Compiling OpenSSL without compabitlity with for OpenSSL 1.0

Bjoern Bidar bjorn.bidar at jolla.com
Wed Sep 9 19:43:13 UTC 2020


Hey, 


Is it possible to build openssl this way?
I'm current trying to build it this way to dest for deprecated API usage.


I configure openssl like this:
./Configure \
    --prefix=%{_prefix} --openssldir=%{_sysconfdir}/pki/tls ${sslflags} \
    zlib enable-camellia enable-seed enable-rfc3779 \
    enable-cms enable-md2 enable-rc5 \
    enable-weak-ssl-ciphers \
    no-mdc2 no-ec2m no-sm2 no-sm4 \
    shared  ${sslarch} '-DDEVRANDOM="\"/dev/urandom\""'


But my build isn't able to link sucessfully:
gcc -pthread -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-
protector --param=ssp-buffer-size=4 -Wformat -Wformat-security -
DOPENSSL_API_COMPAT=0x10100000L -m32 -msse -msse2 -march=i686 -mfpmath=sse -
mtune=generic -fno-omit-frame-pointer -fasynchronous-unwind-tables -
D_FILE_OFFSET_BITS=64 -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions 
-fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security -m32 -
msse -msse2 -march=i686 -mfpmath=sse -mtune=generic -fno-omit-frame-pointer -
fasynchronous-unwind-tables -Wa,--noexecstack -Wa,--generate-missing-build-
notes=yes -L.   \
     -o apps/openssl apps/asn1pars.o apps/ca.o apps/ciphers.o apps/cms.o apps/
crl.o apps/crl2p7.o apps/dgst.o apps/dhparam.o apps/dsa.o apps/dsaparam.o 
apps/ec.o apps/ecparam.o apps/enc.o apps/engine.o apps/errstr.o apps/gendsa.o 
apps/genpkey.o apps/genrsa.o apps/nseq.o apps/ocsp.o apps/openssl.o apps/
passwd.o apps/pkcs12.o apps/pkcs7.o apps/pkcs8.o apps/pkey.o apps/pkeyparam.o 
apps/pkeyutl.o apps/prime.o apps/rand.o apps/rehash.o apps/req.o apps/rsa.o 
apps/rsautl.o apps/s_client.o apps/s_server.o apps/s_time.o apps/sess_id.o 
apps/smime.o apps/speed.o apps/spkac.o apps/srp.o apps/storeutl.o apps/ts.o 
apps/verify.o apps/version.o apps/x509.o \
     apps/libapps.a -lssl -lcrypto -lz -ldl -pthread 
 /usr/bin/ld: ./libcrypto.so: undefined reference to `OpenSSLDie'


Have a nice day,


Björn Bidar
 




More information about the openssl-users mailing list