Re: [courier-users] Disabling TLS 1.0?

[Gordon M. <gor...@gm...>]

On 08/10/2018 05:32 AM, Greg Earle wrote:
>
> (b) If I put a directory (/usr/local/lib) with a (older) version of 
> OpenLDAP/libldap.so at the front so as to pick up ldap_initialize(), 
> then I get an undefined symbol (from OpenSSL 1.0.2n) instead - because 
> unfortunately the linker is picking up an older OpenSSL library that 
> is also in that same /usr/local/lib directory.  :-/ 


(It's early, and I really should learn to not send email at this time of 
day, but...)

Offhand, I would say that there's nothing magical about /usr/local as a 
prefix.  It's more of a convention than anything else.  If I were you, 
I'd first back out all of the changes that you've made trying to get 
Courier to build.  (As a practice, I never build an application on the 
host where it'll run, because that tends to make systems hard to 
reproduce.)  Create an /opt/courier directory.  Go through the list of 
dependencies that cause build failures, and install each of them there, 
and finally build and install courier there as well.  Since it's a new 
prefix, there shouldn't be any conflicts with old installations, and 
whatever you install there shouldn't impact any processes already 
running on the system.