[Bro] SSL for FreeBSD/bro

scott campbell scampbell at lbl.gov
Tue Jul 26 10:24:22 PDT 2005


Mike Muratet wrote:
> Greetings
>
> In an effort to get a working bro+broccoli installation, I have
> installed FreeBSD v5.4 on a local server.  I also installed bro and
> broccoli. I started bro with ./bro -i xl0 -f tcp broconn.bro. (I found
> xl0 with ifconfig and I'm guessing it's the same thing as eth0.) I tried
> to run the broconn program, but it has a dependancy on libssl.so that
> goes wanting. I'm not trying to do secure communication, it's been tough
> enough without it ;-) but I'm guessing it still wants the library.
>
> I don't see anything relevant on the FreeBSD distribution disks with
> 'ssl' in the name. Can you point me to a source?
>
> Thanks
>
> Mike
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
It is looking for the openssl library.  Try running ldd on the broconn
binary:

> [scottc at 8-0-46-6a-dd-e3 test]$ ldd ./broconn
>         libssl.so.4 => /lib/libssl.so.4 (0x00937000)
>         libcrypto.so.4 => /lib/libcrypto.so.4 (0x00b2d000)
>         libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00823000)
>         libc.so.6 => /lib/tls/libc.so.6 (0x00111000)
>         libgssapi_krb5.so.2 => /usr/kerberos/lib/libgssapi_krb5.so.2 (0x00f97000)
>         libkrb5.so.3 => /usr/kerberos/lib/libkrb5.so.3 (0x0044c000)
>         libcom_err.so.3 => /usr/kerberos/lib/libcom_err.so.3 (0x004c1000)
>         libk5crypto.so.3 => /usr/kerberos/lib/libk5crypto.so.3 (0x002ef000)
>         libresolv.so.2 => /lib/libresolv.so.2 (0x003f0000)
>         libdl.so.2 => /lib/libdl.so.2 (0x00249000)
>         libz.so.1 => /usr/lib/libz.so.1 (0x008be000)
>         /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x005fa000)


now make sure that the libssl.so that it wants is actually there.  The
numbered version of the library (in this case 4) should be a symbolic
link to the libssl.so that the application is looking for.

There is a configure time option for Broccoli to set openssl location
info (try ./configure --help).  You may also want to make sure that the
path to the library is in your LD_LIBRARY_PATH environmental variable.

good luck!

scott
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20050726/9db72609/attachment.bin 


More information about the Bro mailing list