Building Unbound on Big Sur

Hi there.

I am not sure whether this list is monitored much or not. I have some questions about building unbound

When I try build it I get an openSSL error saying that

OpenSSL found in /usr/local, but version 0.9.7

This seems to be related to Apple putting their own SSL into the /usr/bin/openSSL and pretending it is openSSL. Not sure.

I have tried multiple solutions, changed the configuration to point to /usr/local/bin, and linked a home-brew installed openSSL into /usr/local/bin but it doesn’t seem to work. libexpat doesn’t seem to work either.

Anybody got any suggestions?

Thanks

Eoin

p.s. is there a way to see the archives of this list?

List-Id: Unbound users discussion list <unbound-users.lists.nlnetlabs.nl>

List-Unsubscribe:
<https://lists.nlnetlabs.nl/mailman/options/unbound-users&gt;,
<mailto:unbound-users-request@lists.nlnetlabs.nl?subject=unsubscribe>

List-Archive: <http://lists.nlnetlabs.nl/pipermail/unbound-users/&gt;

List-Post: <mailto:unbound-users@lists.nlnetlabs.nl>

List-Help: <mailto:unbound-users-request@lists.nlnetlabs.nl?subject=help>

List-Subscribe: <https://lists.nlnetlabs.nl/mailman/listinfo/unbound-users&gt;,
<mailto:unbound-users-request@lists.nlnetlabs.nl?subject=subscribe>

Hope this helps.

Eoin Norris via Unbound-users writes:

> Hi there.
>
> I am not sure whether this list is monitored much or not. I have some
> questions about building unbound

It is

>
> When I try build it I get an openSSL error saying that
>
> OpenSSL found in /usr/local, but version 0.9.7
>
> This seems to be related to Apple putting their own SSL into the
> /usr/bin/openSSL and pretending it is openSSL. Not sure.

That is likely

>
> I have tried multiple solutions, changed the configuration to point to
> /usr/local/bin, and linked a home-brew installed openSSL into
> /usr/local/bin but it doesn't seem to work. libexpat doesn't
> seem to work either.
>
> Anybody got any suggestions?
>

I never installed it on Big Sur, but, why try brew directly as in "brew install
unbound".

> Thanks
>
> Eoin
>
> p.s. is there a way to see the archives of this list?

List-Archive: <http://lists.nlnetlabs.nl/pipermail/unbound-users/&gt; should work.

  jaap

Thanks Mike

I’ve inherited a project which is forked off the standard unbound and hadn’t been built for a while and never on Big Sur. I’ve just joined the company and the other developer is gone. Anyway long story short it needs to be built from the sources and not using brew. Sadly.

Thanks

Eoin

Hi Eoin,

Can't offer much advice on Big Sur and Mac building but there are the
     --with-libexpat=path, and
     --with-ssl=path
./configure options to specify alternative paths for those.

Best regards,
-- George

George Thessalonikefs via Unbound-users writes:

> Hi Eoin,
>
> Can't offer much advice on Big Sur and Mac building but there are the
> --with-libexpat=path, and
> --with-ssl=path
> ./configure options to specify alternative paths for those.
>
> Best regards,
> -- George
>
> >
> > Thanks Mike
> >
> > I’ve inherited a project which is forked off the standard unbound and hadn’t been built for a while and never on Big Sur. I’ve just joined the company and the other developer is gone. Anyway long story short it needs to be built from the sources and not using brew. Sadly.

Silly suggestion: Although MacPorts can give you binaries, it also
builds from source (there is an option to force that). If you dig into
the system it might give an idea how to set the configurations options
George talks about. You probably have to build some dependencies as
well.

See https://www.macports.org/index.php,
https://guide.macports.org/#installing.macports.uninstalling

  jaap

Hi Guys

Thanks for al the help. I have tried on Catalina as well, no luck. Also tried the latest.

I managed to download OpenSSL to a /usr/local directory to see if it would build. I am still getting the

configure: error: OpenSSL found in /usr/local, but version 0.9.7 or higher is required

I thought this was where that test is.

see if OPENSSL 1.0.0 or later (has EVP MD and Verify independency)

$as_echo_n "checking if openssl supports SHA2 and ECDSA with EVP… " >&6; }
if grep OPENSSL_VERSION_TEXT $ssldir/include/openssl/opensslv.h | grep “OpenSSL” >/dev/null; then
if grep OPENSSL_VERSION_NUMBER $ssldir/include/openssl/opensslv.h | grep 0x0 >/dev/null; then
{ $as_echo “$as_me:${as_lineno-$LINENO}: result: no” >&5
$as_echo “no” >&6; }

That looks ok though, as the top of the opensslv.h is

*/

define OPENSSL_VERSION_NUMBER 0x101010bfL

define OPENSSL_VERSION_TEXT “OpenSSL 1.1.1k 25 Mar 2021”

So it looks like it is checking that OpenSSL is there in the line with the OPENSSL_VERSION_TEXT and that 0x0 isn’t there in the line with the OPENSSL_VERSION_NUMBER, anything above that is version 1.0 or so. So that is ok.

I also see this. Any idea what this is doing?

if ac_fn_c_try_link “$LINENO”; then :

$as_echo “#define HAVE_EVP_SHA256 1” >>confdefs.h

{ $as_echo “$as_me:${as_lineno-$LINENO}: result: yes” >&5
$as_echo “yes” >&6; }

else

{ $as_echo “$as_me:${as_lineno-$LINENO}: result: no” >&5
$as_echo “no” >&6; }
as_fn_error $? “OpenSSL found in $ssldir, but version 0.9.7 or higher is required” “$LINENO” 5

fi

Have logged to here:

https://github.com/NLnetLabs/unbound/issues/471

Eoin

Eoin Norris writes:

> I managed to download OpenSSL to a /usr/local directory to see if it
> would build. I am still getting the=20
>
> configure: error: OpenSSL found in /usr/local, but version 0.9.7 or
> higher is required
>
> I thought this was where that test is.

So it seems you still used the wrong one. I succsefully build
unbound, using brew (you mentioned earlier you tried using that).
See https://github.com/NLnetLabs/unbound/issues/471.

  jaap

I run unbound via macports both on Mojave and Catalina. I used to work with brew but for a few reasons (postfix being not available under brew was the trigger) have moved to MacPorts.

MacPorts is close to running from source (in fact it is a way to run from source) and is closest to the normal unix setup as if you would be compiling yourself (actually, it is a rich wrapper around compiling yourself).

Gerben Wierda (LinkedIn)
R&A Enterprise Architecture (main site)
Book: Chess and the Art of Enterprise Architecture
Book: Mastering ArchiMate