Problem building OpenSSL 3.3.0 from source - RPATH - Shared libraries

[iz8mbw]

Hello.
I'm tring to build OpenSSL 3,3,0 on Linux Ubuntu 24.04 in a custom path like /opt/ssl33.
This is the config I set:

config -Wl,-rpath=/opt/ssl33/lib -Wl,--enable-new-dtags --prefix=/opt/ssl33 --openssldir=/opt/ssl33

make was OK but it seems libssl.so and libcrypto.so are not using its own OpenSSL 3,3,0 library:

root@server:/opt/ssl33/lib64# ldd libssl.so
./libssl.so: /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.3.0' not found (required by ./libssl.so)
./libssl.so: /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.2.0' not found (required by ./libssl.so)
        linux-vdso.so.1 (0x00007ffe18aea000)
        libcrypto.so.3 => /lib/x86_64-linux-gnu/libcrypto.so.3 (0x000076d05d200000)
        libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x000076d05ce00000)
        /lib64/ld-linux-x86-64.so.2 (0x000076d05d9bf000)

root@server:/opt/ssl33/lib64# readelf -d ./libssl.so | grep -i -E 'rpath|runpath'
 0x000000000000001d (RUNPATH)            Library runpath: [/opt/ssl33/lib]

root@ubuntusrv01:/opt/ssl33/lib64# readelf -d ./libcrypto.so | grep -i -E 'rpath|runpath'
 0x000000000000001d (RUNPATH)            Library runpath: [/opt/ssl33/lib]

also openssl in bin directory is not working and not using the correct library:

root@server:/opt/ssl33/bin# ./openssl version -a
./openssl: /lib/x86_64-linux-gnu/libssl.so.3: version `OPENSSL_3.2.0' not found (required by ./openssl)
./openssl: /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.3.0' not found (required by ./openssl)
./openssl: /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.2.0' not found (required by ./openssl)

root@server:/opt/ssl33/bin# ldd openssl
./openssl: /lib/x86_64-linux-gnu/libssl.so.3: version `OPENSSL_3.2.0' not found (required by ./openssl)
./openssl: /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.3.0' not found (required by ./openssl)
./openssl: /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.2.0' not found (required by ./openssl)
        linux-vdso.so.1 (0x00007ffecb32c000)
        libssl.so.3 => /lib/x86_64-linux-gnu/libssl.so.3 (0x0000747031412000)
        libcrypto.so.3 => /lib/x86_64-linux-gnu/libcrypto.so.3 (0x0000747030e00000)
        libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x0000747030a00000)
        /lib64/ld-linux-x86-64.so.2 (0x00007470315d6000)

Where is the issue?

Thanks.

[mattcaswell]

According to the NOTES.UNIX file the syntax for setting rpath looks like this:

openssl/NOTES-UNIX.md

Line 43 in 3de3d48

-Wl,-rpath,/whatever/path # Linux, *BSD, etc.

Note the comma after rpath and lack of =

[iz8mbw]

Tried to build with config -Wl,-rpath,/opt/ssl33/lib -Wl,--enable-new-dtags --prefix=/opt/ssl33 --openssldir=/opt/ssl33 but the results is the same, it did not fix my issue.

[mattcaswell]

Hmmm....I just tried it and got the same problem.

I got it working like this:

./config '-Wl,-rpath,$(LIBRPATH)' -Wl,--enable-new-dtags --prefix=/opt/ssl33 --openssldir=/opt/ssl33

Not sure why the explicit rpath didn't work

[iz8mbw]

Thanks, this worked!

[iz8mbw]

Do you think is the case to open an Issue on GitHub about this bug?

[mattcaswell]

Yeah, it wouldn't hurt to open a bug about this

[Sashan]

Even explicit path works for me. This is what I have done on my system (OpenBSD-7.5)

lifty$ perl configdata.pm --dump |head -n 10 

Command line (with current working directory = .):

    perl ./Configure --prefix=/opt/ssl33/lib --openssldir=/opt/ssl33 --debug -D_TEST_CLEANUP -Wl,-rpath,/opt/ssl33/lib -Wl,--enable-new-dtags

Perl information:

    perl
    5.36.3 for amd64-openbsd

lifty$ readelf -d libcrypto.so.3             

Dynamic section at offset 0x6d7418 contains 21 entries:
  Tag        Type                         Name/Value
 0x000000000000001d (RUNPATH)            Library runpath: [/opt/ssl33/lib]
 0x0000000000000001 (NEEDED)             Shared library: [libpthread.so.27.1]
 0x000000000000000e (SONAME)             Library soname: [libcrypto.so.3]
 0x000000000000001e (FLAGS)              SYMBOLIC
 0x0000000000000007 (RELA)               0x7c7a0
 0x0000000000000008 (RELASZ)             452616 (bytes)
 0x0000000000000009 (RELAENT)            24 (bytes)
 0x000000006ffffff9 (RELACOUNT)          18852
 0x0000000000000017 (JMPREL)             0xeafa8
 0x0000000000000002 (PLTRELSZ)           3408 (bytes)
 0x0000000000000003 (PLTGOT)             0x6d95a0
 0x0000000000000014 (PLTREL)             RELA
 0x0000000000000006 (SYMTAB)             0x350
 0x000000000000000b (SYMENT)             24 (bytes)
 0x0000000000000005 (STRTAB)             0x4eedc
 0x000000000000000a (STRSZ)              186557 (bytes)
 0x000000006ffffef5 (GNU_HASH)           0x30c98
 0x0000000000000004 (HASH)               0x3ebbc
 0x000000000000000c (INIT)               0x6747b0
 0x000000000000000d (FINI)               0x6747d0
 0x0000000000000000 (NULL)               0x0

runpath is set ax expected.

[mattcaswell]

Ah, I figured this out. The original command should have been:

./config -Wl,-rpath,/opt/ssl33/lib64 -Wl,--enable-new-dtags --prefix=/opt/ssl33 --openssldir=/opt/ssl33

Note the "lib64" instead of "lib" at the end of the rpath. With that it all works. This kind of problem is why I suppose the "$(LIBRPATH)" form is the recommended approach in NOTES-UNIX.md:

Please do not use verbatim directories in your runtime shared library
search path! Some OpenSSL config targets add an extra directory level
for multilib installations. To help with that, the produced Makefile
includes the variable LIBRPATH, which is a convenience variable to be
used with the runtime shared library search path options, as shown in
this example:

[iz8mbw]

Thanks. I tried with "lib64" and it worked.