[racket-dev] SSL problem with the webserver?

From: Jay McCarthy (jay.mccarthy at gmail.com)
Date: Thu Aug 18 20:17:32 EDT 2011

libssl3.so and libssl.so.etc are not the same kind of thing.

On Ubuntu, libssl3 is from libnss3, the Network Security Services
package. libssl.so.0.9.8 is from libssl0.9.8, the OpenSSL package.

On my system, I can easily tell these apart...

jay at theatre:/usr/lib$ ls -l *ssl*so*
-rw-r--r-- 1 root root 230072 2011-04-20 10:04 libssl3.so
lrwxrwxrwx 1 root root     10 2011-07-11 22:20 libssl3.so.1d -> libssl3.so
lrwxrwxrwx 1 root root     20 2011-07-11 22:37 libssl.so.0.9.8 ->
/lib/libssl.so.0.9.8
jay at theatre:/usr/lib$ nm -D libssl3.so | grep client
jay at theatre:/usr/lib$ nm -D libssl.so.0.9.8 | grep client_method
000000000002c480 T DTLSv1_client_method
0000000000026df0 T SSLv23_client_method
0000000000014ae0 T SSLv2_client_method
000000000001bdd0 T SSLv3_client_method
0000000000027230 T TLSv1_client_method
jay at theatre:/usr/lib$

You should look for libssl.so on your system (perhaps in /lib, like
mine). Check the symbols (using nm -D as above). Or just make sure
libssl0.9.8 is installed.

Let me know what else I can do if this is confusing or doesn't work,

Jay

On Thu, Aug 18, 2011 at 6:04 PM, Kathi Fisler <kfisler at gmail.com> wrote:
> My system only has libssl3.so.  I tried sym-linking that to libssl.so
> in the directory named in (find-lib-dir), but the error persists.
> Should I have expected the symbolic link trick to work?  Trying to
> figure out whether to get my admin staff to install another version of
> openssl or whether the problem is likely somewhere else ...
>
> thanks,
> Kathi
>
> On Wed, Aug 17, 2011 at 3:59 PM, Jay McCarthy <jay.mccarthy at gmail.com> wrote:
>> This means that the underlying libssl can't be found at the correct
>> version. These are the versions it looks for:
>>
>>         (ffi-lib libssl-so '("" "1.0" "1.0.0a" "0.9.8b" "0.9.8" "0.9.7")))))
>>
>> which do you have? Is it in a place that Racket can find it?
>>
>> Jay
>>
>> On Wed, Aug 17, 2011 at 1:46 PM, Kathi Fisler <kfisler at gmail.com> wrote:
>>> I've just updated a web app that used to run under 4.0.1 to 5.1.3.
>>> Now, when we start up the app with ssl/https, I get the error below.
>>>
>>> Anyone experienced with SSL clients recognize the problem here?
>>>
>>> thanks,
>>> Kathi
>>>
>>> ---------------------------------------------
>>> SSLv23_client_method: implementation not found; no arguments provided
>>>
>>>  === context ===
>>> /home/turnin/plt-5.1.3/lib/racket/collects/openssl/mzssl.rkt:322:2:
>>> ssl-make-client-context
>>> /home/turnin/plt-5.1.3/lib/racket/collects/web-server/web-server.rkt:52:0: core
>>> /home/turnin/plt-5.1.3/lib/racket/collects/web-server/servlet-dispatch.rkt:81:0:
>>> core
>>> /home/turnin/turnin/startup.rkt: [running body]
>>> ----------------------------------------------
>>> _________________________________________________
>>>  For list-related administrative tasks:
>>>  http://lists.racket-lang.org/listinfo/dev
>>>
>>
>>
>>
>> --
>> Jay McCarthy <jay at cs.byu.edu>
>> Assistant Professor / Brigham Young University
>> http://faculty.cs.byu.edu/~jay
>>
>> "The glory of God is Intelligence" - D&C 93
>>
>



-- 
Jay McCarthy <jay at cs.byu.edu>
Assistant Professor / Brigham Young University
http://faculty.cs.byu.edu/~jay

"The glory of God is Intelligence" - D&C 93



Posted on the dev mailing list.