Re: [Openvpn-devel] gentoo build inconsistency with openssl in openvpn using elliptic curve cert

[Gert D. <ge...@gr...>]

Hi,

On Sun, Apr 02, 2017 at 12:57:41AM +0100, debbie10t wrote:
> ===================
> 
> 1. BROKEN METHOD
>     *************
[..]
> me@gtoo-hyv-live-64 ~/openvpn $ ldd -v 2.4/src/openvpn/openvpn
[..]
> 	libcrypto.so.1.0.0 => /usr/lib64/libcrypto.so.1.0.0 (0x00007f44f2c36000)
> 	libssl.so.1.0.0 => /usr/lib64/libssl.so.1.0.0 (0x00007f44f29cc000)
[..]


> 2. WORKING METHOD
>     **************
[..]
> me@gtoo-hyv-live-64 ~/openvpn/btest/generic $ ldd -v 
> image-native/openvpn/sbin/openvpn
[..]
> 	libssl.so.1.0.0 => 
> /home/me/openvpn/btest/generic/image-native/openvpn/lib/libssl.so.1.0.0 
> (0x00007f5832464000)
> 	libcrypto.so.1.0.0 => 
> /home/me/openvpn/btest/generic/image-native/openvpn/lib/libcrypto.so.1.0.0 
> (0x00007f5832009000)


This translates to "if you use the openssl library that you built yourself,
EC works, if you use the system library, it doesn't".

Now *why* this is so, I can't say, but filing a bug with the gentoo openssl
port might be a reasonable starting point...

gert


-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             ge...@gr...
fax: +49-89-35655025                        ge...@ne...