在CentOS 7上编译PHP时，如何修复OpenSSL错误“libssl.so.10，lib64 / libldap.so所需，可能与libssl.so.1.1冲突”？

Question

我开始时完全安装了CentOS 7，没有安装任何东西。

刚开始，我有yum installed这些RPM：

• 使
• 的mlocate
• PCRE-devel的
• 外籍-devel的
• 热情释放
• 的libxml2-devel的
• 百胜-utils的
• wget的
• 我来了
• 猞猁
• libnghttp2-devel的
• libnghttp2
• nghttp2
• 的libpng-devel的
• GCC *
• Perl的模块 - 负载条件
• Perl的核心
• 卷曲devel的
• OpenSSL的-devel的
• MariaDB的-devel的
• 的unixODBC-devel的
• bzip2的-devel的
• 的libjpeg-devel的
• libXpm-devel的
• FreeType的-devel的
• GMP-devel的
• libmcrypt-devel的
• 的httpd-devel的

**解决方案编辑**添加了以下RPMS：

• 赛勒斯-SASL
• 赛勒斯-SASL-devel的

我从源代码编译了OpenSSL 1.1.1，cURL 7.62.0和HTTPD 2.4.38，并带有以下各项命令：

OpenSSL

$ ./config \
  --prefix=/opt/openssl \
  -Wl,-rpath=/opt/openssl/bin \
  --openssldir=/opt/openssl \
  shared \
  zlib
$ make clean
$ make
$ make install

$ openssl version
OpenSSL 1.1.1  11 Sep 2018

cURL

$ env PKG_CONFIG_PATH=/opt/openssl/lib/pkgconfig ./configure \
  --prefix=/opt/curl \
  --with-ssl \
  LDFLAGS="-L/opt/openssl/lib -Wl,-rpath,/opt/openssl/lib"
  CPPFLAGS="-I/opt/openssl/include -Wl,-rpath,/opt/openssl/include"
make clean
make
make install

$ curl -V
curl 7.62.0 (x86_64-pc-linux-gnu) libcurl/7.62.0 OpenSSL/1.1.1 zlib/1.2.7 nghttp2/1.31.1
Release-Date: 2018-10-31
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp smb smbs smtp smtps telnet tftp
Features: AsynchDNS IPv6 Largefile NTLM NTLM_WB SSL libz TLS-SRP HTTP2 UnixSockets HTTPS-proxy

HTTPD

$ env PKG_CONFIG_PATH=/opt/openssl/lib/pkgconfig ./configure \
  --prefix=/opt/httpd \
  --with-included-apr \
  --enable-so \
  --with-port=80 \
  --enable-http2 \
  --enable-ssl \
  --enable-ssl=shared \
  --with-ssl=/opt/openssl \
  --with-curl=/opt/curl \
  LDFLAG="-L/opt/openssl/lib -Wl,-rpath,/opt/openssl/lib -L/opt/curl/lib -Wl,-rpath,/opt/curl/lib" \
  CPPFLAGS="-I/opt/openssl/include -Wl,-rpath,/opt/openssl/include -I/opt/curl/include -Wl,-rpath,/opt/curl/include"
$ make clean
$ make
$ make install

$ httpd -v
Server version: Apache/2.4.38 (Unix)
Server built:   Mar 13 2019 15:14:01

到目前为止，一切正常。我可以通过远程计算机上的浏览器加载HTML页面。 （打开80后）

这是我开始遇到问题的地方。

** OPENLDAP编辑（通过编译开放LDAP解决）**

$ env PKG_CONFIG_PATH=/opt/openssl/lib/pkgconfig ./configure \
  --prefix=/opt/openldap \
  --with-tls \
  LDFLAGS="-L/opt/openssl/lib -Wl,-rpath,/opt/openssl/lib" \
  CPPFLAGS="-I/opt/openssl/include -Wl,-rpath,/opt/openssl/include"
$ make clean
$ make depend
$ make
$ make install

PHP

$ env PKG_CONFIG_PATH=/opt/openssl/lib/pkgconfig ./configure \
  --with-apxs2=/opt/httpd/bin/apxs \
  --prefix=/opt/php \
  --with-mysqli \
  --with-pdo-mysql \
  --enable-pdo \
  --enable-ftp \
  --with-zlib \
  --enable-zip \
  --enable-mbstring \
  --with-curl=/opt/curl \
  --with-openssl \
  --with-openssl-dir=/opt/openssl  \
  --enable-exif \
  --with-gd \
  --enable-shared \
  --enable-cgi \
  --with-ldap=/opt/openldap \
  LDFLAGS="-Wl,-rpath,/opt/openldap/lib -L/opt/openldap/lib -Wl,-rpath,/opt/openssl/lib -L/opt/openssl/lib" \
  CPPFLAGS="-Wl,-rpath,/opt/openldap/include -I/opt/openldap/include -Wl,-rpath,/opt/openssl/include -I/opt/openssl/include"
$ make clean
$ make
$ make install

犯错误

运行make clean;make后，我收到此错误：

  /usr/bin/ld: warning: libssl.so.10, needed by /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libldap.so, may conflict with libssl.so.1.1
  /usr/bin/ld: warning: libssl.so.10, needed by /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libldap.so, may conflict with libssl.so.1.1
  /usr/bin/ld: warning: libssl.so.10, needed by /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libldap.so, may conflict with libssl.so.1.1
  /usr/bin/ld: warning: libssl.so.10, needed by /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libldap.so, may conflict with libssl.so.1.1
  /usr/bin/ld: ext/openssl/.libs/xp_ssl.o: undefined reference to symbol 'SSLv3_server_method@@libssl.so.10'
  //usr/lib64/libssl.so.10: error adding symbols: DSO missing from command line
  collect2: error: ld returned 1 exit status
  make: *** [sapi/cli/php] Error 1

制作测试日志

make test命令返回相同的错误。

/usr/bin/ld: warning: libssl.so.10, needed by /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libldap.so, may conflict with libssl.so.1.1
/usr/bin/ld: warning: libssl.so.10, needed by /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libldap.so, may conflict with libssl.so.1.1
/usr/bin/ld: warning: libssl.so.10, needed by /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libldap.so, may conflict with libssl.so.1.1
/usr/bin/ld: warning: libssl.so.10, needed by /usr/lib/gcc/x86_64-redhat-linux/4.8.5/../../../../lib64/libldap.so, may conflict with libssl.so.1.1
/usr/bin/ld: ext/openssl/.libs/xp_ssl.o: undefined reference to symbol 'SSLv3_server_method@@libssl.so.10'
//usr/lib64/libssl.so.10: error adding symbols: DSO missing from command line
collect2: error: ld returned 1 exit status
make: *** [sapi/cli/php] Error 1

Answer 1

要停止此警告，请使用系统SSL-Library，不要自行编译。

或者你必须构建你正在使用的所有库，你自己链接到OpenSSL（在你的情况下是libldap）