On 6/22/18 7:44 AM, Willy Tarreau wrote: > Did you try to disable or adjust the PCRE flags as I indicated in > previous e-mail to see if it's the side effect ?
I have _now_ ... needed a few minutes. > One possible cause could be pcre-config reporting -I/usr and causing > -I/usr/inc to be included before the SSL_INC path. A quick test could consist > in building without PCRE to validate or invalidate that assumption. If it > fixes it, please retry with "PCREDIR=" so that it doesn't try to set > PCRE_INC/PCRE_LIB. There's certainly a pcre-related 'oddity' ... regardless of build with, or without, PCRE, it's linking *something* with pcre1 lib. Notice ... Built WITH pcre2's libs spec'd make V=1 \ TARGET=linux2628 \ USE_SYSTEMD=1 \ USE_PCRE2=1 \ USE_PCRE2_JIT=1 \ USE_OPENSSL=1 \ SSL_INC=" -I/usr/local/openssl11/include" \ SSL_LIB=" -L/usr/local/openssl11/lib64 -Wl,-rpath,/usr/local/openssl11/lib64" \ PCRE2_INC=" -I/usr/local/include" \ PCRE2_LIB=" -L/usr/local/lib64 -Wl,-rpath,/usr/local/lib64" \ ADDLIB="-ldl -lssl -lcrypto -lpcre2-posix -lpcre2-8" ldd ./haproxy | egrep -i "ssl|crypto|pcre" libssl.so.1.1 => /usr/local/openssl11/lib64/libssl.so.1.1 (0x00007f1d575c8000) libcrypto.so.1.1 => /usr/local/openssl11/lib64/libcrypto.so.1.1 (0x00007f1d5712d000) libpcre2-8.so.0 => /usr/local/lib64/libpcre2-8.so.0 (0x00007f1d56c0f000) libpcre2-posix.so.2 => /usr/local/lib64/libpcre2-posix.so.2 (0x00007f1d56a0c000) ??? libpcre.so.1 => /usr/lib64/libpcre.so.1 (0x00007f27070bd000) haproxy -vv ... Built with OpenSSL version : OpenSSL 1.1.0h-fips 27 Mar 2018 Running on OpenSSL version : OpenSSL 1.1.0h 27 Mar 2018 ... Built withOUT pcre2 make V=1 \ TARGET=linux2628 \ USE_SYSTEMD=1 \ USE_OPENSSL=1 \ SSL_INC=" -I/usr/local/openssl11/include" \ SSL_LIB=" -L/usr/local/openssl11/lib64 -Wl,-rpath,/usr/local/openssl11/lib64" \ ADDLIB="-ldl -lssl -lcrypto" ... Built without PCRE or PCRE2 support (using libc's regex instead) ... ldd ./haproxy | egrep -i "ssl|crypto|pcre" libssl.so.1.1 => /usr/local/openssl11/lib64/libssl.so.1.1 (0x00007f34c9591000) libcrypto.so.1.1 => /usr/local/openssl11/lib64/libcrypto.so.1.1 (0x00007f34c90f6000) ??? libpcre.so.1 => /usr/lib64/libpcre.so.1 (0x00007f0a0c9d9000) haproxy -vv Built with OpenSSL version : OpenSSL 1.1.0h-fips 27 Mar 2018 Running on OpenSSL version : OpenSSL 1.1.0h 27 Mar 2018 Now to track down what's sourcing that "libpcre.so.1 => /usr/lib64/libpcre.so.1"