testing OpenSSL 1.1.0 on jessie

2016-11-18 Thread Daniel Pocock


I wanted to try compiling some upstream projects against OpenSSL 1.1.0
on jessie, without installing the package though.

I tried the following:

dget -x
http://http.debian.net/debian/pool/main/o/openssl/openssl_1.1.0c-1.dsc

cd openssl-1.1.0c/
dpkg-buildpackage -rfakeroot -j13


and it builds but only 4 of the headers appear to install:

ls debian/libssl-dev/usr/include/openssl/
aes.h  asn1.h  asn1_mac.h  asn1t.h

Is this correct?



I tried building another project against it by adding these to the other
project's configure:

MY_OPENSSL=${HOME}/debian/openssl-1.1.0c

CPPFLAGS="-I${MY_OPENSSL}/debian/libssl-dev/usr/include ..."

LDFLAGS="-L${MY_OPENSSL}/debian/libssl1.1/usr/lib/x86_64-linux-gnu ..."

but it failed quite badly, probably because of missing headers under
${MY_OPENSSL}/debian/libssl-dev/usr/include



Re: testing OpenSSL 1.1.0 on jessie

2016-11-18 Thread Zack Weinberg
Daniel Pocock wrote:
> I wanted to try compiling some upstream projects against OpenSSL 1.1.0
> on jessie, without installing the package though. I tried the following:
>
> dget -x http://http.debian.net/debian/pool/main/o/openssl/openssl_1.1.0c-1.dsc
>
> cd openssl-1.1.0c/
> dpkg-buildpackage -rfakeroot -j13
>
> and it builds but only 4 of the headers appear to install:

Start over from scratch with -j1.  Seriously.  I haven't tested 1.1.0,
but the last time I built OpenSSL its makefiles were
_catastrophically_ broken with any amount of parallelism.  You
probably didn't even get a complete build, and the source code may
have been damaged.

zw



Re: testing OpenSSL 1.1.0 on jessie

2016-11-18 Thread Kurt Roeckx
On Fri, Nov 18, 2016 at 02:22:23PM -0500, Zack Weinberg wrote:
> Daniel Pocock wrote:
> > I wanted to try compiling some upstream projects against OpenSSL 1.1.0
> > on jessie, without installing the package though. I tried the following:
> >
> > dget -x 
> > http://http.debian.net/debian/pool/main/o/openssl/openssl_1.1.0c-1.dsc
> >
> > cd openssl-1.1.0c/
> > dpkg-buildpackage -rfakeroot -j13
> >
> > and it builds but only 4 of the headers appear to install:
> 
> Start over from scratch with -j1.  Seriously.  I haven't tested 1.1.0,
> but the last time I built OpenSSL its makefiles were
> _catastrophically_ broken with any amount of parallelism.  You
> probably didn't even get a complete build, and the source code may
> have been damaged.

The Makefiles were completly changed in 1.1.0 and it should
support parallel building now.

You might want to try -J13 instead of -j13. I've never tried the
-j option. Maybe something is broken in the rules files.


Kurt



Re: testing OpenSSL 1.1.0 on jessie

2016-11-18 Thread Kurt Roeckx
On Fri, Nov 18, 2016 at 03:53:20PM +0100, Daniel Pocock wrote:
> 
> 
> I wanted to try compiling some upstream projects against OpenSSL 1.1.0
> on jessie, without installing the package though.
> 
> I tried the following:
> 
> dget -x
> http://http.debian.net/debian/pool/main/o/openssl/openssl_1.1.0c-1.dsc
> 
> cd openssl-1.1.0c/
> dpkg-buildpackage -rfakeroot -j13
> 
> 
> and it builds but only 4 of the headers appear to install:
> 
> ls debian/libssl-dev/usr/include/openssl/
> aes.h  asn1.h  asn1_mac.h  asn1t.h
> 
> Is this correct?

No it's not.


Kurt



Re: testing OpenSSL 1.1.0 on jessie

2016-11-18 Thread Daniel Pocock


On 18/11/16 21:10, Kurt Roeckx wrote:
> On Fri, Nov 18, 2016 at 03:53:20PM +0100, Daniel Pocock wrote:
>>
>>
>> I wanted to try compiling some upstream projects against OpenSSL 1.1.0
>> on jessie, without installing the package though.
>>
>> I tried the following:
>>
>> dget -x
>> http://http.debian.net/debian/pool/main/o/openssl/openssl_1.1.0c-1.dsc
>>
>> cd openssl-1.1.0c/
>> dpkg-buildpackage -rfakeroot -j13
>>
>>
>> and it builds but only 4 of the headers appear to install:
>>
>> ls debian/libssl-dev/usr/include/openssl/
>> aes.h  asn1.h  asn1_mac.h  asn1t.h
>>
>> Is this correct?
> 
> No it's not.
> 

Could you suggest how I can get a build of OpenSSL 1.1 like this?

I don't need to build .deb files, I just need it to be within the
debian/ tree for me to refer to from other build trees.

Regards,

Daniel



Re: testing OpenSSL 1.1.0 on jessie

2016-11-18 Thread Kurt Roeckx
On Fri, Nov 18, 2016 at 09:15:53PM +0100, Daniel Pocock wrote:
> 
> 
> On 18/11/16 21:10, Kurt Roeckx wrote:
> > On Fri, Nov 18, 2016 at 03:53:20PM +0100, Daniel Pocock wrote:
> >>
> >>
> >> I wanted to try compiling some upstream projects against OpenSSL 1.1.0
> >> on jessie, without installing the package though.
> >>
> >> I tried the following:
> >>
> >> dget -x
> >> http://http.debian.net/debian/pool/main/o/openssl/openssl_1.1.0c-1.dsc
> >>
> >> cd openssl-1.1.0c/
> >> dpkg-buildpackage -rfakeroot -j13
> >>
> >>
> >> and it builds but only 4 of the headers appear to install:
> >>
> >> ls debian/libssl-dev/usr/include/openssl/
> >> aes.h  asn1.h  asn1_mac.h  asn1t.h
> >>
> >> Is this correct?
> > 
> > No it's not.
> > 
> 
> Could you suggest how I can get a build of OpenSSL 1.1 like this?

I can't actually reproduce your poblem, it just works for me (with
-j4, only have 4 cores.)

> I don't need to build .deb files, I just need it to be within the
> debian/ tree for me to refer to from other build trees.

You could also just point to openssl-1.1.0c/include/openssl/,

Please note that there is also:
debian/libssl-dev/usr/include/x86_64-linux-gnu/openssl/opensslconf.h


Kurt



Re: testing OpenSSL 1.1.0 on jessie

2016-11-18 Thread Daniel Pocock


On 18/11/16 22:12, Kurt Roeckx wrote:
> On Fri, Nov 18, 2016 at 09:15:53PM +0100, Daniel Pocock wrote:
>>
>>
>> On 18/11/16 21:10, Kurt Roeckx wrote:
>>> On Fri, Nov 18, 2016 at 03:53:20PM +0100, Daniel Pocock wrote:


 I wanted to try compiling some upstream projects against OpenSSL 1.1.0
 on jessie, without installing the package though.

 I tried the following:

 dget -x
 http://http.debian.net/debian/pool/main/o/openssl/openssl_1.1.0c-1.dsc

 cd openssl-1.1.0c/
 dpkg-buildpackage -rfakeroot -j13


 and it builds but only 4 of the headers appear to install:

 ls debian/libssl-dev/usr/include/openssl/
 aes.h  asn1.h  asn1_mac.h  asn1t.h

 Is this correct?
>>>
>>> No it's not.
>>>
>>
>> Could you suggest how I can get a build of OpenSSL 1.1 like this?
> 
> I can't actually reproduce your poblem, it just works for me (with
> -j4, only have 4 cores.)
> 
>> I don't need to build .deb files, I just need it to be within the
>> debian/ tree for me to refer to from other build trees.
> 
> You could also just point to openssl-1.1.0c/include/openssl/,
> 
> Please note that there is also:
> debian/libssl-dev/usr/include/x86_64-linux-gnu/openssl/opensslconf.h
> 
> 

In my tree, that isn't there, this is all that I see:

$ find debian/ -name '*.h'
debian/libssl-dev/usr/include/openssl/aes.h
debian/libssl-dev/usr/include/openssl/asn1.h
debian/libssl-dev/usr/include/openssl/asn1_mac.h
debian/libssl-dev/usr/include/openssl/asn1t.h


If it is working for you on jessie, maybe there is something different
in my jessie system.  I have some packages from backports, could any of
those impact this build?

Regards,

Daniel



Re: testing OpenSSL 1.1.0 on jessie

2016-11-18 Thread Kurt Roeckx
On Fri, Nov 18, 2016 at 10:18:32PM +0100, Daniel Pocock wrote:
> 
> 
> On 18/11/16 22:12, Kurt Roeckx wrote:
> > On Fri, Nov 18, 2016 at 09:15:53PM +0100, Daniel Pocock wrote:
> >>
> >>
> >> On 18/11/16 21:10, Kurt Roeckx wrote:
> >>> On Fri, Nov 18, 2016 at 03:53:20PM +0100, Daniel Pocock wrote:
> 
> 
>  I wanted to try compiling some upstream projects against OpenSSL 1.1.0
>  on jessie, without installing the package though.
> 
>  I tried the following:
> 
>  dget -x
>  http://http.debian.net/debian/pool/main/o/openssl/openssl_1.1.0c-1.dsc
> 
>  cd openssl-1.1.0c/
>  dpkg-buildpackage -rfakeroot -j13
> 
> 
>  and it builds but only 4 of the headers appear to install:
> 
>  ls debian/libssl-dev/usr/include/openssl/
>  aes.h  asn1.h  asn1_mac.h  asn1t.h
> 
>  Is this correct?
> >>>
> >>> No it's not.
> >>>
> >>
> >> Could you suggest how I can get a build of OpenSSL 1.1 like this?
> > 
> > I can't actually reproduce your poblem, it just works for me (with
> > -j4, only have 4 cores.)
> > 
> >> I don't need to build .deb files, I just need it to be within the
> >> debian/ tree for me to refer to from other build trees.
> > 
> > You could also just point to openssl-1.1.0c/include/openssl/,
> > 
> > Please note that there is also:
> > debian/libssl-dev/usr/include/x86_64-linux-gnu/openssl/opensslconf.h
> > 
> > 
> 
> In my tree, that isn't there, this is all that I see:
> 
> $ find debian/ -name '*.h'
> debian/libssl-dev/usr/include/openssl/aes.h
> debian/libssl-dev/usr/include/openssl/asn1.h
> debian/libssl-dev/usr/include/openssl/asn1_mac.h
> debian/libssl-dev/usr/include/openssl/asn1t.h
> 
> 
> If it is working for you on jessie, maybe there is something different
> in my jessie system.  I have some packages from backports, could any of
> those impact this build?

It shouldn't.


Kurt



Re: testing OpenSSL 1.1.0 on jessie

2016-11-18 Thread Daniel Pocock


On 18/11/16 21:09, Kurt Roeckx wrote:
> On Fri, Nov 18, 2016 at 02:22:23PM -0500, Zack Weinberg wrote:
>> Daniel Pocock wrote:
>>> I wanted to try compiling some upstream projects against OpenSSL 1.1.0
>>> on jessie, without installing the package though. I tried the following:
>>>
>>> dget -x 
>>> http://http.debian.net/debian/pool/main/o/openssl/openssl_1.1.0c-1.dsc
>>>
>>> cd openssl-1.1.0c/
>>> dpkg-buildpackage -rfakeroot -j13
>>>
>>> and it builds but only 4 of the headers appear to install:
>>
>> Start over from scratch with -j1.  Seriously.  I haven't tested 1.1.0,
>> but the last time I built OpenSSL its makefiles were
>> _catastrophically_ broken with any amount of parallelism.  You
>> probably didn't even get a complete build, and the source code may
>> have been damaged.
> 
> The Makefiles were completly changed in 1.1.0 and it should
> support parallel building now.
> 
> You might want to try -J13 instead of -j13. I've never tried the
> -j option. Maybe something is broken in the rules files.
> 
> 

I unpacked the source package again, dropped the -j and built it like this:

$ dpkg-buildpackage -rfakeroot -us -uc


Now it appears all the headers are installed under debian/ and I can
(try to) build stuff against it as described in my original email


$ find debian/ -name '*.h'
debian/libssl-dev/usr/include/openssl/aes.h
debian/libssl-dev/usr/include/openssl/asn1.h
debian/libssl-dev/usr/include/openssl/asn1_mac.h
debian/libssl-dev/usr/include/openssl/asn1t.h
debian/libssl-dev/usr/include/openssl/async.h
debian/libssl-dev/usr/include/openssl/bio.h
debian/libssl-dev/usr/include/openssl/blowfish.h
debian/libssl-dev/usr/include/openssl/bn.h
debian/libssl-dev/usr/include/openssl/buffer.h
debian/libssl-dev/usr/include/openssl/camellia.h
debian/libssl-dev/usr/include/openssl/cast.h
debian/libssl-dev/usr/include/openssl/cmac.h
debian/libssl-dev/usr/include/openssl/cms.h
debian/libssl-dev/usr/include/openssl/comp.h
debian/libssl-dev/usr/include/openssl/conf.h
debian/libssl-dev/usr/include/openssl/conf_api.h
debian/libssl-dev/usr/include/openssl/crypto.h
debian/libssl-dev/usr/include/openssl/ct.h
debian/libssl-dev/usr/include/openssl/des.h
debian/libssl-dev/usr/include/openssl/dh.h
debian/libssl-dev/usr/include/openssl/dsa.h
debian/libssl-dev/usr/include/openssl/dtls1.h
debian/libssl-dev/usr/include/openssl/e_os2.h
debian/libssl-dev/usr/include/openssl/ebcdic.h
debian/libssl-dev/usr/include/openssl/ec.h
debian/libssl-dev/usr/include/openssl/ecdh.h
debian/libssl-dev/usr/include/openssl/ecdsa.h
debian/libssl-dev/usr/include/openssl/engine.h
debian/libssl-dev/usr/include/openssl/err.h
debian/libssl-dev/usr/include/openssl/evp.h
debian/libssl-dev/usr/include/openssl/hmac.h
debian/libssl-dev/usr/include/openssl/idea.h
debian/libssl-dev/usr/include/openssl/kdf.h
debian/libssl-dev/usr/include/openssl/lhash.h
debian/libssl-dev/usr/include/openssl/md2.h
debian/libssl-dev/usr/include/openssl/md4.h
debian/libssl-dev/usr/include/openssl/md5.h
debian/libssl-dev/usr/include/openssl/mdc2.h
debian/libssl-dev/usr/include/openssl/modes.h
debian/libssl-dev/usr/include/openssl/obj_mac.h
debian/libssl-dev/usr/include/openssl/objects.h
debian/libssl-dev/usr/include/openssl/ocsp.h
debian/libssl-dev/usr/include/openssl/opensslv.h
debian/libssl-dev/usr/include/openssl/ossl_typ.h
debian/libssl-dev/usr/include/openssl/pem.h
debian/libssl-dev/usr/include/openssl/pem2.h
debian/libssl-dev/usr/include/openssl/pkcs12.h
debian/libssl-dev/usr/include/openssl/pkcs7.h
debian/libssl-dev/usr/include/openssl/rand.h
debian/libssl-dev/usr/include/openssl/rc2.h
debian/libssl-dev/usr/include/openssl/rc4.h
debian/libssl-dev/usr/include/openssl/rc5.h
debian/libssl-dev/usr/include/openssl/ripemd.h
debian/libssl-dev/usr/include/openssl/rsa.h
debian/libssl-dev/usr/include/openssl/safestack.h
debian/libssl-dev/usr/include/openssl/seed.h
debian/libssl-dev/usr/include/openssl/sha.h
debian/libssl-dev/usr/include/openssl/srp.h
debian/libssl-dev/usr/include/openssl/srtp.h
debian/libssl-dev/usr/include/openssl/ssl.h
debian/libssl-dev/usr/include/openssl/ssl2.h
debian/libssl-dev/usr/include/openssl/ssl3.h
debian/libssl-dev/usr/include/openssl/stack.h
debian/libssl-dev/usr/include/openssl/symhacks.h
debian/libssl-dev/usr/include/openssl/tls1.h
debian/libssl-dev/usr/include/openssl/ts.h
debian/libssl-dev/usr/include/openssl/txt_db.h
debian/libssl-dev/usr/include/openssl/ui.h
debian/libssl-dev/usr/include/openssl/whrlpool.h
debian/libssl-dev/usr/include/openssl/x509.h
debian/libssl-dev/usr/include/openssl/x509_vfy.h
debian/libssl-dev/usr/include/openssl/x509v3.h
debian/libssl-dev/usr/include/x86_64-linux-gnu/openssl/opensslconf.h



Re: testing OpenSSL 1.1.0 on jessie

2016-11-19 Thread Sebastian Andrzej Siewior
On 2016-11-18 15:53:20 [+0100], Daniel Pocock wrote:
> Is this correct?
I have thrown it on sbuild with a Jessie environment and I got more header
files.
There is a build log [0] around and this directory cointains also the
resulting .deb files.

[0] 
https://breakpoint.cc/openssl-110c-rebuild-for-jessie/openssl_1.1.0c-1~0_amd64.build

Sebastian