Bug #1665
closed
Illumos wont build against openssl 1.0.0
100%
Description
Userland now provides openssl 1.0.0 but Illumos wont build against it - it's probably time to upgrade. I've attached the patch I use in StormOS to allow building against the new version of openssl in the hope that it will be helpful.
Files
Updated by Igor Kozhukhov over 11 years ago
I have patch for libssl-1.0.0 too ;)
Updated by Rich Lowe over 11 years ago
Andrew, your changes to wanboot are hopefully not necessary. Wanboot should be using a separate, modified copy of openssl in the illumos tree. Can you confirm that it's not actually linking to the regular openssl? (I think it'd break wanboot, if it were).
Updated by Andrew Stormont over 11 years ago
As far as I could tell the modified copy of openssl is only used by the standalone version of wanboot (under usr/src/stand). Without the changes wanboot will fail to build.
Updated by Igor Kozhukhov over 11 years ago
- File new_ssl.patch new_ssl.patch added
you forgot update manifest :)
I have attached my version of patch.
I have tested it on illumos-gate build.
Updated by Andrew Stormont over 11 years ago
Looks good, but on my system I had to add the following includes to openssl_spi.c to fix the warnings:
#include <openssl/evp.h>
#include <openssl/pkcs12.h>
Updated by Andrew Stormont over 11 years ago
- File new_ssl.patch new_ssl.patch added
This is the latest version of Igor K's patch.
Updated by Albert Lee about 11 years ago
- Status changed from New to Resolved
- Assignee set to Theo Schlossnagle
- % Done changed from 0 to 100
- Tags deleted (
needs-triage)
Fixed in:
changeset: 13674:181ba6c41bee
tag: tip
user: Theo Schlossnagle <jesus@omniti.com>
date: Tue Apr 24 22:00:12 2012 -0400
files: usr/src/cmd/cmd-crypto/etc/Makefile.ca-links usr/src/cmd/sendmail/src/tls.c usr/src/common/net/wanboot/auxutil.c usr/src/common/net/wanboot/boot_http.c usr/src/common/net/wanboot/p12misc.c usr/src/lib/krb5/plugins/preauth/pkinit/pkinit_crypto_openssl.c usr/src/lib/libkmf/plugins/kmf_openssl/common/openssl_spi.c usr/src/lib/libpkg/common/p12lib.c usr/src/pkg/Makefile usr/src/pkg/manifests/crypto-ca-certificates.mf
description:
1665 Illumos wont build against openssl 1.0.0
Reviewed by: Robert Mustacchi <rm@joyent.com>
Reviewed by: Keith Wesolowski <keith.wesolowski@joyent.com>
Reviewed by: Joshua M. Clulow <josh@sysmgr.org>
Approved by: Albert Lee <trisk@nexenta.com>