Re: [openssl-users] Build from source; library not found?

[Hiran Chaudhuri]

Quick reaction, I am impressed.

The part that triggered my wrong thoughts was the first sentence:
"RPATH's are supported by default on the BSD platforms, but not others."

It seemed platforms other than BSD will not get RPATH unless I take action. 
With that in mind I somehow understood I need to patch the config or configure 
scripts to get along.

Maybe it should read something like "on BSD the run paths are automatically 
set. For other platforms, add these parameters to your configure line...

Hiran

Am 28. Mai 2017 23:27:27 MESZ schrieb Jeffrey Walton :
>On Sun, May 28, 2017 at 5:16 PM, Hiran Chaudhuri
> wrote:
>> It seems I misread the referenced documentation the first time.
>>
>> This stuff contains the answer, it just was not clear to me that also
>works
>> on Linux.
>>
>https://wiki.openssl.org/index.php/Compilation_and_Installation#Using_RPATHs.
>>
>> With that, the libraries have run paths that show the correct target
>> directories. Thanks to all for the hint.
>
>Arg... I consider confusing text a documentation bug.
>
>Is this better:
>https://wiki.openssl.org/index.php/Compilation_and_Installation#Using_RPATHs
>?
>
>Jeff
>-- 
>openssl-users mailing list
>To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Build from source; library not found?

[Jeffrey Walton]

On Sun, May 28, 2017 at 5:16 PM, Hiran Chaudhuri
 wrote:
> It seems I misread the referenced documentation the first time.
>
> This stuff contains the answer, it just was not clear to me that also works
> on Linux.
> https://wiki.openssl.org/index.php/Compilation_and_Installation#Using_RPATHs.
>
> With that, the libraries have run paths that show the correct target
> directories. Thanks to all for the hint.

Arg... I consider confusing text a documentation bug.

Is this better:
https://wiki.openssl.org/index.php/Compilation_and_Installation#Using_RPATHs
?

Jeff
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Build from source; library not found?

[Hiran Chaudhuri]

It seems I misread the referenced documentation the first time.
   This stuff contains the answer, it just was not clear to me that also works 
on Linux. 
https://wiki.openssl.org/index.php/Compilation_and_Installation#Using_RPATHs.   
With that, the libraries have run paths that show the correct target 
directories. Thanks to all for the hint.   Hiran 

 Am 23-May-2017 22:26:38 +0200 schrieb hiran.chaudh...@mail.de: 

Hello Victor. 

So you manage to build OpenSSL with rpaths. Would you like to let me know how 
this can be achieved? Is CFLAGS the only change required? (from the 
documentation mentioned earlier it seems I would have to modify the configure 
script). 

Hiran 

 Am 21-May-2017 06:51:55 +0200 schrieb openssl-us...@dukhovni.org: 

 > On May 20, 2017, at 8:52 PM, Richard Levitte  wrote:
 > 
 > Err, it is correct insofar that it is how OpenSSL 1.0.2{x} is built.

 Perhaps by default, I routinely do builds of OpenSSL 1.0.2 in which
 the library rpaths are set.

 > It's possible it SHOULD be built differently, but that's a different
 > story. Here, the question was what's actually done.

 The choice of additional CFLAGS is up to the user.

 -- 
 Viktor.

 -- 
 openssl-users mailing list
 To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Build from source; library not found?

[Hiran Chaudhuri]

Hello Victor. 

So you manage to build OpenSSL with rpaths. Would you like to let me know how 
this can be achieved? Is CFLAGS the only change required? (from the 
documentation mentioned earlier it seems I would have to modify the configure 
script). 

Hiran 

 Am 21-May-2017 06:51:55 +0200 schrieb openssl-us...@dukhovni.org: 

 > On May 20, 2017, at 8:52 PM, Richard Levitte  wrote:
 > 
 > Err, it is correct insofar that it is how OpenSSL 1.0.2{x} is built.

 Perhaps by default, I routinely do builds of OpenSSL 1.0.2 in which
 the library rpaths are set.

 > It's possible it SHOULD be built differently, but that's a different
 > story. Here, the question was what's actually done.

 The choice of additional CFLAGS is up to the user.

 -- 
 Viktor.

 -- 
 openssl-users mailing list
 To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Build from source; library not found?

[Viktor Dukhovni]

> On May 20, 2017, at 8:52 PM, Richard Levitte  wrote:
> 
> Err, it is correct insofar that it is how OpenSSL 1.0.2{x} is built.

Perhaps by default, I routinely do builds of OpenSSL 1.0.2 in which
the library rpaths are set.

> It's possible it SHOULD be built differently, but that's a different
> story.  Here, the question was what's actually done.

The choice of additional CFLAGS is up to the user.

-- 
Viktor.

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Build from source; library not found?

[Richard Levitte]

In message  on Thu, 18 May 
2017 18:35:32 -0400, Viktor Dukhovni  said:

openssl-users> 
openssl-users> > On May 18, 2017, at 4:08 PM, Richard Levitte 
 wrote:
openssl-users> > 
openssl-users> > hiran.chaudhuri> Incidently, I think that when you do 
this, you'll find that it
openssl-users> > hiran.chaudhuri> finds
openssl-users> > hiran.chaudhuri> your libraries all right:
openssl-users> > hiran.chaudhuri> 
openssl-users> > hiran.chaudhuri> $ ldd /prefix/openssl/bin/openssl
openssl-users> > hiran.chaudhuri> 
openssl-users> > hiran.chaudhuri> Now this is interesting. Yes, openssl can 
find both the libraries
openssl-users> > hiran.chaudhuri> libssl and libcrypto. Would that imply that 
rpath is only a setting
openssl-users> > hiran.chaudhuri> for application (executables) but not for 
shared libraries?
openssl-users> > hiran.chaudhuri> In that case the test I tried would be 
totally meaningless.
openssl-users> > 
openssl-users> > Yes, that's correct.
openssl-users> 
openssl-users> NO, it is not correct, shared libraries also have rpaths for 
their
openssl-users> own dependencies.  And when building OpenSSL for installation in
openssl-users> non-default locations (not /usr/lib and the like) the libraries
openssl-users> should have an rpath.

Err, it is correct insofar that it is how OpenSSL 1.0.2{x} is built.
It's possible it SHOULD be built differently, but that's a different
story.  Here, the question was what's actually done.

(side note: BSD is treated differently, 'cause there was a time when
the RPATH setting in executable binaries didn't propagate down to the
libraries they loaded)

-- 
Richard Levitte levi...@openssl.org
OpenSSL Project http://www.openssl.org/~levitte/
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Build from source; library not found?

[Jeffrey Walton]

On Sat, May 20, 2017 at 7:10 AM, Hiran Chaudhuri
 wrote:
> Am 19-May-2017 00:36:18 +0200 schrieb openssl-us...@dukhovni.org:
>
>> hiran.chaudhuri> Now this is interesting. Yes, openssl can find both the
>> libraries
>> hiran.chaudhuri> libssl and libcrypto. Would that imply that rpath is only
>> a setting
>> hiran.chaudhuri> for application (executables) but not for shared
>> libraries?
>> hiran.chaudhuri> In that case the test I tried would be totally
>> meaningless.
>>
>> Yes, that's correct.
>
> NO, it is not correct, shared libraries also have rpaths for their
> own dependencies. And when building OpenSSL for installation in
> non-default locations (not /usr/lib and the like) the libraries
> should have an rpath.
>
> It would sound logical. But how could I then enforce the runpath to be set
> in the libraries?

https://wiki.openssl.org/index.php/Compilation_and_Installation#Using_RPATHs.

I've never understood the use case - build a new/updated openssl,
compile time link against the new one, and then runtime link against
the old one.

Jeff
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Build from source; library not found?

[Hiran Chaudhuri]

Am 19-May-2017 00:36:18 +0200 schrieb openssl-us...@dukhovni.org: 

> hiran.chaudhuri> Now this is interesting. Yes, openssl can find both the 
> libraries
 > hiran.chaudhuri> libssl and libcrypto. Would that imply that rpath is only a 
 > setting
 > hiran.chaudhuri> for application (executables) but not for shared libraries?
 > hiran.chaudhuri> In that case the test I tried would be totally meaningless.
 > 
 > Yes, that's correct.

 NO, it is not correct, shared libraries also have rpaths for their
 own dependencies. And when building OpenSSL for installation in
 non-default locations (not /usr/lib and the like) the libraries
 should have an rpath.

 -- 
 Viktor.

 Hi Viktor.   It would sound logical. But how could I then enforce the runpath 
to be set in the libraries?   Hiran
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Build from source; library not found?

[Viktor Dukhovni]

> On May 18, 2017, at 4:08 PM, Richard Levitte  wrote:
> 
> hiran.chaudhuri> Incidently, I think that when you do this, you'll find 
> that it
> hiran.chaudhuri> finds
> hiran.chaudhuri> your libraries all right:
> hiran.chaudhuri> 
> hiran.chaudhuri> $ ldd /prefix/openssl/bin/openssl
> hiran.chaudhuri> 
> hiran.chaudhuri> Now this is interesting. Yes, openssl can find both the 
> libraries
> hiran.chaudhuri> libssl and libcrypto. Would that imply that rpath is only a 
> setting
> hiran.chaudhuri> for application (executables) but not for shared libraries?
> hiran.chaudhuri> In that case the test I tried would be totally meaningless.
> 
> Yes, that's correct.

NO, it is not correct, shared libraries also have rpaths for their
own dependencies.  And when building OpenSSL for installation in
non-default locations (not /usr/lib and the like) the libraries
should have an rpath.

-- 
Viktor.

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Build from source; library not found?

[Richard Levitte]

In message <20170517143939.7a4ac40...@smtp03.mail.de> on Wed, 17 May 2017 
16:39:39 +0200, Hiran Chaudhuri  said:

hiran.chaudhuri> Incidently, I think that when you do this, you'll find 
that it
hiran.chaudhuri> finds
hiran.chaudhuri> your libraries all right:
hiran.chaudhuri> 
hiran.chaudhuri> $ ldd /prefix/openssl/bin/openssl
hiran.chaudhuri> 
hiran.chaudhuri> Now this is interesting. Yes, openssl can find both the 
libraries
hiran.chaudhuri> libssl and libcrypto. Would that imply that rpath is only a 
setting
hiran.chaudhuri> for application (executables) but not for shared libraries?
hiran.chaudhuri> In that case the test I tried would be totally meaningless.

Yes, that's correct.

-- 
Richard Levitte levi...@openssl.org
OpenSSL Project http://www.openssl.org/~levitte/
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Build from source; library not found?

[Hiran Chaudhuri]

I just verified. The required shared libraries and runpath settings are part of 
the dynamic section in elf files. 

readelf -d openssl 

displays a runpath, while 

readelf -d libssl.so.1.0.0 

does not show a runpath. 

Therefore my test was wrong. I cannot check shared libraries directly. 

 Am 17-May-2017 16:40:40 +0200 schrieb hiran.chaudh...@mail.de: 
Now this is interesting. Yes, openssl can find both the libraries libssl and 
libcrypto. Would that imply that rpath is only a setting for application 
(executables) but not for shared libraries? In that case the test I tried would 
be totally meaningless.   Hiran
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Build from source; library not found?

[Hiran Chaudhuri]

Hi Richard.
   Thank you for the fast response. 

 Am 17-May-2017 15:40:27 +0200 schrieb levi...@openssl.org: 
The are two ways to handle this. One is with the usual setting of
 LD_LIBRARY_PATH:

 $ LD_LIBRARY_PATH=`pwd` ldd libssl.so.1.0.0 Yes, this seems to work. Somehow 
I'd like to avoid having to tell every user to use the correct settings.   
The other is, when you compile your application, to use
 -Wl,-rpath,/prefix/openssl/lib Where would these options typically go? One of 
the applications is curl, which worked when I set 
"LDFLAGS=-R/prefix/openssl/lib" when doing configure/make/make install in the 
curl build directory. One of the applications is Apache httpd, which seems to 
not work when doing the same. So I'd definitely try your suggestion.   
Incidently, I think that when you do this, you'll find that it finds
 your libraries all right:

 $ ldd /prefix/openssl/bin/openssl Now this is interesting. Yes, openssl can 
find both the libraries libssl and libcrypto. Would that imply that rpath is 
only a setting for application (executables) but not for shared libraries? In 
that case the test I tried would be totally meaningless.   Hiran
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Build from source; library not found?

[Richard Levitte]

In message <20170517130805.7600d40...@smtp03.mail.de> on Wed, 17 May 2017 
15:08:05 +0200, Hiran Chaudhuri  said:

hiran.chaudhuri> Hi there.
hiran.chaudhuri> I have been building Openssl for quite some time now. Just 
recently I
hiran.chaudhuri> switched to shared mode that will also create shared libraries.
hiran.chaudhuri> What I am wondering about: After configure/make/make install I 
find
hiran.chaudhuri> the expected libraries in the desired output directory. Why 
can ldd
hiran.chaudhuri> not resolve a librarie's dependencies? The target file is just 
in the
hiran.chaudhuri> same directory!
hiran.chaudhuri> user@server:/prefix/openssl/lib> ls
hiran.chaudhuri> engines libcrypto.a libcrypto.so libcrypto.so.1.0.0 libssl.a 
libssl.so
hiran.chaudhuri> libssl.so.1.0.0 pkgconfig
hiran.chaudhuri> user@server:/prefix/openssl/lib> ldd libssl.so.1.0.0
hiran.chaudhuri> linux-vdso.so.1 => (0x7ffdae1fb000)
hiran.chaudhuri> libcrypto.so.1.0.0 => not found
hiran.chaudhuri> libdl.so.2 => /lib64/libdl.so.2 (0x7f8173425000)
hiran.chaudhuri> libc.so.6 => /lib64/libc.so.6 (0x7f81730a9000)
hiran.chaudhuri> /lib64/ld-linux-x86-64.so.2 (0x7f81738ad000)
hiran.chaudhuri> user@server:/prefix/openssl/lib>
hiran.chaudhuri> Is this normal behaviour? Or is it because I entered a prefix 
that is
hiran.chaudhuri> not part of the system's default lib path?

That last question is the correct guess.  /etc/ld.so.conf will tell
you what your default paths are (and if it includes other files, so
will they).

The are two ways to handle this.  One is with the usual setting of
LD_LIBRARY_PATH:

$ LD_LIBRARY_PATH=`pwd` ldd libssl.so.1.0.0

The other is, when you compile your application, to use
-Wl,-rpath,/prefix/openssl/lib

Incidently, I think that when you do this, you'll find that it finds
your libraries all right:

$ ldd /prefix/openssl/bin/openssl

The reason is that the application has been built with said -rpath

A last note: with OpenSSL 1.1.0 and on, rpath isn't automatically
applied to the openssl application, but is a matter of extra
configuration arguments.

Cheers,
Richard

-- 
Richard Levitte levi...@openssl.org
OpenSSL Project http://www.openssl.org/~levitte/
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

[openssl-users] Build from source; library not found?

[Hiran Chaudhuri]

Hi there.   I have been building Openssl for quite some time now. Just recently 
I switched to shared mode that will also create shared libraries. What I am 
wondering about: After configure/make/make install I find the expected 
libraries in the desired output directory. Why can ldd not resolve a librarie's 
dependencies? The target file is just in the same directory!   
user@server:/prefix/openssl/lib> ls
engines libcrypto.a libcrypto.so libcrypto.so.1.0.0 libssl.a libssl.so 
libssl.so.1.0.0 pkgconfig
user@server:/prefix/openssl/lib> ldd libssl.so.1.0.0
 linux-vdso.so.1 => (0x7ffdae1fb000)
 libcrypto.so.1.0.0 => not found
 libdl.so.2 => /lib64/libdl.so.2 (0x7f8173425000)
 libc.so.6 => /lib64/libc.so.6 (0x7f81730a9000)
 /lib64/ld-linux-x86-64.so.2 (0x7f81738ad000)
user@server:/prefix/openssl/lib>   Is this normal behaviour? Or is it because I 
entered a prefix that is not part of the system's default lib path?   Hiran
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users