Forum OpenACS Development: nsssl with local copy of ssl libraries
It has openssl compiled locally at /usr/local/ssl as well.
I modified the makefile to compile nsssl with the /usr/local/ssl version but its still linked to the /lib64/libssl.so so it doesn't actually work.
Here is my modified Makefile.
NAVISERVER = /usr/local/ns
# Module name
MOD = nsssl.so
MODLIBS = -L/usr/local/ssl/lib -Wl,-rpath,/usr/local/ssl/lib
# Objects to build.
OBJS = nsssl.o
CFLAGS = -I/usr/local/ssl/include
MODLIBS += -lssl -lcrypto
openssl dhparam -C -2 -noout 512 >> dhparams.h
openssl dhparam -C -2 -noout 1024 >> dhparams.h
From the experience with HeartBleed, i would NOT recommend to link against a local version of OpenSSL, but to use a distribution maintained version. The update frequency of OpenSSL is quite high. Keeping a locally maintained copy of OpenSSL up-to-date is constant work, keeping it not up-to-date is constant danger.