<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><p>Hello. It is my first post.</p><p>Unbound is not detailed at all.<br>I want to install unbound.<br>However, when installing ldns the following log was output and it did not work.<br>------<br>Please upgrade OpenSSL to version> = 1.1.0 or rerun with - disable - dane - verify or - disable - dane - ta -usage<br>------<br>The following is the operation log.</p><p>What is the solution?<br>----------------------------------------------------<br># wget <a href="https://www.nlnetlabs.nl/downloads/ldns/ldns-1.7.0-rc3.tar.gz">https://www.nlnetlabs.nl/downloads/ldns/ldns-1.7.0-rc3.tar.gz</a><br># tar zxvf ldns-1.7.0-rc3.tar.gz<br># cd ldns-1.7.0-rc3/<br># ./configure<br>...<br>configure: error: OpenSSL does not support offline DANE verification (Needed for the DANE-TA usage type).  Please upgrade OpenSSL to version >= 1.1.0 or rerun with --disable-dane-verify or --disable-dane-ta-usage</p><p># yum remove openssl<br># wget <a href="https://www.openssl.org/source/openssl-1.1.1a.tar.gz">https://www.openssl.org/source/openssl-1.1.1a.tar.gz</a><br># tar zxvf openssl-1.1.1a.tar.gz<br># cd openssl-1.1.1a/<br># ./config<br>...<br>**********************************************************************<br>***                                                                ***<br>***   OpenSSL has been successfully configured                     ***<br>***                                                                ***<br>***   If you encounter a problem while building, please open an    ***<br>***   issue on GitHub <<a href="https://github.com/openssl/openssl/issues">https://github.com/openssl/openssl/issues</a>>  ***<br>***   and include the output from the following command:           ***<br>***                                                                ***<br>***       perl <a href="http://configdata.pm">configdata.pm</a> --dump                                ***<br>***                                                                ***<br>***   (If you are new to OpenSSL, you might want to consult the    ***<br>***   'Troubleshooting' section in the INSTALL file first)         ***<br>***                                                                ***<br>**********************************************************************<br># make<br># make install<br># cd ldns-1.7.0-rc3/<br># ./configure<br>...<br>configure: error: OpenSSL does not support offline DANE verification (Needed for the DANE-TA usage type).  Please upgrade OpenSSL to version >= 1.1.0 or rerun with --disable-dane-verify or --disable-dane-ta-usage<br># ./configure --disable-dane-verify<br># make<br>./libtool --tag=CC --quiet --mode=compile gcc -I. -I.  -DHAVE_CONFIG_H -DLDNS_TRUST_ANCHOR_FILE="\"/usr/local/etc/unbound/root.key\"" -Wunused-function -Wstrict-prototypes -Wwrite-strings -W -Wall -g -O2 -I/usr/local/include -c ./buffer.c -o buffer.lo<br>./libtool --tag=CC --quiet --mode=compile gcc -I. -I.  -DHAVE_CONFIG_H -DLDNS_TRUST_ANCHOR_FILE="\"/usr/local/etc/unbound/root.key\"" -Wunused-function -Wstrict-prototypes -Wwrite-strings -W -Wall -g -O2 -I/usr/local/include -c ./dane.c -o dane.lo<br>./libtool --tag=CC --quiet --mode=compile gcc -I. -I.  -DHAVE_CONFIG_H -DLDNS_TRUST_ANCHOR_FILE="\"/usr/local/etc/unbound/root.key\"" -Wunused-function -Wstrict-prototypes -Wwrite-strings -W -Wall -g -O2 -I/usr/local/include -c ./dname.c -o dname.lo<br>./libtool --tag=CC --quiet --mode=compile gcc -I. -I.  -DHAVE_CONFIG_H -DLDNS_TRUST_ANCHOR_FILE="\"/usr/local/etc/unbound/root.key\"" -Wunused-function -Wstrict-prototypes -Wwrite-strings -W -Wall -g -O2 -I/usr/local/include -c ./dnssec.c -o dnssec.lo<br>./dnssec.c: Within function 'ldns_convert_dsa_rrsig_asn12rdf':<br>./dnssec.c: 1761: 12: Error: indirect reference to an incomplete type pointer<br>   R = dsasig -> r;<br>             ^<br>./dnssec.c: 1762: 12: Error: indirect reference to an incomplete type pointer<br>   S = dsasig -> s;<br>             ^<br>./dnssec.c: Within function 'ldns_convert_dsa_rrsig_rdf 2 asn 1':<br>./dnssec.c: 1830: 8: Error: indirect reference to an incomplete type pointer<br>   dsasig -> r = R;<br>         ^<br>./dnssec.c: 1831: 8: Error: indirect reference to an incomplete type pointer<br>   dsasig -> s = S;<br>         ^<br>./dnssec.c: Within function 'ldns_convert_ecdsa_rrsig_asn1 len2rdf':<br>./dnssec.c: 1870: 15: Error: indirect reference to an incomplete type pointer<br>   r = ecdsa_sig-> r;<br>                ^<br>./dnssec.c: 1871: 15: Error: indirect reference to an incomplete type pointer<br>   s = ecdsa_sig -> s;<br>                ^<br>make: *** [dnssec.lo] Error 1<br>----------------------------------------------------</p><p><span>What is the solution?<br></span></p></div></div></div></div></div></div></div>