Project

General

Profile

Bug #1665

Illumos wont build against openssl 1.0.0

Added by Andrew Stormont almost 8 years ago. Updated over 7 years ago.

Status:
Resolved
Priority:
Normal
Category:
-
Start date:
2011-10-18
Due date:
% Done:

100%

Estimated time:
Difficulty:
Medium
Tags:

Description

Userland now provides openssl 1.0.0 but Illumos wont build against it - it's probably time to upgrade. I've attached the patch I use in StormOS to allow building against the new version of openssl in the hope that it will be helpful.


Files

ssl-fixes.diff (6.18 KB) ssl-fixes.diff Andrew Stormont, 2011-10-18 09:12 PM
new_ssl.patch (36.5 KB) new_ssl.patch Igor Kozhukhov, 2011-10-23 11:26 AM
new_ssl.patch (34.2 KB) new_ssl.patch Andrew Stormont, 2011-12-19 12:55 PM

History

#1

Updated by Igor Kozhukhov almost 8 years ago

I have patch for libssl-1.0.0 too ;)

#2

Updated by Rich Lowe almost 8 years ago

Andrew, your changes to wanboot are hopefully not necessary. Wanboot should be using a separate, modified copy of openssl in the illumos tree. Can you confirm that it's not actually linking to the regular openssl? (I think it'd break wanboot, if it were).

#3

Updated by Andrew Stormont almost 8 years ago

As far as I could tell the modified copy of openssl is only used by the standalone version of wanboot (under usr/src/stand). Without the changes wanboot will fail to build.

#4

Updated by Igor Kozhukhov almost 8 years ago

you forgot update manifest :)

I have attached my version of patch.
I have tested it on illumos-gate build.

#5

Updated by Andrew Stormont almost 8 years ago

Looks good, but on my system I had to add the following includes to openssl_spi.c to fix the warnings:

#include <openssl/evp.h>
#include <openssl/pkcs12.h>

#6

Updated by Andrew Stormont over 7 years ago

This is the latest version of Igor K's patch.

#7

Updated by Albert Lee over 7 years ago

  • Status changed from New to Resolved
  • Assignee set to Theo Schlossnagle
  • % Done changed from 0 to 100
  • Tags deleted (needs-triage)

Fixed in:
changeset: 13674:181ba6c41bee
tag: tip
user: Theo Schlossnagle <>
date: Tue Apr 24 22:00:12 2012 -0400
files: usr/src/cmd/cmd-crypto/etc/Makefile.ca-links usr/src/cmd/sendmail/src/tls.c usr/src/common/net/wanboot/auxutil.c usr/src/common/net/wanboot/boot_http.c usr/src/common/net/wanboot/p12misc.c usr/src/lib/krb5/plugins/preauth/pkinit/pkinit_crypto_openssl.c usr/src/lib/libkmf/plugins/kmf_openssl/common/openssl_spi.c usr/src/lib/libpkg/common/p12lib.c usr/src/pkg/Makefile usr/src/pkg/manifests/crypto-ca-certificates.mf
description:
1665 Illumos wont build against openssl 1.0.0
Reviewed by: Robert Mustacchi <>
Reviewed by: Keith Wesolowski <>
Reviewed by: Joshua M. Clulow <>
Approved by: Albert Lee <>

Also available in: Atom PDF