need help cross-compiling SSL for 5 different QNX OS target platforms

[Michael Wojcik]

> From: openssl-users <openssl-users-bounces at openssl.org> On Behalf Of Williams, Roger
> Sent: Monday, 8 November, 2021 07:55


> I am trying to cross-compile the SSL software

Specifically, you're trying to build OpenSSL 1.1.1l, using cross-compilation. OpenSSL is only one implementation of SSL/TLS, so calling it "the SSL software" is not technically correct.

> ... for [various versions and platforms] of the QNX Operating System:

> While trying to compile SSH 8.8, it is providing the error:

>    In file included from openssl-compat.c:32:
>         openssl-compat.h:37:3: error: #error OpenSSL 1.0.1 or greater is required

>To satisfy this condition, I downloaded openssl-1.1.1l.    I do not know how to
> configure/make this software to create the 5 sets of SSL libraries required by
> SSH to make for my 5 targets. 

Have you read the README and INSTALL files in the OpenSSL distribution?

That may not help you, however. According to CHANGES, QNX support was removed for the 1.1.1 stream due to licensing issues with the contributions that had been made for it. So it appears you'll have to do a fresh port, not simply a build. That's generally a job for someone who has a good understanding of cryptography, TLS, and OpenSSL.

You might be able to build the final 1.1.0 release (1.1.0l). It can be found at https://www.openssl.org/source/old/1.1.0/.

There are serious security issues with using older, unsupported OpenSSL versions, but 1) you'll presumably only be using portions of the cryptography layer, and not TLS support, since this is for SSH; and 2) you don't appear to have any other viable choice, at least based on what you've told us.

For all I know, there's an alternative cryptography library you can use with SSH on QNX. I don't work on that platform, and we don't know what possibilities you've investigated.

-- 
Michael Wojcik