Problem installing Bro

Zeek
1

Hey there,

I want to install Bro on my raspberry pi but Ialways get an error during the make process. I've got problems with OpenSSL Version 1.1, which was "fixed" by installing libssl1.0-dev (like suggested in this link: https://bro-tracker.atlassian.net/browse/BIT-1775).

But now I get another error during the make process:

file_analysis/analyzer/x509/libplugin-Bro-X509.a(X509.cc.o): In function `sk_GENERAL_NAME_num':
/usr/include/openssl/x509v3.h:165: undefined reference to `OPENSSL_sk_num'
file_analysis/analyzer/x509/libplugin-Bro-X509.a(X509.cc.o): In function `sk_GENERAL_NAME_value':
/usr/include/openssl/x509v3.h:165: undefined reference to `OPENSSL_sk_value'
file_analysis/analyzer/x509/libplugin-Bro-X509.a(X509.cc.o): In function `file_analysis::X509::KeyCurve(evp_pkey_st*)':
/home/pi/bro/src/file_analysis/analyzer/x509/X509.cc:389: undefined reference to `EVP_PKEY_get0_EC_KEY'
file_analysis/analyzer/x509/libplugin-Bro-X509.a(X509.cc.o): In function `file_analysis::X509::KeyLength(evp_pkey_st*)':
/home/pi/bro/src/file_analysis/analyzer/x509/X509.cc:413: undefined reference to `EVP_PKEY_get0_RSA'
/home/pi/bro/src/file_analysis/analyzer/x509/X509.cc:413: undefined reference to `RSA_get0_key'
/home/pi/bro/src/file_analysis/analyzer/x509/X509.cc:429: undefined reference to `EVP_PKEY_get0_EC_KEY'
/home/pi/bro/src/file_analysis/analyzer/x509/X509.cc:418: undefined reference to `EVP_PKEY_get0_DSA'
/home/pi/bro/src/file_analysis/analyzer/x509/X509.cc:418: undefined reference to `DSA_get0_pqg'
file_analysis/analyzer/x509/libplugin-Bro-X509.a(X509.cc.o): In function `file_analysis::X509::ParseCertificate(file_analysis::X509Val*, char const*)':
/home/pi/bro/src/file_analysis/analyzer/x509/X509.cc:99: undefined reference to `X509_get_version'
/home/pi/bro/src/file_analysis/analyzer/x509/X509.cc:136: undefined reference to `X509_getm_notBefore'
/home/pi/bro/src/file_analysis/analyzer/x509/X509.cc:137: undefined reference to `X509_getm_notAfter'
/home/pi/bro/src/file_analysis/analyzer/x509/X509.cc:143: undefined reference to `X509_get_X509_PUBKEY'
/home/pi/bro/src/file_analysis/analyzer/x509/X509.cc:203: undefined reference to `X509_get_X509_PUBKEY'
/home/pi/bro/src/file_analysis/analyzer/x509/X509.cc:183: undefined reference to `EVP_PKEY_get0_RSA'
/home/pi/bro/src/file_analysis/analyzer/x509/X509.cc:183: undefined reference to `RSA_get0_key'
/home/pi/bro/src/file_analysis/analyzer/x509/X509.cc:158: undefined reference to `X509_get_X509_PUBKEY'
collect2: error: ld returned 1 exit status

Does anyone knows how to bypass this error?

I also got problems installing Bro on Arch Linux, same error with OpenSSL 1.1, but I dont know how to compile against OpenSSL 1.0, is there a solution too?

Thanks

Dane

2

Hey,

somehow I managed to fix the problem by reinstalling libssldev-1.0 and python-dev, after that I compiled the whole project under root privileges - it's working now.

Still I don't really know how I can bypass OpenSSL1.1 on my arch linux distro (Antergos). I wanted to fork the current Bro git-repository, write a new protocol analyzer and compile the project on my notebook rather than on the Pi (or using another distro). If someone has experience with Bro+Arch-Linux I would be glad to hear from you.

Dane