[openssl-users] Compiling OpenSSL 1.1.0e with AF_ALG engine

Matt Caswell matt at openssl.org
Wed Feb 22 12:50:59 UTC 2017

On 22/02/17 09:11, David Oberhollenzer wrote:
> Running readelf on afalg.so confirms that the symbol is indeed not
> in the binary. Am I missing some magic configure options or is there
> some other problem?

I just tried the exact same Configure line as you on 1.1.0e and it all
works fine:

$ readelf afalg.so -s | grep bind_engine
    66: 0000000000002840   319 FUNC    GLOBAL DEFAULT   12 bind_engine
    95: 0000000000002840   319 FUNC    GLOBAL DEFAULT   12 bind_engine

You said you:

> removed the kernel version check for the
> afalg engine from the Configure script since AFAIK the CentOS
> kernel should have all of that back ported.

There is a similar check in engines/afalg/e_afalg.c which checks the
version of the kernel headers. Did you also amend that:

# ifndef PEDANTIC
#  warning "AFALG ENGINE requires Kernel Headers >= 4.1.0"
#  warning "Skipping Compilation of AFALG engine"
# endif
void engine_load_afalg_int(void);
void engine_load_afalg_int(void)


More information about the openssl-users mailing list