php7.0 not playing nice with OpenSSL

[dabeegmon]

Greetings

First post and very much a noob for under the hood *nix so hopefully I don't break all the conventions on first time ( ;-) ).

I am trying to setup a Debian stretch (9.0) system to use as a horde groupware server.
Installed Postgresql 9.6
apache 2.4.25
Php 7.1.8
OpenSSL 1.1.0f

running $ ./;configure (with a lot of stuff after that (sorry 2 different machines and I'm not sure on an easy way of transferring))

under configuring extensions
checking for for OpenSSL support. . . yes (!)

I followed this with $ make &&make install
this doesn't' seem to throw any error messages (that I can tell)

yet when I use the command
$ php -r 'phpinfo();' | grep openssl
OpenSSL support=> disabled (install ext/openssl)

search engine flogging has not resulted in anything that results in this working.

(This process is being followed because when the command
$ pear remote-list -c horde

is used the result is

Connection to 'ssl://pear.horde.org:443' failed: Unable to find the socket transport "ssl" - did you forget to enable it when you configured PHP? )

I'm quite lost and am hoping that someone will point me to what needs doing to affect this horde groupware installation.

TIA!!

Dee

[NogDog]

Since no one else has responded, I'll just make sure you've looked at http://php.net/manual/en/openssl.setup.php ?

Also, I'm not familiar with Debian specifics, but are you using apt-get to do installs and handling dependencies? That might be easier than trying to download and configure/compile everything yourself?

[dabeegmon]

NogDog;11063205 wrote:

Since no one else has responded, I'll just make sure you've looked at http://php.net/manual/en/openssl.setup.php ?

Also, I'm not familiar with Debian specifics, but are you using apt-get to do installs and handling dependencies? That might be easier than trying to download and configure/compile everything yourself?

Thank you for your response!

(In reverse order)
When possible I use apt (newest way - - purportively better even than aptitude) to do installs. Sometimes the package is a .tar file and then - - - -well - - - - one has to configure stuff.

I have the components installed (latest possible).

Tried a number of different ways to invoke this openssl support in php.
--with-openssl[=DIR].
the result is configure: error: invalid package name:openssl[

when I tried it as
--with-openssl=/etc/ssl (giving the location of the openssl.cnf file)
the result is configure: error: Cannot find OpenSSL's <evp.h>

the best result I'm getting so far is from using
--with-openssl=shared
but that takes me to that OpenSSL support => disabled (install ext/openssl)

which is where i'm bogged down at.
I can't find what there is to do to 'enable' support.

Do you know how I would do that?

Dee

[NogDog]

Does this comment help any, from http://php.net/manual/en/openssl.installation.php#115909 ?

I just wanted to point out that when you compile with openssl and you're specifying a directory, the acinclude.m4 and aclocal.m4 use that directory as such:

{your directory}/includes/openssl/{headerfile}

That being said, you want to specify the directory that the includes directory is in, not the specific directory with the header files.

THIS IS WRONG --with-openssl=/usr/local/includes/openssl
THIS IS RIGHT --with-openssl=/usr/local

[NogDog]

PS: Since the directory argument is optional (based on the square brackets), you could try it without any directory specification to see if it's already in your search path. 🙂

[dabeegmon]

NogDog;11063225 wrote:

Does this comment help any, from http://php.net/manual/en/openssl.installation.php#115909 ?

I tried using
-with-openssl=/etc/

result is configure: error: Cannot find OpenSSL's <evp.h>

I don't understand what that means but I'm thinking that's not as good as the previous 'not installed'

perhaps I'm missing something else?

[dabeegmon]

NogDog;11063227 wrote:

PS: Since the directory argument is optional (based on the square brackets), you could try it without any directory specification to see if it's already in your search path. 🙂

Reading through the output of the command (very carefully)
$ ./configure blah blah --with-openssl

the checking for the OpenSSL support . . . yes (its back)

lower

checking for openssl dependencies . . . no

checking OpenSSL dir for SNMP . . . no

(do these have any bearing on my problem? (following the ./configure (followed by a plethora of stuff) and then later with make && make install the OpenSSL support is still listed as disabled).

Thank you for your suggestions!

[dalecosp]

dabeegmon;11063229 wrote:

I tried using
-with-openssl=/etc/

result is configure: error: Cannot find OpenSSL's <evp.h>

I don't understand what that means but I'm thinking that's not as good as the previous 'not installed'

perhaps I'm missing something else?

Hi! 🙂

That means it can't find a header file (this is a file in C that is part of the OpenSSL system).

That gives us a clue that we're not looking for a *.cnf file. It's not going to be in /etc/, or /usr/etc or even /usr/local/etc. Please try using NogDog's suggestion exactly.

On RedHat the headers (*.h) for OpenSSL are in /usr/include/openssl. So on that system I'd try using --with-openssl=/usr or --with-openssl=/usr/includes ... one of those should allow it to compile. Take a look on your Debian box and see if that's the same path.

Here's a listing of a RedHat's /usr/include/openssl:

aes.h       buffer.h    conf.h     dtls1.h   err.h        kssl.h   objects.h           pem2.h       rc2.h        srp.h    store.h      ui.h
asn1.h      camellia.h  crypto.h   ebcdic.h  evp.h        lhash.h  obj_mac.h           pem.h        rc4.h        srtp.h   symhacks.h   whrlpool.h
asn1_mac.h  cast.h      des.h      ecdh.h    fips.h       md2.h    ocsp.h              pkcs12.h     ripemd.h     ssl23.h  tls1.h       x509.h
asn1t.h     cmac.h      des_old.h  ecdsa.h   fips_rand.h  md4.h    opensslconf.h       pkcs7.h      rsa.h        ssl2.h   tmdiff.h     x509v3.h
bio.h       cms.h       dh.h       ec.h      hmac.h       md5.h    opensslconf-i386.h  pq_compat.h  safestack.h  ssl3.h   ts.h         x509_vfy.h
blowfish.h  comp.h      dsa.h      engine.h  idea.h       mdc2.h   opensslv.h          pqueue.h     seed.h       ssl.h    txt_db.h
bn.h        conf_api.h  dso.h      e_os2.h   krb5_asn.h   modes.h  ossl_typ.h          rand.h       sha.h        stack.h  ui_compat.h

(/me waves hands like a Jedi ...) These ARE the files you're looking for ... 🙂