OpenSSL headers do not match your library [Solved]

[helio]

For some reason, during emerge net-misc/openssh I am getting the following error message

Code: Select all

checking OpenSSL header version... 30000100 (OpenSSL 3.0.16 11 Feb 2025)
checking for OpenSSL_version... yes
checking for OpenSSL_version_num... yes
checking OpenSSL library version... 30400020 (OpenSSL 3.4.2 1 Jul 2025)
checking whether OpenSSL's headers match the library... no
Configure: error: Your OpenSSL headers do not match your library.

which fails the emerge. Any suggestions on fixing this problem are appreciated.

[Administrator edit: added [code] tags to preserve output layout. -Hu]

[grknight]

Ensure that there are no OpenSSL headers in /usr/local which is a common error point.

Edit: In short, the command find /usr -name opensslv.h should only return one result.

[helio]

Ensure that there are no OpenSSL headers in /usr/local which is a common error point.

Edit: In short, the command find /usr -name opensslv.h should only return one result.

Thanks. Here are opensslv.h locations under /usr

/usr/include/opensslv.h
/usr/include/openssl/opensslv.h
/usr/local/ssl/include/opensslv.h
/usr/local/ssl/openssl-3.0.16/include/openssl/opensslv.h

But shouldn't the emerge operation automatically update/upgrade the header file to the new version to be emerged/installed?

[grknight]

Thanks. Here are opensslv.h locations under /usr

/usr/include/opensslv.h
/usr/include/openssl/opensslv.h
/usr/local/ssl/include/opensslv.h
/usr/local/ssl/openssl-3.0.16/include/openssl/opensslv.h

But shouldn't the emerge operation automatically update/upgrade the header file to the new version to be emerged/installed?

Only /usr/include/openssl/opensslv.h is likely valid. Emerge will only update what it has control over, not the entire system.

The headers in /usr/local/ssl will cause problems with programs building for OpenSSL but using the system library since the versions are different.
You should remove any /usr/local/ssl/ files to prevent issues.

[helio]

Thanks. Yes, indeed the versions of openssl, both header and binary files under /usr and /usr/local are different. I don't understand how or why this happened, i.e. why does emerge install openssl library under /usr but try to look for openssl under /usr/local when emerging openssh. Seems a lot hassles to manually maintain the consistency. Is there any way to automatically keep them same or consistent? Look forward to your insights.

[hdcg]

The /usr/local/openssl files are quite sure not installed by emerge. Try

Code: Select all

equery b /usr/local/include/openssl/opensslv.h

to check.
Did you install some software manually?

[helio]

Thanks. Still not sure how the local version of openssl was installed. Now that it is quite sure not installed by emerge, I linked the local version to the /usr version, and the emerge openssh has been able to proceed. Thanks all again.

[freke]

I would remove the /usr/local version(s) - especially if you don't know how they ended up there - nothing in Gentoo is supposed to place them there.

[helio]

I would remove the /usr/local version(s) - especially if you don't know how they ended up there - nothing in Gentoo is supposed to place them there.

Good suggestion. Removed the links. Thanks.