Re: LDAPs and OpenSSL problem.

[Chris R. <chr...@me...>]

Clif Harden <cl...@di...> wrote:
> 
> This message is to inform the list of a problem I ran into
> last night trying to install perl-ldap .20 using the ldaps/ssl
> option on my linux system.  Chris Ridd and I have already 
> discussed this problem somewhat.
> 
> MY linux system particulars;
> 
> Mandrake Linux 6.5
> OpenSSL rpm installed, ssl verison 0.9.5a
> 
> When installing perl-ldap .20 with ssl I had to 
> load IO::Socket::SSL which requires Net::SSLeay
> which now requires OpenSSL-0.9.3a or newer.
> The Net::SSLeay expects to find the OpenSSL
> code in /usr/local/ssl.  The OpenSSL rpm I have 
> installed does not load software into /usr/local/ssl.
> 
> I did specify a new location for the libraries/binaries
> according to the documentation in the Net::SSLeay
> module, but it did not work.  I think this is because
> the binaries and libraries of the rpm are in different
> base directories. 
> 
> I think I can get around problem by creating a 
> /usr/local/ssl and sub directories and then creating
> soft links to the binaries and libraries of my 
> rpm software.
> 
> I need someone who has OpenSSL installed in 
> /usr/local/ssl send me a listing of this 
> directory and all of it's subdirectories.

bin/  certs/  include/  lib/  misc/  oid.cnf  openssl.cnf  private/

> I am currently working on the perl-ldap FAQ.
> 
> I think LDAPS and OpenSSL will cause an increase
> in "help me" questions on the list.  I intend to
> add a section on LDAPs and OpenSSL in the FAQ. 

We should probably wait until they're actually frequently asked ;-), but I
suspect you're right - getting Net::SSLeay installed is fundamentally
harder than Net::LDAP because it requires a C compiler and is therefore
likely to cause more problems.

I mentioned to Clif this morning that the versions of bits that I know will
work (on a Linux system) for Net::LDAP:

OpenSSL: 0.9.4
Net::SSLeay: 1.05
IO::Socket::SSL: 0.73

In particular, I think newer versions of OpenSSL will cause trouble.

I will, when I get some time, try to get Net::LDAPS working with newer
releases of these bits. I'm off to Tokyo this week, so I've got a long
flight ahead in which to thrash this out :-) The in-flight movies might win
though.

> In order to make this section of the FAQ more meaning full, I 
> need documentation on problems/solutions encountered while 
> trying to install LDAPs and OpenSSL on other systems like 
> FreeBSD, Solaris, HPUX, etc.  Chris Ridd also needs to know 
> about these problems.
> 
> 
> Regards,
> 
> Clif Harden           INTERNET:  c-h...@ti...
> 
> 

Cheers,

Chris