How do I install unbound?

[水上ナツ]

Hello. It is my first post.

Unbound is not detailed at all.
I want to install unbound.
However, when installing ldns the following log was output and it did not
work.
------
Please upgrade OpenSSL to version> = 1.1.0 or rerun with - disable - dane -
verify or - disable - dane - ta -usage
------
The following is the operation log.

What is the solution?
----------------------------------------------------
# wget https://www.nlnetlabs.nl/downloads/ldns/ldns-1.7.0-rc3.tar.gz
# tar zxvf ldns-1.7.0-rc3.tar.gz
# cd ldns-1.7.0-rc3/
# ./configure
...
configure: error: OpenSSL does not support offline DANE verification
(Needed for the DANE-TA usage type).  Please upgrade OpenSSL to version >=
1.1.0 or rerun with --disable-dane-verify or --disable-dane-ta-usage

# yum remove openssl
# wget https://www.openssl.org/source/openssl-1.1.1a.tar.gz
# tar zxvf openssl-1.1.1a.tar.gz
# cd openssl-1.1.1a/
# ./config
...
**********************************************************************
***                                                                ***
***   OpenSSL has been successfully configured                     ***
***                                                                ***
***   If you encounter a problem while building, please open an    ***
***   issue on GitHub <https://github.com/openssl/openssl/issues>  ***
***   and include the output from the following command:           ***
***                                                                ***
***       perl configdata.pm --dump                                ***
***                                                                ***
***   (If you are new to OpenSSL, you might want to consult the    ***
***   'Troubleshooting' section in the INSTALL file first)         ***
***                                                                ***
**********************************************************************
# make
# make install
# cd ldns-1.7.0-rc3/
# ./configure
...
configure: error: OpenSSL does not support offline DANE verification
(Needed for the DANE-TA usage type).  Please upgrade OpenSSL to version >=
1.1.0 or rerun with --disable-dane-verify or --disable-dane-ta-usage
# ./configure --disable-dane-verify
# make
./libtool --tag=CC --quiet --mode=compile gcc -I. -I.  -DHAVE_CONFIG_H
-DLDNS_TRUST_ANCHOR_FILE="\"/usr/local/etc/unbound/root.key\""
-Wunused-function -Wstrict-prototypes -Wwrite-strings -W -Wall -g -O2
-I/usr/local/include -c ./buffer.c -o buffer.lo
./libtool --tag=CC --quiet --mode=compile gcc -I. -I.  -DHAVE_CONFIG_H
-DLDNS_TRUST_ANCHOR_FILE="\"/usr/local/etc/unbound/root.key\""
-Wunused-function -Wstrict-prototypes -Wwrite-strings -W -Wall -g -O2
-I/usr/local/include -c ./dane.c -o dane.lo
./libtool --tag=CC --quiet --mode=compile gcc -I. -I.  -DHAVE_CONFIG_H
-DLDNS_TRUST_ANCHOR_FILE="\"/usr/local/etc/unbound/root.key\""
-Wunused-function -Wstrict-prototypes -Wwrite-strings -W -Wall -g -O2
-I/usr/local/include -c ./dname.c -o dname.lo
./libtool --tag=CC --quiet --mode=compile gcc -I. -I.  -DHAVE_CONFIG_H
-DLDNS_TRUST_ANCHOR_FILE="\"/usr/local/etc/unbound/root.key\""
-Wunused-function -Wstrict-prototypes -Wwrite-strings -W -Wall -g -O2
-I/usr/local/include -c ./dnssec.c -o dnssec.lo
./dnssec.c: Within function 'ldns_convert_dsa_rrsig_asn12rdf':
./dnssec.c: 1761: 12: Error: indirect reference to an incomplete type
pointer
   R = dsasig -> r;
             ^
./dnssec.c: 1762: 12: Error: indirect reference to an incomplete type
pointer
   S = dsasig -> s;
             ^
./dnssec.c: Within function 'ldns_convert_dsa_rrsig_rdf 2 asn 1':
./dnssec.c: 1830: 8: Error: indirect reference to an incomplete type pointer
   dsasig -> r = R;
         ^
./dnssec.c: 1831: 8: Error: indirect reference to an incomplete type pointer
   dsasig -> s = S;
         ^
./dnssec.c: Within function 'ldns_convert_ecdsa_rrsig_asn1 len2rdf':
./dnssec.c: 1870: 15: Error: indirect reference to an incomplete type
pointer
   r = ecdsa_sig-> r;
                ^
./dnssec.c: 1871: 15: Error: indirect reference to an incomplete type
pointer
   s = ecdsa_sig -> s;
                ^
make: *** [dnssec.lo] Error 1
----------------------------------------------------

What is the solution?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20190129/fcb9dcb0/attachment.htm>