# X509 Plugin does not support OpenSSL 1.1 **URL:** \ **Category:** Zeek\ **Created:** [July 11, 2017, 9:52am UTC](https://community.zeek.org/t/x509-plugin-does-not-support-openssl-1-1/4937 "2017-07-11T09:52:41Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Shirisha\_Kasarla](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@Shirisha\_Kasarla](https://community.zeek.org/u/Shirisha_Kasarla)\ **Post date:** [July 11, 2017, 9:52am UTC](https://community.zeek.org/t/x509-plugin-does-not-support-openssl-1-1/4937/1 "2017-07-11T09:52:41Z")
can anyone help with this issue openssl should be downgraded to 1.0.0 for compiling bro openssl 1.1 is not compatible with bro compilation OS- ubuntu 16.04 The following error is occurred In file included from /home/shrisha/bro-2.5/src/file\_analysis/analyzer/x509/X509.h:9:0,                  from /home/shrisha/bro-2.5/src/file\_analysis/analyzer/x509/X509.cc:5: /home/shrisha/bro-2.5/src/file\_analysis/../File.h:17:16: note: forward declaration of ‘EVP\_PKEY {aka struct evp\_pkey\_st}’ typedef struct evp\_pkey\_st EVP\_PKEY;                 ^ /home/shrisha/bro-2.5/src/file\_analysis/analyzer/x509/X509.cc:479:25: error: invalid use of incomplete type ‘EVP\_PKEY {aka struct evp\_pkey\_st}’    return BN\_num\_bits(key-\>pkey.rsa-\>n);                          ^ In file included from /home/shrisha/bro-2.5/src/file\_analysis/analyzer/x509/X509.h:9:0,                  from /home/shrisha/bro-2.5/src/file\_analysis/analyzer/x509/X509.cc:5: /home/shrisha/bro-2.5/src/file\_analysis/../File.h:17:16: note: forward declaration of ‘EVP\_PKEY {aka struct evp\_pkey\_st}’ typedef struct evp\_pkey\_st EVP\_PKEY;                 ^ /home/shrisha/bro-2.5/src/file\_analysis/analyzer/x509/X509.cc:482:25: error: invalid use of incomplete type ‘EVP\_PKEY {aka struct evp\_pkey\_st}’    return BN\_num\_bits(key-\>pkey.dsa-\>p);                          ^ In file included from /home/shrisha/bro-2.5/src/file\_analysis/analyzer/x509/X509.h:9:0,                  from /home/shrisha/bro-2.5/src/file\_analysis/analyzer/x509/X509.cc:5: /home/shrisha/bro-2.5/src/file\_analysis/../File.h:17:16: note: forward declaration of ‘EVP\_PKEY {aka struct evp\_pkey\_st}’ typedef struct evp\_pkey\_st EVP\_PKEY;                 ^ /home/shrisha/bro-2.5/src/file\_analysis/analyzer/x509/X509.cc:492:48: error: invalid use of incomplete type ‘EVP\_PKEY {aka struct evp\_pkey\_st}’    const EC\_GROUP \*group = EC\_KEY\_get0\_group(key-\>pkey.ec);                                                 ^ In file included from /home/shrisha/bro-2.5/src/file\_analysis/analyzer/x509/X509.h:9:0,                  from /home/shrisha/bro-2.5/src/file\_analysis/analyzer/x509/X509.cc:5: /home/shrisha/bro-2.5/src/file\_analysis/../File.h:17:16: note: forward declaration of ‘EVP\_PKEY {aka struct evp\_pkey\_st}’ typedef struct evp\_pkey\_st EVP\_PKEY;                 ^ src/file\_analysis/analyzer/x509/CMakeFiles/plugin-Bro-X509.dir/build.make:119: recipe for target 'src/file\_analysis/analyzer/x509/CMakeFiles/plugin-Bro-X509.dir/X509.cc.o' failed make[3]: \*\*\* [src/file\_analysis/analyzer/x509/CMakeFiles/plugin-Bro-X509.dir/X509.cc.o] Error 1 make[3]: Leaving directory '/home/shrisha/bro-2.5/build' CMakeFiles/Makefile2:9455: recipe for target 'src/file\_analysis/analyzer/x509/CMakeFiles/plugin-Bro-X509.dir/all' failed make[2]: \*\*\* [src/file\_analysis/analyzer/x509/CMakeFiles/plugin-Bro-X509.dir/all] Error 2 make[2]: Leaving directory '/home/shrisha/bro-2.5/build' Makefile:138: recipe for target 'all' failed make[1]: \*\*\* [all] Error 2 make[1]: Leaving directory '/home/shrisha/bro-2.5/build' Makefile:15: recipe for target 'all' failed make: \*\*\* [all] Error 2 shrisha@cdesktop:~/bro-2.5$ with Regards kasarla shirisha ---
**Author:** ![johanna](https://avatars.discourse-cdn.com/v4/letter/j/50afbb/32.png) [@johanna](https://community.zeek.org/u/johanna)\ **Post date:** [July 21, 2017, 5:06am UTC](https://community.zeek.org/t/x509-plugin-does-not-support-openssl-1-1/4937/2 "2017-07-21T05:06:20Z")
Hi, in case you have not solved it yourself so far - you are right, OpenSSL 1.1 is not yet supported (it is on the list). However I am a bit stumped by the fact that you encounter this on Ubuntu 16.04; 16.04 shups with OpenSSL 1.0.2 - so you should not have a problem there. Is there any chance that you compiled OpenSSL 1.1 yourself and have that laying around somewhere? Johanna ---
**Author:** ![Shirisha\_Kasarla](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@Shirisha\_Kasarla](https://community.zeek.org/u/Shirisha_Kasarla)\ **Post date:** [July 21, 2017, 7:30am UTC](https://community.zeek.org/t/x509-plugin-does-not-support-openssl-1-1/4937/3 "2017-07-21T07:30:43Z")
Hi, I have just checked the version of openssl ![Selection_021.png](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/1161edd0ebd3e374099ab18f0372c9a3679427d3.png) ---
**Author:** ![johanna](https://avatars.discourse-cdn.com/v4/letter/j/50afbb/32.png) [@johanna](https://community.zeek.org/u/johanna)\ **Post date:** [July 24, 2017, 4:50am UTC](https://community.zeek.org/t/x509-plugin-does-not-support-openssl-1-1/4937/4 "2017-07-24T04:50:30Z")
Hi Shirisha, it should actually compile cleanly against that version of OpenSSL. Which version of openssl does the output of configure find, and what paths does it show? Johanna ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:45pm UTC](https://community.zeek.org/t/x509-plugin-does-not-support-openssl-1-1/4937/5 "2022-05-06T15:45:07Z")