build + openssl reports no errors. on exec, " opendkim: incompatible SSL versions (library = 0x01000200f, filter = 01000207f)" ?

From: <jasonsu_at_mail-central.com>
Date: Fri, 08 Apr 2016 18:41:45 -0700

I'm building opendkim with openssl


        git log | head
                commit ab2934e131cbe670b49f11db9daf8cd1223e3839
                Author: Murray S. Kucherawy <msk_at_trusteddomain.org>
                Date: Tue Oct 6 00:22:38 2015 -0700

                    Revert "Formatting"

                    This reverts commit 529c8afcff32347ba4a77e7857c23cbcffed4151.

                commit 529c8afcff32347ba4a77e7857c23cbcffed4151
                Author: Murray S. Kucherawy <msk_at_trusteddomain.org>

    ./configure \
        ...
        --enable-rpath \
        --with-openssl=/usr/local/ssl \
        ...

No problems reported at configure.

It finds the includes
    ...
    checking for OpenSSL includes... /usr/local/ssl

and all the tests pass

    checking openssl/bio.h usability... yes
    checking openssl/bio.h presence... yes
    checking for openssl/bio.h... yes
    checking openssl/conf.h usability... yes
    checking openssl/conf.h presence... yes
    checking for openssl/conf.h... yes
    checking openssl/crypto.h usability... yes
    checking openssl/crypto.h presence... yes
    checking for openssl/crypto.h... yes
    checking openssl/err.h usability... yes
    checking openssl/err.h presence... yes
    checking for openssl/err.h... yes
    checking openssl/evp.h usability... yes
    checking openssl/evp.h presence... yes
    checking for openssl/evp.h... yes
    checking openssl/md5.h usability... yes
    checking openssl/md5.h presence... yes
    checking for openssl/md5.h... yes
    checking openssl/opensslv.h usability... yes
    checking openssl/opensslv.h presence... yes
    checking for openssl/opensslv.h... yes
    checking openssl/pem.h usability... yes
    checking openssl/pem.h presence... yes
    checking for openssl/pem.h... yes
    checking openssl/rsa.h usability... yes
    checking openssl/rsa.h presence... yes
    checking for openssl/rsa.h... yes
    checking openssl/sha.h usability... yes
    checking openssl/sha.h presence... yes
    checking for openssl/sha.h... yes
    checking openssl/ssl.h usability... yes
    checking openssl/ssl.h presence... yes
    checking for openssl/ssl.h... yes
    checking for library containing ERR_peek_error... none required
    checking for library containing SSL_library_init... none required
    ...

make & install are OK, no errors.

    /usr/local/opendkim/sbin/opendkim -V
    opendkim: OpenDKIM Filter v2.10.3
            Compiled with OpenSSL 1.0.2g 1 Mar 2016
            SMFI_VERSION 0x1000001
            libmilter version 1.0.1
            Supported signing algorithms:
                    rsa-sha1
                    rsa-sha256
            Supported canonicalization algorithms:
                    relaxed
                    simple
            Active code options:
                    USE_MDB
                    USE_UNBOUND
                    _FFR_DIFFHEADERS
                    _FFR_STATS
            libopendkim 2.10.3: diffheaders

Checking quickly for ssl/crypto rpaths

    cd /usr/local/opendkim
    ldd lib64/* sbin/* | egrep -i "ssl|crypto"
        ldd: warning: you do not have execution permission for `lib64/libopendkim.a'
                libssl.so.1.0.0 => /usr/local/ssl/lib64/libssl.so.1.0.0 (0x00007f525f5e6000)
                libcrypto.so.1.0.0 => /usr/local/ssl/lib64/libcrypto.so.1.0.0 (0x00007f525f15d000)
                libssl.so.1.0.0 => /usr/local/ssl/lib64/libssl.so.1.0.0 (0x00007f25123fc000)
                libcrypto.so.1.0.0 => /usr/local/ssl/lib64/libcrypto.so.1.0.0 (0x00007f2511f73000)
                libssl.so.1.0.0 => /usr/local/ssl/lib64/libssl.so.1.0.0 (0x00007fce5baf6000)
                libcrypto.so.1.0.0 => /usr/local/ssl/lib64/libcrypto.so.1.0.0 (0x00007fce5b66d000)
        ldd: lib64/pkgconfig: not regular file
                libssl.so.1.0.0 => /usr/local/ssl/lib64/libssl.so.1.0.0 (0x00007fbd0ac43000)
                libcrypto.so.1.0.0 => /usr/local/ssl/lib64/libcrypto.so.1.0.0 (0x00007fbd0a7bb000)
                libssl.so.1.0.0 => /usr/local/ssl/lib64/libssl.so.1.0.0 (0x00007feb55e2c000)
                libcrypto.so.1.0.0 => /usr/local/ssl/lib64/libcrypto.so.1.0.0 (0x00007feb559a4000)
                libssl.so.1.0.0 => /usr/local/ssl/lib64/libssl.so.1.0.0 (0x00007f2bdb06a000)
                libcrypto.so.1.0.0 => /usr/local/ssl/lib64/libcrypto.so.1.0.0 (0x00007f2bdabe2000)
                libssl.so.1.0.0 => /usr/local/ssl/lib64/libssl.so.1.0.0 (0x00007f51fcd47000)
                libcrypto.so.1.0.0 => /usr/local/ssl/lib64/libcrypto.so.1.0.0 (0x00007f51fc8bf000)
                libssl.so.1.0.0 => /usr/local/ssl/lib64/libssl.so.1.0.0 (0x00007f3e45878000)
                libcrypto.so.1.0.0 => /usr/local/ssl/lib64/libcrypto.so.1.0.0 (0x00007f3e453f0000)

all links look correct.

But on exec

    /usr/local/opendkim/sbin/opendkim -f
        opendkim: incompatible SSL versions (library = 0x01000200f, filter = 01000207f)

Since there's no errors in config or build, what's this coming from?

Jason
Received on Sat Apr 09 2016 - 01:41:58 PST