Re: Stunnel on Solaris 10 (SPARC)

Mike Delaney wrote:
On Mon, 06 Feb 2006 16:38:35 -0500, Randal T. Rioux said something similar to:
:
: OpenSSL 0.9.7i or 0.9.8a
: Stunnel 4.15 or 4.14
: Any combo of versions...
:
: Stunnel will not make. I am using Stunnel because PostgreSQL will not
: compile with SSL support (tips for that?). Please see the info below.
: Any help is greatly appreciated! Thanks - Randy
:
: The 'make' error:
[snip]
: ld: warning: file /usr/local/ssl/lib/libssl.a(s3_clnt.o): wrong ELF
: class: ELFCLASS64
: ld: warning: file /usr/local/ssl/lib/libcrypto.a(mem.o): wrong ELF
: class: ELFCLASS64

Your libssl and libcrypto were complied 64-bit, and you're
trying to link them with 32-bit code. That doesn't work.
I suspect PostgreSQL isn't building against these libraries for
the same reason.

Is there a particular reason you're not using the OpenSSL installation
shipped with Solaris?

That was it! Nice catch - with all the 32-64 bit work I've been doing
I'm disappointed I didn't see that line.

It (Stunnel) compiled cleanly with this configure line:

CC="gcc -m64" ./configure --disable-libwrap

As for the OpenSSL package installed with Solaris, it doesn't support
AES192 (it is strength-crippled) and out of habit and paranoia that is
what I use.

Thanks for your help!
Randy
.

Relevant Pages

  • Re: CLI tools that can handle snews:// URLs
    ... You might be able to get openssl to provide the suitable telnet-style ... Test post using: ... Your telnet session looks normal. ... I use Stunnel to access my INN server when using any non-TLS/SSL newsreaders. ...
    (news.software.readers)
  • Re: Stunnel on Solaris 10 (SPARC)
    ... : Stunnel will not make. ... I am using Stunnel because PostgreSQL will not ... Is there a particular reason you're not using the OpenSSL installation ...
    (comp.unix.solaris)
  • Re: CLI tools that can handle snews:// URLs
    ... Stunnel is providing a secure tunnel for telnet. ... "openssl s_client -connect news.panix.com:563" but what about the person who is not using any CLI? ... You might see my particular use more clearly if I provide the information that I have a BIND9 DNS server, ...
    (news.software.readers)
  • Re: ssh/popd/outlook trust problem
    ... I thought openssl and openssh were the same ... I'm using stunnel to provide an SSL tunnel for ... > ES> I'm accessing my Linux POP server through SSL ... you are using a POP server which supports ...
    (comp.security.ssh)
  • Re: Start program from boot, which needs library in non-standard place
    ... for some reason I did not address the other parts of your ... I thought that by specifically using the first release of Solaris ... updated from 0.9.7 of OpenSSL - only bug fixes have been applied. ... I'm a bit surprised sage doesn't include its own copy of openssl :-) ...
    (comp.unix.solaris)