使用 rbenv 和 ruby-build 构建 ruby 失败并出现未定义的符号：SSLv2_method
Building ruby with rbenv and ruby-build fails with undefined symbol: SSLv2_method
我正在尝试在配备 ARMv7 处理器的 Synology DS215j 上安装 ruby 2.2.4 或 2.3.0。我用了 optware-ng to install gcc, make, openssl, openssl-dev and zlib. I installed rbenv (version 1.0.0-19-g29b4da7) and the ruby-build plugin according to the instructions in the README.
这些是随 optware-ng 安装的软件包及其版本
binutils - 2.25.1-1
gcc - 5.3.0-6
gconv-modules - 2.21-3
glibc-opt - 2.21-4
libc-dev - 2.21-1
libgmp - 6.0.0a-1
libmpc - 1.0.2-1
libmpfr - 3.1.3-1
libnsl - 2.21-3
libstdc++ - 6.0.21-6
make - 4.1-1
ncurses - 5.7-4
openssl - 1.0.2f-1
openssl-dev - 1.0.2f-1
readline - 6.1-2
ruby - 2.2.0-1
screen - 4.2.1-2
termcap - 1.3.1-3
zlib - 1.2.8-2
当我 运行 rbenv install 2.2.4 或 rbenv install 2.3.0 在这两种情况下构建失败并显示错误消息 "undefined symbol: SSLv2_method"。这是 2.2.4 版本的错误：
installing bundle gems: /var/services/homes/florian/.rbenv/versions/2.2.4/lib/ruby/gems/2.2.0 (build_info, cache, doc, extensions, gems, specifications)
/tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require': /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/.ext/armv7l-linux-eabihf/openssl.so: undefined symbol: SSLv2_method - /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/.ext/armv7l-linux-eabihf/openssl.so (LoadError)
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/.ext/common/openssl.rb:17:in `<top (required)>'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/security.rb:11:in `<top (required)>'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/package.rb:43:in `<top (required)>'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/dependency_installer.rb:3:in `<top (required)>'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems.rb:556:in `install'
from ./tool/rbinstall.rb:722:in `block (2 levels) in <main>'
from ./tool/rbinstall.rb:721:in `each'
from ./tool/rbinstall.rb:721:in `block in <main>'
from ./tool/rbinstall.rb:757:in `call'
from ./tool/rbinstall.rb:757:in `block in <main>'
from ./tool/rbinstall.rb:754:in `each'
from ./tool/rbinstall.rb:754:in `<main>'
uncommon.mk:246: recipe for target 'do-install-all' failed
make: *** [do-install-all] Error 1
这似乎与 rubygems 中的某些内容有关。
有趣的是，我尝试自己构建 ruby 的原因是，当我尝试安装 gems 时，Synology 6 returns 附带的 ruby 版本出现了类似的错误：
florian@synology:~/.rbenv/plugins$ /usr/bin/gem install rails
ERROR: Loading command: install (LoadError)
/usr/lib/ruby/2.3.0/armle-linux-gnu/openssl.so: undefined symbol: SSLv2_method - /usr/lib/ruby/2.3.0/armle-linux-gnu/openssl.so
ERROR: While executing gem ... (NoMethodError)
undefined method `invoke_with_build_args' for nil:NilClass
什么可能导致这些问题，我该如何解决？
经过多次尝试和大量搜索后，我发现了这个 ruby-build issue and reread the instructions in the ruby-build wiki，它建议其他平台安装 autoconf。我用 ipkg 安装了 automaker、autoconf 和 gdbm（我在 ruby-build 日志中发现了一些警告），但没有直接帮助。只有在我为 rbenv 添加前缀 RUBY_CONFIGURE_OPTS=--with-openssl-dir=/opt 之后它才起作用。
作为参考，这些是我用 ipkg 安装的包
autoconf - 2.69-1
automake - 1.15-3
binutils - 2.25.1-1
gcc - 5.3.0-6
gconv-modules - 2.21-3
gdbm - 1.8.3-4
glibc-opt - 2.21-4
libc-dev - 2.21-1
libgmp - 6.0.0a-1
libmpc - 1.0.2-1
libmpfr - 3.1.3-1
libnsl - 2.21-3
libstdc++ - 6.0.21-6
m4 - 1.4.17-1
make - 4.1-1
ncurses - 5.7-4
openssl - 1.0.2f-1
openssl-dev - 1.0.2f-1
readline - 6.1-2
ruby - 2.2.0-1
screen - 4.2.1-2
termcap - 1.3.1-3
zlib - 1.2.8-2
这是最终对我有用的 rbenv 命令
RUBY_CONFIGURE_OPTS=--with-openssl-dir=/opt rbenv install 2.3.0 -v
When I run rbenv install 2.2.4 or rbenv install 2.3.0 in both cases the build fails with the error message "undefined symbol: SSLv2_method"...
What could cause these issues ...
由于 CVE-2016-0800 (DROWN Attack)，SSLv2 设备已于 3 月从 OpenSSL 中完全删除。
由于您所经历的影响，我认为完全删除有点苛刻。应该有一个警告和过渡期。而且应该是10年前左右吧
我认为 SSLv2_method、SSLv2_client_method 和 SSLv2_server_method 应该设置适当的错误代码，例如 ERR_R_REMOVED_INSECURE 并返回 NULL，而不是因为 DROWN 而完全删除。 <openssl/opensslconf.h> 也应该无条件设置 OPENSSL_NO_SSL2。
OpenSSL 意识到他们破坏了 ABI 兼容性，并使用 Commit 133138569f37d149. The check-in provided the symbols SSLv2_method, SSLv2_client_method and SSLv2_server_method again, but they return NULL without setting an error code. They also do not define OPENSSL_NO_SSL2. Also see [openssl.org #4398] BUG / 1.0.2g breaks CURL extension 将符号添加回 1.0.2。
SSLv2 已经不安全 15 或 20 年了。 Ruby 之类的包不应该引用这些符号。您应该针对 Ruby 提交安全错误报告以引用该符号。
... and how could I resolve them?
要解决此问题，我认为您需要 (1) 等待 OpenSSL 1.0.2h，(2) 手动修补 OpenSSL 1.0.2g，或 (3) 删除所有 Ruby 对 SSLv2_method、SSLv2_client_method 和 SSLv2_server_method.
这里是你需要的补丁(2)，手动补丁OpenSSL 1.0.2g:
diff --git a/ssl/s2_meth.c b/ssl/s2_meth.c
index b312f17..d46e2f5 100644
--- a/ssl/s2_meth.c
+++ b/ssl/s2_meth.c
@@ -74,8 +74,8 @@ IMPLEMENT_ssl2_meth_func(SSLv2_method,
ssl2_accept, ssl2_connect, ssl2_get_method)
#else /* !OPENSSL_NO_SSL2 */
-# if PEDANTIC
-static void *dummy = &dummy;
-# endif
+SSL_METHOD *SSLv2_method(void) { return NULL; }
+SSL_METHOD *SSLv2_client_method(void) { return NULL; }
+SSL_METHOD *SSLv2_server_method(void) { return NULL; }
#endif
您还应该使用至少 no-ssl2 no-ssl3 no-comp 标志配置和编译 OpenSSL，因为它们是已知的安全问题。配置选项在 <openssl/opensslconf.h>.
中定义 OPENSSL_NO_SSL2、OPENSSL_NO_SSL3 和 OPENSSL_NO_COMP
我正在尝试在配备 ARMv7 处理器的 Synology DS215j 上安装 ruby 2.2.4 或 2.3.0。我用了 optware-ng to install gcc, make, openssl, openssl-dev and zlib. I installed rbenv (version 1.0.0-19-g29b4da7) and the ruby-build plugin according to the instructions in the README.
这些是随 optware-ng 安装的软件包及其版本
binutils - 2.25.1-1
gcc - 5.3.0-6
gconv-modules - 2.21-3
glibc-opt - 2.21-4
libc-dev - 2.21-1
libgmp - 6.0.0a-1
libmpc - 1.0.2-1
libmpfr - 3.1.3-1
libnsl - 2.21-3
libstdc++ - 6.0.21-6
make - 4.1-1
ncurses - 5.7-4
openssl - 1.0.2f-1
openssl-dev - 1.0.2f-1
readline - 6.1-2
ruby - 2.2.0-1
screen - 4.2.1-2
termcap - 1.3.1-3
zlib - 1.2.8-2
当我 运行 rbenv install 2.2.4 或 rbenv install 2.3.0 在这两种情况下构建失败并显示错误消息 "undefined symbol: SSLv2_method"。这是 2.2.4 版本的错误：
installing bundle gems: /var/services/homes/florian/.rbenv/versions/2.2.4/lib/ruby/gems/2.2.0 (build_info, cache, doc, extensions, gems, specifications)
/tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require': /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/.ext/armv7l-linux-eabihf/openssl.so: undefined symbol: SSLv2_method - /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/.ext/armv7l-linux-eabihf/openssl.so (LoadError)
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/.ext/common/openssl.rb:17:in `<top (required)>'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/security.rb:11:in `<top (required)>'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/package.rb:43:in `<top (required)>'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/dependency_installer.rb:3:in `<top (required)>'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems/core_ext/kernel_require.rb:54:in `require'
from /tmp/ruby-build.20160329115213.2672/ruby-2.2.4/lib/rubygems.rb:556:in `install'
from ./tool/rbinstall.rb:722:in `block (2 levels) in <main>'
from ./tool/rbinstall.rb:721:in `each'
from ./tool/rbinstall.rb:721:in `block in <main>'
from ./tool/rbinstall.rb:757:in `call'
from ./tool/rbinstall.rb:757:in `block in <main>'
from ./tool/rbinstall.rb:754:in `each'
from ./tool/rbinstall.rb:754:in `<main>'
uncommon.mk:246: recipe for target 'do-install-all' failed
make: *** [do-install-all] Error 1
这似乎与 rubygems 中的某些内容有关。
有趣的是，我尝试自己构建 ruby 的原因是，当我尝试安装 gems 时，Synology 6 returns 附带的 ruby 版本出现了类似的错误：
florian@synology:~/.rbenv/plugins$ /usr/bin/gem install rails
ERROR: Loading command: install (LoadError)
/usr/lib/ruby/2.3.0/armle-linux-gnu/openssl.so: undefined symbol: SSLv2_method - /usr/lib/ruby/2.3.0/armle-linux-gnu/openssl.so
ERROR: While executing gem ... (NoMethodError)
undefined method `invoke_with_build_args' for nil:NilClass
什么可能导致这些问题，我该如何解决？
经过多次尝试和大量搜索后，我发现了这个 ruby-build issue and reread the instructions in the ruby-build wiki，它建议其他平台安装 autoconf。我用 ipkg 安装了 automaker、autoconf 和 gdbm（我在 ruby-build 日志中发现了一些警告），但没有直接帮助。只有在我为 rbenv 添加前缀 RUBY_CONFIGURE_OPTS=--with-openssl-dir=/opt 之后它才起作用。
作为参考，这些是我用 ipkg 安装的包
autoconf - 2.69-1
automake - 1.15-3
binutils - 2.25.1-1
gcc - 5.3.0-6
gconv-modules - 2.21-3
gdbm - 1.8.3-4
glibc-opt - 2.21-4
libc-dev - 2.21-1
libgmp - 6.0.0a-1
libmpc - 1.0.2-1
libmpfr - 3.1.3-1
libnsl - 2.21-3
libstdc++ - 6.0.21-6
m4 - 1.4.17-1
make - 4.1-1
ncurses - 5.7-4
openssl - 1.0.2f-1
openssl-dev - 1.0.2f-1
readline - 6.1-2
ruby - 2.2.0-1
screen - 4.2.1-2
termcap - 1.3.1-3
zlib - 1.2.8-2
这是最终对我有用的 rbenv 命令
RUBY_CONFIGURE_OPTS=--with-openssl-dir=/opt rbenv install 2.3.0 -v
When I run rbenv install 2.2.4 or rbenv install 2.3.0 in both cases the build fails with the error message
"undefined symbol: SSLv2_method"...What could cause these issues ...
由于 CVE-2016-0800 (DROWN Attack)，SSLv2 设备已于 3 月从 OpenSSL 中完全删除。
由于您所经历的影响，我认为完全删除有点苛刻。应该有一个警告和过渡期。而且应该是10年前左右吧
我认为 SSLv2_method、SSLv2_client_method 和 SSLv2_server_method 应该设置适当的错误代码，例如 ERR_R_REMOVED_INSECURE 并返回 NULL，而不是因为 DROWN 而完全删除。 <openssl/opensslconf.h> 也应该无条件设置 OPENSSL_NO_SSL2。
OpenSSL 意识到他们破坏了 ABI 兼容性，并使用 Commit 133138569f37d149. The check-in provided the symbols SSLv2_method, SSLv2_client_method and SSLv2_server_method again, but they return NULL without setting an error code. They also do not define OPENSSL_NO_SSL2. Also see [openssl.org #4398] BUG / 1.0.2g breaks CURL extension 将符号添加回 1.0.2。
SSLv2 已经不安全 15 或 20 年了。 Ruby 之类的包不应该引用这些符号。您应该针对 Ruby 提交安全错误报告以引用该符号。
... and how could I resolve them?
要解决此问题，我认为您需要 (1) 等待 OpenSSL 1.0.2h，(2) 手动修补 OpenSSL 1.0.2g，或 (3) 删除所有 Ruby 对 SSLv2_method、SSLv2_client_method 和 SSLv2_server_method.
这里是你需要的补丁(2)，手动补丁OpenSSL 1.0.2g:
diff --git a/ssl/s2_meth.c b/ssl/s2_meth.c
index b312f17..d46e2f5 100644
--- a/ssl/s2_meth.c
+++ b/ssl/s2_meth.c
@@ -74,8 +74,8 @@ IMPLEMENT_ssl2_meth_func(SSLv2_method,
ssl2_accept, ssl2_connect, ssl2_get_method)
#else /* !OPENSSL_NO_SSL2 */
-# if PEDANTIC
-static void *dummy = &dummy;
-# endif
+SSL_METHOD *SSLv2_method(void) { return NULL; }
+SSL_METHOD *SSLv2_client_method(void) { return NULL; }
+SSL_METHOD *SSLv2_server_method(void) { return NULL; }
#endif
您还应该使用至少 no-ssl2 no-ssl3 no-comp 标志配置和编译 OpenSSL，因为它们是已知的安全问题。配置选项在 <openssl/opensslconf.h>.
OPENSSL_NO_SSL2、OPENSSL_NO_SSL3 和 OPENSSL_NO_COMP