging my head against this wall for a week now. I need to take an existing PrivateKey and store it in a PKCS#8 container using Triple DES. The only "successful" attempt I have had so far creates a container using pbeWithSHA1And3-KeyTripleDES-CBC wich is not even close to the same thing as des-ede3-cbc. I have a before/after dump using "openssl asn1parse ..." as a reference:
    Non-working one:
        0:d=0  hl=4 l= 682 cons: SEQUENCE
        4:d=1  hl=2 l=  36 cons:  SEQUENCE
        6:d=2  hl=2 l=  10 prim:   OBJECT            :pbeWithSHA1And3-KeyTripleDES-CBC
       18:d=2  hl=2 l=  22 cons:   SEQUENCE
       20:d=3  hl=2 l=  16 prim:    OCTET STRING      [HEX DUMP]:9950B90483C58D10807A8A4BEE7E6199
       38:d=3  hl=2 l=   2 prim:    INTEGER           :0800
       42:d=1  hl=4 l= 640 prim:  OCTET STRING      [HEX DUMP]:FB5130BAA93B217C3D9CC157B48A3A470CExisting one (made using "openssl pkcs8 -topk8 -in temp.key -v2 des3"):
        0:d=0  hl=4 l= 710 cons: SEQUENCE
        4:d=1  hl=2 l=  64 cons:  SEQUENCE
        6:d=2  hl=2 l=   9 prim:   OBJECT            :PBES2
       17:d=2  hl=2 l=  51 cons:   SEQUENCE
       19:d=3  hl=2 l=  27 cons:    SEQUENCE
       21:d=4  hl=2 l=   9 prim:     OBJECT            :PBKDF2
       32:d=4  hl=2 l=  14 cons:     SEQUENCE
       34:d=5  hl=2 l=   8 prim:      OCTET STRING      [HEX DUMP]:56E20E2561891C26
       44:d=5  hl=2 l=   2 prim:      INTEGER           :0800
       48:d=3  hl=2 l=  20 cons:    SEQUENCE
       50:d=4  hl=2 l=   8 prim:     OBJECT            :des-ede3-cbc
       60:d=4  hl=2 l=   8 prim:     OCTET STRING      [HEX DUMP]:903C92209EBA0B3A
       70:d=1  hl=4 l= 640 prim:  OCTET STRING      [HEX DUMP]:0C6033115F1AEF6724E1I just need some basic help on getting from the PrivateKey to the output that will work with openssl.

    The only "successful" attempt I have had so far creates a container using pbeWithSHA1And3-KeyTripleDES-CBC wich is not even close to the same thing as des-ede3-cbc.What do you mean "not even close"? They certainly have different numbers of letters in their names, but cryptographically they are very similar.
    Non-working one:What doesn't work about it?
    I just need some basic help on getting from the PrivateKey to the output that will work with openssl.The example I provided in the earlier thread works just fine with openssl.

  • Activate SSL with OpenSSL Self-Signed Cert

    Dear Expert,
    Anyone can give me guidance on how to activate and create ssl cert in Java IM using openssl self-signed cert.
    thanks

    Here how I make it work. Some of the tips is from jay in this forum
    Instant Messaging with SSL
    Let say I have Messaging, Directory, IM server in 1 box.
    Let's create a cert
    # cd /etc/opt/SUNWiim/default/config/
    a) Sun [TM] ONE Messaging Server 6.1 and Sun [TM] ONE Directory Server 5.2 were installed from JES2 on the same box
    b) The server_root directory for Directory Server is the default: /var/opt/mps/serverroot
    c) The server_root directory for Messaging Server is also the default: /opt/SUNWmsgsr
    1. Login to the console and do a Certificate Request
    a) cd /var/opt/mps/serverroot
    b) ./startconsole &
    c) Login to the main console as "cn=Directory Manager"
    d) Select and open the "Messaging Server" console
    e) Highlight the tab called "Tasks" at the top
    f) Select "Manage Certificates"
    g) Console will ask for a password for the security database. Please enter a password twice and make sure that you remember it. This will create the following two files under "/var/opt/mps/serverroot/alias" directory:
    -rw------- 1 mailsrv other 65536 Aug 12 13:57 msg-config-cert8.db
    -rw------- 1 mailsrv other 32768 Aug 12 13:57 msg-config-key3.db
    NOTE: Please make sure that:
    - either the owner of the files is the messaging server user ( mailsrv in this case ),
    -or the permission is appropriate for the mail server user to at least read it.
    h) Once you reach the "Manage Certificate" window, please make a "Certificate Request" by filing up the appropriate questions
    i) Once you are done, you get a CSR , which looks something like this:
    -----BEGIN NEW CERTIFICATE REQUEST-----
    MIIBszCCARwCAQAwczELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWE x
    DzANBgNVBAcTBm5ld2FyazEMMAoGA1UEChMDc21pMQ0wCwYDVQQLEwRhdGFjMSEw
    HwYDVQQ DExhwb3BleWUuYXRhYy5lYmF5LnN1bi5jb20wgZ8wDQYJKoZIhvcNAQEB
    BQADgY0AMIGJAoGBALF eXVTFDj/1eONPzV/dAZ0dBKdstl+u+L/DTdw1sCXXOdNG
    MzYeTUu9g/g0dXL/bniF31M0OkoW+6O 5mshySv/KXS9QcoPngSKS6wuL8kNlYKQR
    Dw97WCS1uaqubAK/kir4hDmL7X9Rf29EFHDSFOWjeOJ /M7aqFWCfR5sTeSIFAgMB
    AAGgADANBgkqhkiG9w0BAQQFAAOBgQCeYwptiL/j7Bcs0DtGYiOlMMs utezF1COC
    4+wHt/p+LtQkvQWBoXisqN6YlGfZPXOCdUyA+RwU7BxjX9IQLP+9HLHfQyLzvCKb
    boKKpjIc8Ci+tmibM5QkgTxu4L7yeCR/PiplgVPttHNT2Qr9cxHLLBvIO6N1GOE8
    VBoq0pC5SA= =
    -----END NEW CERTIFICATE REQUEST-----
    Please maintain and preserve this CSR , since you will be sending it to the Certificate Authority ( CA ) so they can issue you a Certificate
    # openssl genrsa -des3 -out ca.key 4096
    # openssl req -new -x509 -days 3650 -key ca.key -out ca.crt
    # openssl x509 -req -days 3650 -in file.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out server-cert.crt
    # cp -p /var/opt/mps/serverroot/alias/msg-config-key3.db key3.db
    # cp -p /var/opt/mps/serverroot/alias/msg-config-cert8.db cert8.db
    # cp -p /var/opt/mps/serverroot/alias/secmod.db .
    # cat sslpassword.conf
    Internal (Software) Token:password
    # cat /etc/opt/SUNWiim/default/config/iim.conf
    iim.comm.modules = "iim_server,iim_mux,iim_wd"
    iim.smtpserver = "www.esuria.com.bn"
    iim.instancedir = "/opt/SUNWiim"
    iim.instancevardir = "/var/opt/SUNWiim/default"
    iim.user = "root"
    iim.group = "root"
    iim.config.version = "1.1"
    iim_ldap.host = "www.esuria.com.bn:389"
    iim_ldap.searchbase = "o=esuria.com.bn,dc=esuria,dc=com,dc=bn"
    iim_ldap.loginfilter = "(&(objectclass=inetorgperson)(uid={0}))"
    iim_ldap.usergroupbyidsearchfilter = "(|(&(objectclass=groupofuniquenames)(dn={0
    }))(&(objectclass=inetorgperson)(uid={0})))"
    iim_ldap.usergroupbynamesearchfilter = "(|(&(objectclass=groupofuniquenames)(cn=
    {0}))(&(objectclass=inetorgperson)(cn={0})))"
    iim_ldap.allowwildcardinuid = "False"
    iim_ldap.userclass = "inetOrgPerson"
    iim_ldap.groupclass = "groupOfUniqueNames"
    iim_ldap.groupbrowsefilter = "(objectclass=groupofuniquenames)"
    iim_ldap.searchlimit = "40"
    iim_ldap.userdisplay = "cn"
    iim_ldap.groupdisplay = "cn"
    iim_ldap.useruidattr = "uid"
    iim_ldap.groupmemberattr = "uniquemember"
    iim_ldap.usermailattr = "mail"
    iim_ldap.resynctime = "720"
    iim_ldap.usergroupbinddn = "cn=Directory Manager"
    iim_ldap.usergroupbindcred = "password"
    iim_ldap.useidentityadmin = "false"
    iim.log.iim_server.severity = "INFO"
    iim.log.iim_mux.severity = "ERROR"
    iim.log.iim_wd.severity = "ERROR"
    iim_server.domainname = "esuria.com.bn"
    iim_server.useport = "True"
    iim_server.port = "5269"
    iim_server.usesslport = "False"
    iim_server.sslport = "5223"
    iim_server.enable = "True"
    iim_server.clienttimeout = "15"
    iim_server.usesso = "0"
    iim.policy.modules = "iim_ldap"
    iim.userprops.store = "file"
    iim_mux.listenport = "www.esuria.com.bn:5222"
    iim_mux.serverport = "www.esuria.com.bn:45222"
    iim_mux.enable = "true"
    iim_mux.numinstances = "2"
    iim_mux.maxthreads = "10"
    iim_mux.maxsessions = "1000"
    iim_mux.usessl = "on"
    iim_mux.secconfigdir = "/etc/opt/SUNWiim/default/config"
    iim_mux.keydbprefix =
    iim_mux.certdbprefix =
    iim_mux.secmodfile = "secmod.db"
    iim_mux.certnickname = "server-cert"
    iim_mux.keystorepasswordfile = "sslpassword.conf"
    iim_wd.enable = "true"
    iim_wd.period = "300"
    iim_wd.maxRetries = "10"
    -open http://www.esuria.com.bn/im/en/im.jnlp
    -click More Detail and enable Use SSL

  • Using wallet generated with OPENSSL in Oracle XE

    Hi there,
    I think this is related to oracle security in general rather than XE, that is why I am posting this here.
    I am using Oracle XE 11g on Ubuntu 12.04.2 and I need to send emails from APEX using SSL.
    As Oracle XE doesn't have a wallet manager, I manually created a wallet using openssl. All seems to have gone well but when I try to use utl_smtp using SSL I get the cryptic error message ORA-28788: user provided invalid information, or an unknown error.
    See below the code I used to create the wallet and the utl_smpt call that is generating the error. Any ideas to fix this?
    Thanks
    Luis
    * Generate wallet in linux shell using openssl *
    openssl genrsa -out self.key 2048
    openssl req -new -config /usr/lib/ssl/openssl.cnf -key self.key -out self.csr
    openssl x509 -req -days 1450 -in self.csr -signkey self.key -out self.crt
    cat self.key self.crt > self.pem
    openssl pkcs12 -export -in self.pem -out  self.p12 -name self-test
    cp self.p12 /u01/app/oracle/ewallet.p12
    SQL> declare
      2      l_connection utl_smtp.connection;
      3  begin
      4      l_connection := utl_smtp.open_connection(
      5                          host => 'smtp.gmail.com',
      6                          port => 587,
      7                          wallet_path => 'file:/u01/app/oracle',
      8                          wallet_password => 'password01',
      9                          secure_connection_before_smtp => TRUE);
    10      utl_smtp.close_connection(l_connection);
    11  end;
    12  /
    declare
        l_connection utl_smtp.connection;
    begin
        l_connection := utl_smtp.open_connection(
                            host => 'smtp.gmail.com',
                            port => 587,
                            wallet_path => 'file:/u01/app/oracle',
                            wallet_password => 'password01',
                            secure_connection_before_smtp => TRUE);
        utl_smtp.close_connection(l_connection);
    end;
    ORA-28788: user provided invalid information, or an unknown error
    ORA-06512: at "SYS.UTL_TCP", line 59
    ORA-06512: at "SYS.UTL_TCP", line 284
    ORA-06512: at "SYS.UTL_SMTP", line 174
    ORA-06512: at "SYS.UTL_SMTP", line 197
    ORA-06512: at line 4

    Do you still wait for the answer
    here is a sample code how it is done.
    c := utl_smtp.open_connection(host => v_smtp_host,
    port => v_smtp_port ,
    wallet_path => 'file:c:\google',
    wallet_password => 'wallet_password,
    secure_connection_before_smtp => FALSE);
    utl_smtp.helo(c, v_smtp_host);
    utl_smtp.starttls(c);
    UTL_SMTP.AUTH( c => c, username => v_auth_login, password => v_auth_pass,schemes => 'PLAIN' );
    it is working for sure.
    I am using mail.gmail.com port 587 which supports STARTTLS.
    I believe you can use port 465 but then you have to set secure_connection_before_smtp => TRUE and remove the utl_smtp.starttls(c) line, but I didn't test that.
    Edited by: user1832618 on May 22, 2013 11:28 AM

  • TLS not working with Openssl Certs

    Hi I have been struggleing with a certificate problem for about two weeks now with no joy. Almost all the forums, tutorials and examples etc. I have tried are simply not working. Without fail I get the following exception or similar:
    [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found]
    Basically I know I have a valid certificate, because when I use an ldap client with just the self generated cacert.pem there are no problems and a TCP dump shows the encrypted data.
    My setup is as follows I have an openLDAP server running on Debian. I generated my own certificates as per: http://www.openldap.org/faq/data/cache/185.html
    All I want to do now is import these generated certs/keys with keytool, and be able to use theme with TLS.
    When importing the certs via java ldap browsers they work fine, but as soon as I try use my own TLS client like the StartTLS.java sample provided by the java tutorial I get the above exception. I'm probably missing some piece of the puzzle.
    Please if anyone else knows how to set this up correctly using the certs I have generated via the openldap example above I would really appreciate your help. There are alot of examples pertaining to app servers etc. but nothing I could find to talk to OpenLDAP.
    regards
    ed

    On a similar occation i did extend the javax.net.ssl.X509TrustManager and upon generating the connecton I first did initialized the ssl context with that trust manager.
    something like
    SSLContext sslContext = SSLContext.getInstance("SSLv3");
    MyTrustManager tm = new MyTrustManager(....);
    TrustManager tms[] = {tm};
    sslContext.init(null, tms, null);     HttpsURLConnection.setDefaultSSLSocketFactory(sslContext.getSocketFactory()); //or on ur corresponding tls connection classdo that before getting any https connection or alike tls connections
    In case that does not bring you further, post some stack trace and further settings.

  • Chaining cerificate with openssl

    hello seniors,
    i am really stuck and am running out of time to finish my project on time. i need a certificates chain which i am using openssl to create it but i never can sign a certificate request by my CA. i use below commands:
    1- Create a Certificate Authority private key (this is your most important key):
    openssl req -new -newkey rsa:1024 -nodes -out ca.csr -keyout ca.key
    2- Create your CA self-signed certificate:
    openssl x509 -trustout -signkey ca.key -days 365 -req -in ca.csr -out ca.pem
    3- Issue a client certificate by first generating the key, then request (or use one provided by external system) then sign the certificate using private key of your CA:
    openssl genrsa -out client.key 1024
    openssl req -new -key client.key -out client.csr
    all above works fine but following last command produced the errors listed.
    openssl ca -in client.csr -out client.cer
    by the way, i have included "private_key = $dir/private/cakey.pem" in my configuration file.
    6072:error:02001003:system library:fopen:No such process:./crypto/bio/bss_file.c:126:fopen('/usr/local/ssl/openssl.cnf','rb')
    6072:error:2006D080:BIO routines:BIO_new_file:no such file:./crypto/bio/bss_file.c:129:
    6072:error:0E078072:configuration file routines:DEF_LOAD:no such file:./crypto/conf/conf_def.c:197:
    unable to write 'random state'
    any help is much appreciated.
    Regards
    Reza

    hello seniors,
    i am really stuck and am running out of time to finish my project on time. i need a certificates chain which i am using openssl to create it but i never can sign a certificate request by my CA. i use below commands:
    1- Create a Certificate Authority private key (this is your most important key):
    openssl req -new -newkey rsa:1024 -nodes -out ca.csr -keyout ca.key
    2- Create your CA self-signed certificate:
    openssl x509 -trustout -signkey ca.key -days 365 -req -in ca.csr -out ca.pem
    3- Issue a client certificate by first generating the key, then request (or use one provided by external system) then sign the certificate using private key of your CA:
    openssl genrsa -out client.key 1024
    openssl req -new -key client.key -out client.csr
    all above works fine but following last command produced the errors listed.
    openssl ca -in client.csr -out client.cer
    by the way, i have included "private_key = $dir/private/cakey.pem" in my configuration file.
    6072:error:02001003:system library:fopen:No such process:./crypto/bio/bss_file.c:126:fopen('/usr/local/ssl/openssl.cnf','rb')
    6072:error:2006D080:BIO routines:BIO_new_file:no such file:./crypto/bio/bss_file.c:129:
    6072:error:0E078072:configuration file routines:DEF_LOAD:no such file:./crypto/conf/conf_def.c:197:
    unable to write 'random state'
    any help is much appreciated.
    Regards
    Reza

  • Compiling PHP with SOAP/Iconv/OpenSSL support

    Hi,
    I'm not sure if this is the best place for this but the other topics seem even less related.
    I'm trying to compile PHP with SOAP and SSL on a Mac for use with Salesforce.com (it works without any issues on Gentoo and RedHat). Anytime I try to connect I get an invalid SOAP header error. It seems to be happening because the Salesforce SOAP server requires SSL connections and I don't have SSL enabled, but it's hard to backtrace. Regardless, I can't get SSL or iconv support working.
    I've installed OpenSSL both from Macports and from source using the default ./config options, neither method worked. It may be related to some issues I'm having getting iconv working as well (which I also can't seem to get right, it's installed via Macports).
    Here's my PHP configure, if anyone can let me in on what I'm doing wrong that would be great!!! Thanks in advance!
    root# MACOSXDEPLOYMENTTARGET=10.5 \
    CFLAGS="-arch ppc -arch ppc64 -arch i386 -arch x86_64 -g -Os -pipe -no-cpp-precomp" \
    CCFLAGS="-arch ppc -arch ppc64 -arch i386 -arch x86_64 -g -Os -pipe" \
    CXXFLAGS="-arch ppc -arch ppc64 -arch i386 -arch x86_64 -g -Os -pipe" \
    LDFLAGS="-arch ppc -arch ppc64 -arch i386 -arch x86_64 -bindatload"
    root# ./configure \
    --prefix=/usr \
    --mandir=/usr/share/man \
    --infodir=/usr/share/info \
    --with-apxs2=/usr/sbin/apxs \
    --with-config-file-path=/etc \
    --sysconfdir=/private/etc \
    --enable-cli \
    --with-curl=/opt/local \
    --enable-ftp \
    --enable-mbstring \
    --enable-mbregex \
    --enable-sockets \
    --with-ldap=/usr \
    --with-kerberos=/usr \
    --with-mime-magic=/etc/apache2/magic \
    --with-zlib-dir=/usr \
    --with-xmlrpc \
    --with-xsl=/usr \
    --with-iconv=shared,/opt/local \
    --with-openssl=shared,/opt/local \
    --with-gd \
    --with-png-dir=/usr/X11R6 \
    --with-xpm-dir=/usr/X11R6 \
    --with-jpeg-dir=/opt/local \
    --enable-exif \
    --with-freetype-dir=/opt/local \
    --with-t1lib=/opt/local \
    --enable-pdo \
    --with-pdo-mysql \
    --with-mysql-sock=/var/mysql \
    --with-mysqli=/usr/bin/mysql_config \
    --with-mysql=/usr/local/mysql \
    --with-iodbc=/usr \
    --with-curl \
    --with-config-file-path=/etc \
    --sysconfdir=/private/etc \
    --enable-soap
    Message was edited by: mkenney - bad grammar

    mkenney wrote:
    Hi,
    I'm not sure if this is the best place for this but the other topics seem even less related.
    Welcome to Apple Discussions:
    Use our Unix forum here:
    http://discussions.apple.com/forum.jspa?forumID=735
    (yes, it's a tad hidden )
    Message was edited by: nerowolfe

  • Php5.2.5 not working with apache2.2.8 on solaris 9

    <html
    <body lang=EN-US style='tab-interval:.5in'>
    <div class=Section1>
    <p class=MsoNormal><span class=GramE>hi !</span><o:p></o:p></p>
    <p class=MsoNormal>I have compiled (without any problems) PHP5.2.5 AND
    apache2.2.8 with oci8 support, and apache shows the php5 module loaded but for
    some reason my <span class=SpellE>php</span> pages are not showing up , can you
    see what I am missing ? <o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><span class=GramE>thanks</span><o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><span class=GramE>all</span> below is done as root<o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal>1) <span class=GramE>compile</span> apache2<o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><span class=SpellE><span class=GramE>cd</span></span> /opt/<span
    class=SpellE>staging_apache</span><o:p></o:p></p>
    <p class=MsoNormal><span class=SpellE><span class=GramE>untar</span></span>
    http_2.2.80.tar<o:p></o:p></p>
    <p class=MsoNormal><span class=SpellE><span class=GramE>cd</span></span>
    /opt/staging_apache/http_2.2.80<o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><span class=GramE>./</span>configure --prefix=/<span
    class=SpellE>usr</span>/local/apache --enable-module=so<span
    style='mso-spacerun:yes'>    </span>&lt;&lt;&lt; no errors<span
    style='mso-spacerun:yes'>  </span>here <o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><span class=GramE>make</span> <o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><span class=GramE>make</span> install<o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal>2) <span class=GramE>compile</span> php5<o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><span class=SpellE><span class=GramE>cd</span></span> /opt/<span
    class=SpellE>staging_php</span><o:p></o:p></p>
    <p class=MsoNormal><span class=SpellE><span class=GramE>untar</span></span>
    php-5.2.5.tar<o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><span class=SpellE><span class=GramE>cd</span></span>
    /opt/staging_php/php-5.2.5<o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal>-- define the following <span class=SpellE>logicals</span>. <o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'>       </span><o:p></o:p></p>
    <p class=MsoNormal>ORACLE_HOME=/u03/oracle/10203<o:p></o:p></p>
    <p class=MsoNormal><span class=GramE>export</span> ORACLE_HOME<o:p></o:p></p>
    <p class=MsoNormal>LIBPATH=$LIBPATH<span class=GramE>:$</span>ORACLE_HOME/lib<o:p></o:p></p>
    <p class=MsoNormal><span class=GramE>export</span> LIBPATH<o:p></o:p></p>
    <p class=MsoNormal>LD_LIBRARY_PATH=$ORACLE_HOME/<span class=SpellE>lib<span
    class=GramE>:$</span>ORACLE_HOME/rdbms/lib</span><o:p></o:p></p>
    <p class=MsoNormal><span class=GramE>export</span> LD_LIBRARY_PATH<o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal>Invoking <span class=GramE>configure</span>:<o:p></o:p></p>
    <p class=MsoNormal>-------------------<o:p></o:p></p>
    <p class=MsoNormal>CFLAGS=&quot;$CFLAGS -DHAVE_LONG_LONG&quot;<o:p></o:p></p>
    <p class=MsoNormal><span class=GramE>export</span> CFLAGS<o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><span class=GramE>./</span>configure<span
    style='mso-spacerun:yes'>  </span>\<o:p></o:p></p>
    <p class=MsoNormal>--with-apxs2=/<span class=SpellE>usr/local/apache/bin/apxs</span>
    \<o:p></o:p></p>
    <p class=MsoNormal>--with-<span class=SpellE>ldap</span> \<o:p></o:p></p>
    <p class=MsoNormal>--with-oracle=/u03/oracle/10203 \<o:p></o:p></p>
    <p class=MsoNormal>--with-oci8=/u03/oracle/10203 \<o:p></o:p></p>
    <p class=MsoNormal>--with-<span class=SpellE>config</span>-file-path=/<span
    class=SpellE>usr/local/apache/php</span> \<o:p></o:p></p>
    <p class=MsoNormal>--prefix=/<span class=SpellE>usr/local/apache/php</span> \<o:p></o:p></p>
    <p class=MsoNormal>--without-<span class=SpellE>mysql</span><o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal>Thank you for using PHP.<span style='mso-spacerun:yes'>    
    </span>&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt; <span
    class=SpellE><span class=GramE>php</span></span> compiled fine <o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal>Notice: Following unknown configure options were used:<o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal>--with-oracle=/u03/oracle/10203<o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal>Check '<span class=GramE>./</span>configure --help' for available
    options<o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><span class=GramE>make</span><o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><span class=GramE>make</span> install<o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><span class=GramE># ./</span><span class=SpellE>httpd</span>
    -l<o:p></o:p></p>
    <p class=MsoNormal>Compiled in modules:<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'>  </span><span class=SpellE>core.c</span><o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'>  </span><span class=SpellE>prefork.c</span><o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'>  </span><span class=SpellE>http_core.c</span><o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'>  </span><span class=SpellE>mod_so.c</span><o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal>-- <span class=GramE>in</span> case of error otherwise not
    needed.<o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal># <span class=SpellE><span class=GramE>httpd</span></span>
    -M<o:p></o:p></p>
    <p class=MsoNormal>Loaded Modules:<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>core_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>authn_file_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>authn_default_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>authz_host_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>authz_groupfile_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>authz_user_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>authz_default_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>auth_basic_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>include_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>filter_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>log_config_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>env_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>setenvif_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>mpm_prefork_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>http_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>mime_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>status_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>autoindex_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>asis_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>cgi_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>negotiation_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>dir_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>actions_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>userdir_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>alias_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span class=SpellE>so_module</span>
    (static)<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-spacerun:yes'> </span>php5_module
    (shared)<span style='mso-spacerun:yes'>  
    </span>&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;&lt;
    php5 module is loaded<o:p></o:p></p>
    <p class=MsoNormal>Syntax OK<o:p></o:p></p>
    <p class=MsoNormal># <span class=GramE>which</span> <span class=SpellE>httpd</span><o:p></o:p></p>
    <p class=MsoNormal>/<span class=SpellE>usr/local/apache/bin/httpd</span><o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal>&lt;<span class=GramE>html</span>&gt;<o:p></o:p></p>
    <p class=MsoNormal>&lt;<span class=GramE>head</span>&gt;<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-tab-count:1'>            </span>&lt;<span
    class=GramE>title&gt;</span>PHP Test&lt;/title&gt;<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-tab-count:1'>            </span>&lt;<span
    class=GramE>meta</span> http-equiv=&quot;Content-Type&quot;
    content=&quot;text/html; <span class=SpellE>charset</span>=ISO-8859-1&quot;&gt;<o:p></o:p></p>
    <p class=MsoNormal>&lt;/head&gt;<o:p></o:p></p>
    <p class=MsoNormal>&lt;<span class=GramE>body</span>&gt;<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-tab-count:1'>            </span>&lt;h1&gt;PHP
    Test&lt;/h1&gt;<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-tab-count:1'>            </span>&lt;p&gt;<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-tab-count:1'>            </span>&lt;b&gt;An
    Example of PHP in Action&lt;/b&gt;&lt;<span class=SpellE>br</span> /&gt;<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-tab-count:2'>                        </span><span
    class=GramE>&lt;?<span class=SpellE>php</span></span> echo &quot;The Current
    Date and Time is: &lt;<span class=SpellE>br</span>&gt;&quot;;<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-tab-count:3'>                                    </span><span
    class=GramE>echo</span> date(&quot;<span class=SpellE>g:i</span> A l, F j
    Y.&quot;);?&gt;<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-tab-count:1'>            </span>&lt;/p&gt;<o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><span style='mso-tab-count:1'>            </span>&lt;h2&gt;PHP
    Information&lt;/h2&gt;<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-tab-count:1'>            </span>&lt;p&gt;<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-tab-count:2'>                        </span><span
    class=GramE>&lt;?<span class=SpellE>php</span></span> <span class=SpellE>phpinfo</span>();
    ?&gt;<o:p></o:p></p>
    <p class=MsoNormal><span style='mso-tab-count:1'>            </span>&lt;/p&gt;<o:p></o:p></p>
    <p class=MsoNormal>&lt;/body&gt;<o:p></o:p></p>
    <p class=MsoNormal>&lt;/html&gt;<o:p></o:p></p>
    <p class=MsoNormal><o:p> </o:p></p>
    <p class=MsoNormal><span class=GramE>does</span> not give the <span
    class=SpellE>phpinfo</span> page.</p>
    </div>
    </body>
    </html>

    hi I got the php working and now can see the php pages, after i put the extensions=oci8.so .
    but the oci8 is not enabled still cause phpinfo is not showing it and i cant use oci8 calls and get an error.
    so iam trying to recompile apache with openssl and other options but its failing .
    its looking for files in /opt/apache2 directory where as I am installing it in /usr/local/apache .
    Making all in prefork
    find: cannot open /opt/apache2/httpd-2.2.8/include/ap_compat.h: No such file or
    directory
    find: cannot open /opt/apache2/httpd-2.2.8/include/ap_config_auto.h: No such fil
    e or directory
    find: cannot open /opt/apache2/httpd-2.2.8/include/ap_config.h: No such file or
    directory
    find: cannot open /opt/apache2/httpd-2.2.8/include/ap_config_layout.h: No such f
    ile or directory
    find: cannot open /opt/apache2/httpd-2.2.8/include/ap_listen.h: No such file or
    directory
    find: cannot open /opt/apache2/httpd-2.2.8/include/ap_mmn.h: No such file or dir
    ectory
    find: cannot open /opt/apache2/httpd-2.2.8/include/ap_mpm.h: No such file or dir
    ectory
    find: cannot open /opt/apache2/httpd-2.2.8/include/ap_provider.h: No such file o
    r directory
    find: cannot open /opt/apache2/httpd-2.2.8/include/ap_regex.h: No such file or d
    irectory
    find: cannot open /opt/apache2/httpd-2.2.8/include/ap_regkey.h: No such file or
    directory
    find: cannot open /opt/apache2/httpd-2.2.8/include/ap_release.h: No such file or
    directory
    find: cannot open /opt/apache2/httpd-2.2.8/include/http_config.h: No such file o
    r directory
    find: cannot open /opt/apache2/httpd-2.2.8/include/http_connection.h: No such fi
    le or directory
    find: cannot open /opt/apache2/httpd-2.2.8/include/http_core.h: No such file or
    directory

  • [Solved] Problem with stunnel and nntp

    I'm trying to encrypt nntp for pan.  I already have it encrypted for sabnzbd, so I know that at least I have the server info correct.
    I've read a few different guides to getting stunnel going for nntp, but it seems like I'm missing something.  Here's the log:
    2010.02.15 17:03:28 LOG5[2324:3075122880]: Reading configuration from file /etc/stunnel/stunnel.conf
    2010.02.15 17:03:28 LOG7[2324:3075122880]: RAND_status claims sufficient entropy for the PRNG
    2010.02.15 17:03:28 LOG7[2324:3075122880]: PRNG seeded successfully
    2010.02.15 17:03:29 LOG7[2324:3075122880]: SSL context initialized for service nntp
    2010.02.15 17:03:29 LOG5[2324:3075122880]: Configuration successful
    2010.02.15 17:03:29 LOG5[2324:3075122880]: No limit detected for the number of clients
    2010.02.15 17:03:29 LOG7[2324:3075122880]: FD=8 in non-blocking mode
    2010.02.15 17:03:29 LOG7[2324:3075122880]: FD=9 in non-blocking mode
    2010.02.15 17:03:29 LOG7[2324:3075122880]: FD=10 in non-blocking mode
    2010.02.15 17:03:29 LOG7[2324:3075122880]: Option SO_REUSEADDR set on accept socket
    2010.02.15 17:03:29 LOG7[2324:3075122880]: Service nntp bound to 127.0.0.1:119
    2010.02.15 17:03:29 LOG7[2324:3075122880]: Service nntp opened FD=10
    2010.02.15 17:03:29 LOG7[2330:3075122880]: Created pid file /stunnel.pid
    2010.02.15 17:03:29 LOG5[2330:3075122880]: stunnel 4.31 on i686-pc-linux-gnu with OpenSSL 0.9.8l 5 Nov 2009
    2010.02.15 17:03:29 LOG5[2330:3075122880]: Threading:PTHREAD SSL:ENGINE Sockets:POLL,IPv6 Auth:LIBWRAP
    2010.02.15 17:03:45 LOG7[2330:3075122880]: Service nntp accepted FD=0 from 127.0.0.1:60277
    2010.02.15 17:03:45 LOG7[2330:3078679408]: Service nntp started
    2010.02.15 17:03:45 LOG7[2330:3075122880]: Service nntp accepted FD=1 from 127.0.0.1:60278
    2010.02.15 17:03:45 LOG7[2330:3078679408]: FD=0 in non-blocking mode
    2010.02.15 17:03:45 LOG7[2330:3078679408]: Option TCP_NODELAY set on local socket
    2010.02.15 17:03:45 LOG7[2330:3078679408]: Waiting for a libwrap process
    2010.02.15 17:03:45 LOG7[2330:3078679408]: Acquired libwrap process #0
    2010.02.15 17:03:45 LOG7[2330:3078609776]: Service nntp started
    2010.02.15 17:03:45 LOG7[2330:3078609776]: FD=1 in non-blocking mode
    2010.02.15 17:03:45 LOG7[2330:3078609776]: Option TCP_NODELAY set on local socket
    2010.02.15 17:03:45 LOG7[2330:3078609776]: Waiting for a libwrap process
    2010.02.15 17:03:45 LOG7[2330:3078609776]: Acquired libwrap process #1
    2010.02.15 17:03:45 LOG7[2330:3078609776]: Releasing libwrap process #1
    2010.02.15 17:03:45 LOG7[2330:3078609776]: Released libwrap process #1
    2010.02.15 17:03:45 LOG4[2330:3078609776]: Service nntp REFUSED by libwrap from 127.0.0.1:60278
    2010.02.15 17:03:45 LOG7[2330:3078609776]: See hosts_access(5) manual for details
    2010.02.15 17:03:45 LOG5[2330:3078609776]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
    2010.02.15 17:03:45 LOG7[2330:3078609776]: Service nntp finished
    And here's my /etc/stunnel/stunnel.conf
    ; Sample stunnel configuration file by Michal Trojnara 2002-2009
    ; some options used here may not be adequate for your particular configuration
    ; please read the manual and make sure you understand them
    ; certificate/key is needed in server mode and optional in client mode
    ;cert = /etc/stunnel/mail.pem
    ;key = /etc/stunnel/mail.pem
    ; protocol version (all, SSLv2, SSLv3, TLSv1)
    sslVersion = SSLv3
    ; security enhancements for UNIX systems - comment them out on Win32
    ; for chroot a copy of some devices and files is needed within the jail
    chroot = /var/run/stunnel
    setuid = stunnel
    setgid = stunnel
    ; PID is created inside the chroot jail
    pid = /stunnel.pid
    ; performance tunings
    socket = l:TCP_NODELAY=1
    socket = r:TCP_NODELAY=1
    ;compression = zlib
    ; workaround for Eudora bug
    ;options = DONT_INSERT_EMPTY_FRAGMENTS
    ; authentication stuff needs to be configured to prevent MITM attacks
    ; it is not enabled by default!
    ;verify = 2
    ; don't forget to c_rehash CApath
    ; CApath is located inside chroot jail
    ;CApath = /certs
    ; it's often easier to use CAfile
    ;CAfile = /etc/stunnel/certs.pem
    ; don't forget to c_rehash CRLpath
    ; CRLpath is located inside chroot jail
    ;CRLpath = /crls
    ; alternatively CRLfile can be used
    ;CRLfile = /etc/stunnel/crls.pem
    ; debugging stuff (may useful for troubleshooting)
    debug = 7
    output = stunnel.log
    ; SSL client mode
    client = yes
    ; service-level configuration
    ;[pop3s]
    ;accept = 995
    ;connect = 110
    ;[imaps]
    ;accept = 993
    ;connect = 143
    ;[ssmtp]
    ;accept = 465
    ;connect = 25
    ;[https]
    ;accept = 443
    ;connect = 80
    ;TIMEOUTclose = 0
    [nntp]
    accept = localhost:119
    connect = ssl.astraweb.com:563
    ; vim:ft=dosini
    Last edited by eerok (2010-02-16 13:10:04)

    That was it.  Thanks a ton, network stuff never came naturally to me

  • Remote Desktop Connection With Custom Certificate on Windows 8.1 fails

    I'm trying to establish a secured remote desktop connection without success.
    The setting
    There are some local pcs with windows 8.1 Pro and windows 7 Pro, no server-edition. I've created a self signed ca-certificate with openssl for Windows. I used this to sign custom certs for the local windows-pcs, which are installed at mmc -> certificate
    snap-in for local computer -> My Certificates -> Certificates. The networkdriver has the right to read the key. The sha1-fingerprint of the custom signed certs are registered at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp
    -> SSLCertificateSHA1Hash = sha-1 hash of the custom local cert. Additionally the revocation-list is restrained to the local list by setting HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Credssp -> UseCachedCRLOnlyAndIgnoreRevocationUnknownErrors
    = 1.
    The results
    The connection form win 8.1 to win 7 works. The connection info confirms that it is a veryfied connection. The connection to windows 8.1 fails after entering the credentials with error: No connection possible. Network Level Authentication is set, but other
    level don't work as well. The log (Event Views -> Applications and Services Logs -> Microsoft -> Windows -> TerminalServices-RemoteConnectionManager -> Admin) says "Remote Desktop Services has taken too long to load the user configuration
    from server" and "The Local Security Authority Cannot Be Contacted" (error 0x80090304)
    Aditional information
    The connection via linux (remmina) works for win 7 and win 8.1, but I have no information about the encryption. It is the same with the Microsoft Remote Desktop Tool for Android.
    Maybe it is accociatet with a different cert handling by Windows 8.1 but I couldn't find further information or a solution in the internet.
    Best regards
    abditus

    I solved the problem!
    The default openssl certificate signature algorithm is md5RSA but it doesn't work with windows 8.1.
    It is at least sha1RSA needed.
    By adding "default_md = sha1" to the openssl.cnf you create certs with sha1RSA and it works fine.
    Beste Gegards
    abditus

  • Oracle OCI CLIENT 11g is not connecting with PHP & Apache on Fedora

    Dear all... we are facing following issue... similar to other but not able to resolve ...
    Warning: oci_connect() [function.oci-connect]: OCIEnvNlsCreate() failed. There is something wrong with your system - please check that LD_LIBRARY_PATH includes the directory with Oracle Instant Client libraries in /var/www/html/waseem2.php on line 2
    our PHPinfo(); is showing following the OCI8 Extenstion Enabled
    PHP Version 5.2.9
    System      Linux localhost.localdomain 2.6.27.5-117.fc10.i686 #1 SMP Tue Nov 18 12:19:59 EST 2008 i686
    Build Date      Apr 17 2009 03:29:46
    Configure Command      './configure' '--build=i386-redhat-linux-gnu' '--host=i386-redhat-linux-gnu' '--target=i386-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib' '--libexecdir=/usr/libexec' '--localstatedir=/var' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--cache-file=../config.cache' '--with-libdir=lib' '--with-config-file-path=/etc' '--with-config-file-scan-dir=/etc/php.d' '--disable-debug' '--with-pic' '--disable-rpath' '--without-pear' '--with-bz2' '--with-curl' '--with-exec-dir=/usr/bin' '--with-freetype-dir=/usr' '--with-png-dir=/usr' '--with-xpm-dir=/usr' '--enable-gd-native-ttf' '--with-t1lib=/usr' '--without-gdbm' '--with-gettext' '--with-gmp' '--with-iconv' '--with-jpeg-dir=/usr' '--with-openssl' '--with-pcre-regex=/usr' '--with-zlib' '--with-layout=GNU' '--enable-exif' '--enable-ftp' '--enable-magic-quotes' '--enable-sockets' '--enable-sysvsem' '--enable-sysvshm' '--enable-sysvmsg' '--enable-wddx' '--with-kerberos' '--enable-ucd-snmp-hack' '--enable-shmop' '--enable-calendar' '--without-mime-magic' '--without-sqlite' '--with-libxml-dir=/usr' '--enable-xml' '--with-system-tzdata' '--with-apxs2=/usr/sbin/apxs' '--without-mysql' '--without-gd' '--disable-dom' '--disable-dba' '--without-unixODBC' '--disable-pdo' '--disable-xmlreader' '--disable-xmlwriter' '--disable-json' '--without-pspell'
    Server API      Apache 2.0 Handler
    Virtual Directory Support      disabled
    Configuration File (php.ini) Path      /etc
    Loaded Configuration File      /etc/php.ini
    Scan this dir for additional .ini files      /etc/php.d
    additional .ini files parsed      /etc/php.d/dbase.ini, /etc/php.d/json.ini, /etc/php.d/ldap.ini, /etc/php.d/mbstring.ini, /etc/php.d/mysql.ini, /etc/php.d/mysqli.ini, /etc/php.d/pdo.ini, /etc/php.d/pdo_mysql.ini, /etc/php.d/pdo_sqlite.ini, /etc/php.d/zip.ini
    PHP API      20041225
    PHP Extension      20060613
    Zend Extension      220060519
    Debug Build      no
    Thread Safety      disabled
    Zend Memory Manager      enabled
    IPv6 Support      enabled
    Registered PHP Streams      php, file, data, http, ftp, compress.bzip2, compress.zlib, https, ftps, zip
    Registered Stream Socket Transports      tcp, udp, unix, udg, ssl, sslv3, sslv2, tls
    Registered Stream Filters      string.rot13, string.toupper, string.tolower, string.strip_tags, convert.*, consumed, convert.iconv.*, bzip2.*, zlib.*
    Zend logo This program makes use of the Zend Scripting Language Engine:
    Zend Engine v2.2.0, Copyright (c) 1998-2009 Zend Technologies
    PHP Credits
    Configuration
    PHP Core
    Directive     Local Value     Master Value
    allow_call_time_pass_reference     Off     Off
    allow_url_fopen     On     On
    allow_url_include     Off     Off
    always_populate_raw_post_data     Off     Off
    arg_separator.input     &     &
    arg_separator.output     &     &
    asp_tags     Off     Off
    auto_append_file     no value     no value
    auto_globals_jit     On     On
    auto_prepend_file     no value     no value
    browscap     no value     no value
    default_charset     no value     no value
    default_mimetype     text/html     text/html
    define_syslog_variables     Off     Off
    disable_classes     no value     no value
    disable_functions     no value     no value
    display_errors     On     On
    display_startup_errors     Off     Off
    doc_root     no value     no value
    docref_ext     no value     no value
    docref_root     no value     no value
    enable_dl     On     On
    error_append_string     no value     no value
    error_log     no value     no value
    error_prepend_string     no value     no value
    error_reporting     6143     6143
    expose_php     On     On
    extension_dir     /usr/lib/php/modules     /usr/lib/php/modules
    file_uploads     On     On
    highlight.bg     #FFFFFF     #FFFFFF
    highlight.comment     #FF8000     #FF8000
    highlight.default     #0000BB     #0000BB
    highlight.html     #000000     #000000
    highlight.keyword     #007700     #007700
    highlight.string     #DD0000     #DD0000
    html_errors     On     On
    ignore_repeated_errors     Off     Off
    ignore_repeated_source     Off     Off
    ignore_user_abort     Off     Off
    implicit_flush     Off     Off
    include_path     .:/usr/share/pear:/usr/share/php     .:/usr/share/pear:/usr/share/php
    log_errors     On     On
    log_errors_max_len     1024     1024
    magic_quotes_gpc     Off     Off
    magic_quotes_runtime     Off     Off
    magic_quotes_sybase     Off     Off
    mail.force_extra_parameters     no value     no value
    max_execution_time     30     30
    max_input_nesting_level     64     64
    max_input_time     60     60
    memory_limit     32M     32M
    open_basedir     no value     no value
    output_buffering     4096     4096
    output_handler     no value     no value
    post_max_size     8M     8M
    precision     14     14
    realpath_cache_size     16K     16K
    realpath_cache_ttl     120     120
    register_argc_argv     Off     Off
    register_globals     Off     Off
    register_long_arrays     Off     Off
    report_memleaks     On     On
    report_zend_debug     On     On
    safe_mode     Off     Off
    safe_mode_exec_dir     no value     no value
    safe_mode_gid     Off     Off
    safe_mode_include_dir     no value     no value
    sendmail_from     no value     no value
    sendmail_path     /usr/sbin/sendmail -t -i     /usr/sbin/sendmail -t -i
    serialize_precision     100     100
    short_open_tag     On     On
    SMTP     localhost     localhost
    smtp_port     25     25
    sql.safe_mode     Off     Off
    track_errors     Off     Off
    unserialize_callback_func     no value     no value
    upload_max_filesize     2M     2M
    upload_tmp_dir     no value     no value
    user_dir     no value     no value
    variables_order     EGPCS     EGPCS
    xmlrpc_error_number     0     0
    xmlrpc_errors     Off     Off
    y2k_compliance     On     On
    zend.ze1_compatibility_mode     Off     Off
    apache2handler
    Apache Version      Apache/2.2.11 (Fedora)
    Apache API Version      20051115
    Server Administrator      root@localhost
    Hostname:Port      localhost.localdomain:0
    User/Group      apache(48)/48
    Max Requests      Per Child: 4000 - Keep Alive: off - Max Per Connection: 100
    Timeouts      Connection: 120 - Keep-Alive: 15
    Virtual Server      No
    Server Root      /etc/httpd
    Loaded Modules      core prefork http_core mod_so mod_auth_basic mod_auth_digest mod_authn_file mod_authn_alias mod_authn_anon mod_authn_dbm mod_authn_default mod_authz_host mod_authz_user mod_authz_owner mod_authz_groupfile mod_authz_dbm mod_authz_default util_ldap mod_authnz_ldap mod_include mod_log_config mod_logio mod_env mod_ext_filter mod_mime_magic mod_expires mod_deflate mod_headers mod_usertrack mod_setenvif mod_mime mod_dav mod_status mod_autoindex mod_info mod_dav_fs mod_vhost_alias mod_negotiation mod_dir mod_actions mod_speling mod_userdir mod_alias mod_rewrite mod_proxy mod_proxy_balancer mod_proxy_ftp mod_proxy_http mod_proxy_connect mod_cache mod_suexec mod_disk_cache mod_file_cache mod_mem_cache mod_cgi mod_perl mod_php5 mod_proxy_ajp mod_python mod_ssl
    Directive     Local Value     Master Value
    engine     1     1
    last_modified     0     0
    xbithack     0     0
    Apache Environment
    Variable     Value
    LD_LIBRARY_PATH      /home/zubair/instantclient_11_1_
    HTTP_HOST      localhost
    HTTP_USER_AGENT      Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.4) Gecko/2008111217 Fedora/3.0.4-1.fc10 Firefox/3.0.4
    HTTP_ACCEPT      text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
    HTTP_ACCEPT_LANGUAGE      en-us,en;q=0.5
    HTTP_ACCEPT_ENCODING      gzip,deflate
    HTTP_ACCEPT_CHARSET      ISO-8859-1,utf-8;q=0.7,*;q=0.7
    HTTP_KEEP_ALIVE      300
    HTTP_CONNECTION      keep-alive
    HTTP_COOKIE      PHPSESSID=he50pdhvtihu74lhmjnvggfr42
    PATH      /sbin:/usr/sbin:/bin:/usr/bin
    SERVER_SIGNATURE      <address>Apache/2.2.11 (Fedora) Server at localhost Port 80</address>
    SERVER_SOFTWARE      Apache/2.2.11 (Fedora)
    SERVER_NAME      localhost
    SERVER_ADDR      127.0.0.1
    SERVER_PORT      80
    REMOTE_ADDR      127.0.0.1
    DOCUMENT_ROOT      /var/www/html
    SERVER_ADMIN      root@localhost
    SCRIPT_FILENAME      /var/www/html/waseem.php
    REMOTE_PORT      39529
    GATEWAY_INTERFACE      CGI/1.1
    SERVER_PROTOCOL      HTTP/1.1
    REQUEST_METHOD      GET
    QUERY_STRING      no value
    REQUEST_URI      /waseem.php
    SCRIPT_NAME      /waseem.php
    HTTP Headers Information
    HTTP Request Headers
    HTTP Request      GET /waseem.php HTTP/1.1
    Host      localhost
    User-Agent      Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.4) Gecko/2008111217 Fedora/3.0.4-1.fc10 Firefox/3.0.4
    Accept      text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
    Accept-Language      en-us,en;q=0.5
    Accept-Encoding      gzip,deflate
    Accept-Charset      ISO-8859-1,utf-8;q=0.7,*;q=0.7
    Keep-Alive      300
    Connection      keep-alive
    Cookie      PHPSESSID=he50pdhvtihu74lhmjnvggfr42
    HTTP Response Headers
    X-Powered-By      PHP/5.2.9
    Connection      close
    Transfer-Encoding      chunked
    Content-Type      text/html; charset=UTF-8
    bz2
    BZip2 Support      Enabled
    Stream Wrapper support      compress.bz2://
    Stream Filter support      bzip2.decompress, bzip2.compress
    BZip2 Version      1.0.5, 10-Dec-2007
    calendar
    Calendar support      enabled
    ctype
    ctype functions      enabled
    curl
    cURL support      enabled
    cURL Information      libcurl/7.18.2 NSS/3.12.1.1 zlib/1.2.3 libidn/0.6.14 libssh2/0.18
    date
    date/time support      enabled
    "Olson" Timezone Database Version      0.system
    Timezone Database      internal
    Default timezone      Asia/Karachi
    Directive     Local Value     Master Value
    date.default_latitude     31.7667     31.7667
    date.default_longitude     35.2333     35.2333
    date.sunrise_zenith     90.583333     90.583333
    date.sunset_zenith     90.583333     90.583333
    date.timezone     no value     no value
    exif
    EXIF Support      enabled
    EXIF Version      1.4 $Id: exif.c,v 1.173.2.5.2.27 2008/12/31 11:17:37 sebastian Exp $
    Supported EXIF Version      0220
    Supported filetypes      JPEG,TIFF
    filter
    Input Validation and Filtering      enabled
    Revision      $Revision: 1.52.2.45 $
    Directive     Local Value     Master Value
    filter.default     unsafe_raw     unsafe_raw
    filter.default_flags     no value     no value
    ftp
    FTP support      enabled
    gettext
    GetText Support      enabled
    gmp
    gmp support      enabled
    GMP version      4.2.2
    hash
    hash support      enabled
    Hashing Engines      md2 md4 md5 sha1 sha256 sha384 sha512 ripemd128 ripemd160 ripemd256 ripemd320 whirlpool tiger128,3 tiger160,3 tiger192,3 tiger128,4 tiger160,4 tiger192,4 snefru gost adler32 crc32 crc32b haval128,3 haval160,3 haval192,3 haval224,3 haval256,3 haval128,4 haval160,4 haval192,4 haval224,4 haval256,4 haval128,5 haval160,5 haval192,5 haval224,5 haval256,5
    iconv
    iconv support      enabled
    iconv implementation      glibc
    iconv library version      2.9
    Directive     Local Value     Master Value
    iconv.input_encoding     ISO-8859-1     ISO-8859-1
    iconv.internal_encoding     ISO-8859-1     ISO-8859-1
    iconv.output_encoding     ISO-8859-1     ISO-8859-1
    json
    json support      enabled
    json version      1.2.1
    ldap
    LDAP Support      enabled
    RCS Version      $Id: ldap.c,v 1.161.2.3.2.14 2008/12/31 11:17:39 sebastian Exp $
    Total Links      0/unlimited
    API Version      3001
    Vendor Name      OpenLDAP
    Vendor Version      20412
    SASL Support      Enabled
    libxml
    libXML support      active
    libXML Version      2.7.3
    libXML streams      enabled
    mbstring
    Multibyte Support      enabled
    Multibyte string engine      libmbfl
    Multibyte (japanese) regex support      enabled
    Multibyte regex (oniguruma) version      4.4.4
    Multibyte regex (oniguruma) backtrack check      On
    mbstring extension makes use of "streamable kanji code filter and converter", which is distributed under the GNU Lesser General Public License version 2.1.
    Directive     Local Value     Master Value
    mbstring.detect_order     no value     no value
    mbstring.encoding_translation     Off     Off
    mbstring.func_overload     0     0
    mbstring.http_input     pass     pass
    mbstring.http_output     pass     pass
    mbstring.internal_encoding     no value     no value
    mbstring.language     neutral     neutral
    mbstring.strict_detection     Off     Off
    mbstring.substitute_character     no value     no value
    mysql
    MySQL Support     enabled
    Active Persistent Links      0
    Active Links      0
    Client API version      5.0.84
    MYSQL_MODULE_TYPE      external
    MYSQL_SOCKET      /var/lib/mysql/mysql.sock
    MYSQL_INCLUDE      -I/usr/include/mysql
    MYSQL_LIBS      -L/usr/lib/mysql -lmysqlclient
    Directive     Local Value     Master Value
    mysql.allow_persistent     On     On
    mysql.connect_timeout     60     60
    mysql.default_host     no value     no value
    mysql.default_password     no value     no value
    mysql.default_port     no value     no value
    mysql.default_socket     no value     no value
    mysql.default_user     no value     no value
    mysql.max_links     Unlimited     Unlimited
    mysql.max_persistent     Unlimited     Unlimited
    mysql.trace_mode     Off     Off
    mysqli
    MysqlI Support     enabled
    Client API library version      5.0.84
    Client API header version      5.0.77
    MYSQLI_SOCKET      /var/lib/mysql/mysql.sock
    Directive     Local Value     Master Value
    mysqli.default_host     no value     no value
    mysqli.default_port     3306     3306
    mysqli.default_pw     no value     no value
    mysqli.default_socket     no value     no value
    mysqli.default_user     no value     no value
    mysqli.max_links     Unlimited     Unlimited
    mysqli.reconnect     Off     Off
    oci8
    OCI8 Support      enabled
    Version      1.3.5
    Revision      $Revision: 1.269.2.16.2.38.2.32 $
    Active Persistent Connections      0
    Active Connections      0
    Oracle Instant Client Version      11.1
    Temporary Lob support      enabled
    Collections support      enabled
    Directive     Local Value     Master Value
    oci8.connection_class     no value     no value
    oci8.default_prefetch     100     100
    oci8.events     Off     Off
    oci8.max_persistent     -1     -1
    oci8.old_oci_close_semantics     Off     Off
    oci8.persistent_timeout     -1     -1
    oci8.ping_interval     60     60
    oci8.privileged_connect     Off     Off
    oci8.statement_cache_size     20     20
    openssl
    OpenSSL support      enabled
    OpenSSL Version      OpenSSL 0.9.8g 19 Oct 2007
    pcre
    PCRE (Perl Compatible Regular Expressions) Support      enabled
    PCRE Library Version      7.8 2008-09-05
    Directive     Local Value     Master Value
    pcre.backtrack_limit     100000     100000
    pcre.recursion_limit     100000     100000
    PDO
    PDO support     enabled
    PDO drivers      mysql, sqlite
    pdo_mysql
    PDO Driver for MySQL, client library version     5.0.84
    pdo_sqlite
    PDO Driver for SQLite 3.x     enabled
    PECL Module version      1.0.1 $Id: pdo_sqlite.c,v 1.10.2.6.2.4 2008/12/31 11:17:42 sebastian Exp $
    SQLite Library      3.5.9
    posix
    Revision      $Revision: 1.70.2.3.2.22 $
    Reflection
    Reflection     enabled
    Version      $Id: php_reflection.c,v 1.164.2.33.2.55 2008/12/31 11:17:42 sebastian Exp $
    session
    Session Support      enabled
    Registered save handlers      files user
    Registered serializer handlers      php php_binary wddx
    Directive     Local Value     Master Value
    session.auto_start     Off     Off
    session.bug_compat_42     Off     Off
    session.bug_compat_warn     On     On
    session.cache_expire     180     180
    session.cache_limiter     nocache     nocache
    session.cookie_domain     no value     no value
    session.cookie_httponly     Off     Off
    session.cookie_lifetime     0     0
    session.cookie_path     /     /
    session.cookie_secure     Off     Off
    session.entropy_file     no value     no value
    session.entropy_length     0     0
    session.gc_divisor     1000     1000
    session.gc_maxlifetime     1440     1440
    session.gc_probability     1     1
    session.hash_bits_per_character     5     5
    session.hash_function     0     0
    session.name     PHPSESSID     PHPSESSID
    session.referer_check     no value     no value
    session.save_handler     files     files
    session.save_path     /var/lib/php/session     /var/lib/php/session
    session.serialize_handler     php     php
    session.use_cookies     On     On
    session.use_only_cookies     Off     Off
    session.use_trans_sid     0     0
    shmop
    shmop support      enabled
    SimpleXML
    Simplexml support     enabled
    Revision      $Revision: 1.151.2.22.2.46 $
    Schema support      enabled
    sockets
    Sockets Support      enabled
    SPL
    SPL support     enabled
    Interfaces      Countable, OuterIterator, RecursiveIterator, SeekableIterator, SplObserver, SplSubject
    Classes      AppendIterator, ArrayIterator, ArrayObject, BadFunctionCallException, BadMethodCallException, CachingIterator, DirectoryIterator, DomainException, EmptyIterator, FilterIterator, InfiniteIterator, InvalidArgumentException, IteratorIterator, LengthException, LimitIterator, LogicException, NoRewindIterator, OutOfBoundsException, OutOfRangeException, OverflowException, ParentIterator, RangeException, RecursiveArrayIterator, RecursiveCachingIterator, RecursiveDirectoryIterator, RecursiveFilterIterator, RecursiveIteratorIterator, RecursiveRegexIterator, RegexIterator, RuntimeException, SimpleXMLIterator, SplFileInfo, SplFileObject, SplObjectStorage, SplTempFileObject, UnderflowException, UnexpectedValueException
    standard
    Regex Library      Bundled library enabled
    Dynamic Library Support      enabled
    Path to sendmail      /usr/sbin/sendmail -t -i
    Directive     Local Value     Master Value
    assert.active     1     1
    assert.bail     0     0
    assert.callback     no value     no value
    assert.quiet_eval     0     0
    assert.warning     1     1
    auto_detect_line_endings     0     0
    default_socket_timeout     60     60
    safe_mode_allowed_env_vars     PHP_     PHP_
    safe_mode_protected_env_vars     LD_LIBRARY_PATH     LD_LIBRARY_PATH
    url_rewriter.tags     a=href,area=href,frame=src,input=src,form=fakeentry     a=href,area=href,frame=src,input=src,form=fakeentry
    user_agent     no value     no value
    sysvmsg
    sysvmsg support      enabled
    Revision      $Revision: 1.20.2.3.2.8 $
    tokenizer
    Tokenizer Support      enabled
    wddx
    WDDX Support     enabled
    WDDX Session Serializer      enabled
    xml
    XML Support      active
    XML Namespace Support      active
    libxml2 Version      2.7.3
    zip
    Zip      enabled
    Extension Version      $Id: php_zip.c,v 1.1.2.49 2009/02/05 19:53:22 pajoye Exp $
    Zip version      1.8.11
    Libzip version      0.9.0
    zlib
    ZLib Support      enabled
    Stream Wrapper support      compress.zlib://
    Stream Filter support      zlib.inflate, zlib.deflate
    Compiled Version      1.2.3
    Linked Version      1.2.3
    Directive     Local Value     Master Value
    zlib.output_compression     Off     Off
    zlib.output_compression_level     -1     -1
    zlib.output_handler     no value     no value
    Additional Modules
    Module Name
    dbase
    sysvsem
    sysvshm
    Environment
    Variable     Value
    TERM      xterm
    LD_LIBRARY_PATH      /home/zubair/instantclient_11_1/
    PATH      /sbin:/usr/sbin:/bin:/usr/bin
    PWD      /
    LANG      C
    SHLVL      2
    ORACLE_HOME      /home/zubair/instantclient_11_1/
    _      /usr/sbin/httpd
    PHP Variables
    Variable     Value
    _REQUEST["PHPSESSID"]     he50pdhvtihu74lhmjnvggfr42
    _COOKIE["PHPSESSID"]     he50pdhvtihu74lhmjnvggfr42
    SERVER["LDLIBRARY_PATH"]     /home/zubair/instantclient_11_1
    _SERVER["HTTP_HOST"]     localhost
    _SERVER["HTTP_USER_AGENT"]     Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.4) Gecko/2008111217 Fedora/3.0.4-1.fc10 Firefox/3.0.4
    _SERVER["HTTP_ACCEPT"]     text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
    _SERVER["HTTP_ACCEPT_LANGUAGE"]     en-us,en;q=0.5
    _SERVER["HTTP_ACCEPT_ENCODING"]     gzip,deflate
    _SERVER["HTTP_ACCEPT_CHARSET"]     ISO-8859-1,utf-8;q=0.7,*;q=0.7
    _SERVER["HTTP_KEEP_ALIVE"]     300
    _SERVER["HTTP_CONNECTION"]     keep-alive
    _SERVER["HTTP_COOKIE"]     PHPSESSID=he50pdhvtihu74lhmjnvggfr42
    _SERVER["PATH"]     /sbin:/usr/sbin:/bin:/usr/bin
    _SERVER["SERVER_SIGNATURE"]     <address>Apache/2.2.11 (Fedora) Server at localhost Port 80</address>
    _SERVER["SERVER_SOFTWARE"]     Apache/2.2.11 (Fedora)
    _SERVER["SERVER_NAME"]     localhost
    _SERVER["SERVER_ADDR"]     127.0.0.1
    _SERVER["SERVER_PORT"]     80
    _SERVER["REMOTE_ADDR"]     127.0.0.1
    _SERVER["DOCUMENT_ROOT"]     /var/www/html
    _SERVER["SERVER_ADMIN"]     root@localhost
    _SERVER["SCRIPT_FILENAME"]     /var/www/html/waseem.php
    _SERVER["REMOTE_PORT"]     39529
    _SERVER["GATEWAY_INTERFACE"]     CGI/1.1
    _SERVER["SERVER_PROTOCOL"]     HTTP/1.1
    _SERVER["REQUEST_METHOD"]     GET
    _SERVER["QUERY_STRING"]     no value
    _SERVER["REQUEST_URI"]     /waseem.php
    _SERVER["SCRIPT_NAME"]     /waseem.php
    _SERVER["PHP_SELF"]     /waseem.php
    _SERVER["REQUEST_TIME"]     1253301146
    _ENV["TERM"]     xterm
    _ENV["LD_LIBRARY_PATH"]     /home/zubair/instantclient_11_1/
    _ENV["PATH"]     /sbin:/usr/sbin:/bin:/usr/bin
    _ENV["PWD"]     /
    _ENV["LANG"]     C
    _ENV["SHLVL"]     2
    _ENV["ORACLE_HOME"]     /home/zubair/instantclient_11_1/
    _ENV["_"]     /usr/sbin/httpd
    PHP License
    This program is free software; you can redistribute it and/or modify it under the terms of the PHP License as published by the PHP Group and included in the distribution in the file: LICENSE
    This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
    If you did not receive a copy of the PHP license, or have any questions about PHP licensing, please contact [email protected].
    Have a nice day!
    Fatal error: Call to undefined function odbc_connect() in /var/www/html/waseem.php on line 20
    ------------------------------------------------------------------------------------------

    Is the problem with oci_connect or odbc_connect?
    The phpinfo() output shows '--without-unixODBC' which may be a root cause. There is no 'odbc' section shown in the phpinfo() output so I wouldn't expect odbc calls to work.
    But if the issue is with OCI8, then make sure that Oracle environment variables and LD_LIBRARY_PATH are set BEFORE starting Apache.
    More information on OCI8 and PHP is in http://www.oracle.com/technology/tech/php/underground-php-oracle-manual.html
    Also see http://wiki.oracle.com/page/PHP+Oracle+FAQ
    The PHP forum on OTN is http://www.oracle.com/technology/forums/php.html

Maybe you are looking for