Does not compile

[SLukasDE]

Does not compile

[jmccl]

Thanks for putting the issue in.

I spent some time looking at this and my current inclination is to close it as “won’t fix.” I’ll explain what’s going on.

The code needs a compiler which supports C++14, which gcc 7 forward does, so that’s not an issue if you use that compiler rather than the OS default (As an aside, you wouldn’t want to remove the ‘s’ in ‘...’s for the string literals. That will change it from string concatenation to pointer addition and although it may compile it will crash when it runs.)

Assuming gcc 7+ is in use all the errors are due to CentOS 7 using OpenSSL 1.0.2k. OpenSSL 1.0 has been unsupported by the openssl team for a couple of years. RedHat supports it for the purpose of supporting the maintenance window for RHEL/CentOS 7.

Nonetheless, I was able to make it compile pretty easily with the installed 1.0 version (with some use of ‘ifdef’) but running it results in OpenSSL errors. I’m not sure what’s going on but some quick googling resulted in this thread and this link, which may be the source of the errors. I haven’t dug in more once I found the issue in the links.

reddit thread
blog post

My impression is any attempt to make Let’s Encrypt work with OpenSSL 1.0 is not going to be trivial, either with my code or potentially anything else.

If you disagree let me know why, but at the moment I’m taking the view that any distribution using OpenSSL 1.0 has been eclipsed by events.

[SLukasDE]

Thank you so much for checking this issue so fast. Maybe I mixed and increased the problem by removing the string literals and trying to use a newer gcc version after that.
I will try it again (on weekend) by using your original source code and directly a new GCC version.
For now I would say let's close the ticket. You spent some time on trying to reproduce the error but this head-code compiles on your system. So first I will spend some time on my site. I would be really very cool if it works, because I could use it so much in my project.
Thanks so far.

[jmccl]

If you really want to make this work on CentOS I'd probably do a openssl 1.1 local build and use that for this project.

Good luck.

[SLukasDE]

I was able to build it on CentOS7. OpenSSL 1.1 was really needed. There is a RPM available for RHEL7/CentOS7 (yum install openssl11 / openssl11-devel), but without a cmake 'find' module for this version. So there was some handwork necessary, but now there is a working exectuable without changing anything at your code.
Thank you so much again.

[jmccl]

That's great. I'm glad you were able get it working. Thanks for letting me know.