Build OpenSSL with RPATH?

by

My question is how to configure the build in a way, that it can hardcode all binary and library dependencies of shared libraries without using LD_LIBRARY_PATH, or anything like that.

OpenSSL supports RPATH‘s out of the box for BSD targets (but not others). From Configure:

# Unlike other OSes (like Solaris, Linux, Tru64, IRIX) BSD run-time
# linkers (tested OpenBSD, NetBSD and FreeBSD) "demand" RPATH set on
# .so objects. Apparently application RPATH is not global and does
# not apply to .so linked with other .so. Problem manifests itself
# when libssl.so fails to load libcrypto.so. One can argue that we
# should engrave this into Makefile.shared rules or into BSD-* config
# lines above. Meanwhile let's try to be cautious and pass -rpath to
# linker only when --prefix is not /usr.
if ($target =~ /^BSD\-/)
    {
    $shared_ldflag.=" -Wl,-rpath,\$(LIBRPATH)" if ($prefix !~ m|^/usr[/]*$|);
    }

The easiest way to do it for OpenSSL 1.0.2 appears to be add it as a CFLAG:

./config -Wl,-rpath=/usr/local/ssl/lib

The next easiest way to do it for OpenSSL 1.0.2 appears to be add a Configure line and hard code the rpath. For example, I am working on Debian x86_64. So I opened the file Configure in an editor, copied linux-x86_64, named it linux-x86_64-rpath, and made the following change to add the -rpath option:

"linux-x86_64-rpath",   "gcc:-m64 -DL_ENDIAN -O3 -Wall -Wl,-rpath=/usr/local/ssl/lib::
-D_REENTRANT::-Wl,-rpath=/usr/local/ssl/lib -ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:
${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64",

Above, fields 2 and 6 were changed. They correspond to $cflag and $ldflag in OpenSSL’s builds system.

Then, Configure with the new configuration:

$ ./Configure linux-x86_64-rpath shared no-ssl2 no-ssl3 no-comp \
    --openssldir=/usr/local/ssl enable-ec_nistp_64_gcc_128

Finally, after make, verify the settings stuck:

$ readelf -d ./libssl.so | grep -i rpath
 0x000000000000000f (RPATH)              Library rpath: [/usr/local/ssl/lib]
$ readelf -d ./libcrypto.so | grep -i rpath
 0x000000000000000f (RPATH)              Library rpath: [/usr/local/ssl/lib]
$ readelf -d ./apps/openssl | grep -i rpath 
 0x000000000000000f (RPATH)              Library rpath: [/usr/local/ssl/lib]

Once you perform make install, then ldd will produce expected results:

$ ldd /usr/local/ssl/lib/libssl.so
    linux-vdso.so.1 =>  (0x00007ffceff6c000)
    libcrypto.so.1.0.0 => /usr/local/ssl/lib/libcrypto.so.1.0.0 (0x00007ff5eff96000)
    ...

$ ldd /usr/local/ssl/bin/openssl 
    linux-vdso.so.1 =>  (0x00007ffc30d3a000)
    libssl.so.1.0.0 => /usr/local/ssl/lib/libssl.so.1.0.0 (0x00007f9e8372e000)
    libcrypto.so.1.0.0 => /usr/local/ssl/lib/libcrypto.so.1.0.0 (0x00007f9e832c0000)
    ...

OpenSSL has a Compilation and Installation on its wiki. This has now been added to the wiki at Compilation and Installation | Using RPATHs

More Related Contents:

  1. Using openssl to get the certificate from a server
  2. Encryption/decryption doesn’t work well between two different openssl versions
  3. Linking OpenSSL libraries to a program
  4. What’s the difference between “statically linked” and “not a dynamic executable” from Linux ldd?
  5. Is there a programmatic way to inspect the current rpath on Linux?
  6. How to handle OpenSSL SSL_ERROR_WANT_READ / WANT_WRITE on non-blocking sockets
  7. Hierarchical ldd(1)
  8. How to use debug version of libc
  9. How to determine SSL cert expiration date from a PEM encoded certificate?
  10. What does “&” at the end of a linux command mean?
  11. Command line program to create website screenshots (on Linux) [closed]
  12. asynchronous IO io_submit latency in Ubuntu Linux
  13. Why is a tilde in a path not expanded in a shell script?
  14. Minimal executable size now 10x larger after linking than 2 years ago, for tiny programs?
  15. Linux bash: Multiple variable assignment
  16. How to sort a file in-place?
  17. How do I disassemble raw 16-bit x86 machine code?
  18. What is the meaning of a double dollar sign in bash/Makefile?
  19. How to substitute shell variables in complex text files
  20. How do Linux binary installers (.bin, .sh) work?
  21. Explain the effects of export LANG, LC_CTYPE, and LC_ALL [closed]
  22. When to wrap quotes around a shell variable?
  23. How can I permanently export a variable in Linux?
  24. Can’t clone a github repo on Linux via HTTPS
  25. How do I compile and link a 32-bit Windows executable using mingw-w64
  26. Alias with variable in bash [duplicate]
  27. How find out which process is using a file in Linux?
  28. Write system call won’t print characters from a register
  29. Creating temporary files in bash
  30. Maximum number of concurrent connections on a single port (socket) of Server

Leave a Comment