Confusion Configuring

Dr. Matthias St. Pierre Matthias.St.Pierre at
Sat Dec 18 08:11:00 UTC 2021


> But when I run
>   ./apps/openssl version -d
> it says:
>   OPENSSLDIR: "/usr/local/ssl"
> I was expecting /etc/pki/tls from the Configure line above.
> What am I missing?  How do I tell it where to find the default certificates?

It is very likely that your binary is actually loading the system's shared libraries instead of
the ones you just compiled. You can verify whether this using the `ldd` command, see below.

There is a shared library wrapper called `` which can be used to run
the compiled application correctly without installing it:

## incorrect (without wrapper)
msp at msppc:~/src/openssl-1.1.1$ apps/openssl version -d
OPENSSLDIR: "/etc/ssl"

## correct (using the wrapper)
msp at msppc:~/src/openssl-1.1.1$ util/ apps/openssl version -d
OPENSSLDIR: "/opt/openssl-1.1.1-dev/ssl"



## ldd output without wrapper

msp at msppc:~/src/openssl-1.1.1$ ldd apps/openssl (0x00007fff05b81000) => /usr/lib64/ (0x00007f6e46ade000) => /usr/lib64/ (0x00007f6e46820000) => /lib64/ (0x00007f6e4681a000) => /lib64/ (0x00007f6e467fa000) => /lib64/ (0x00007f6e46641000)
        /lib64/ (0x00007f6e46c5d000)

## ldd output using the wrapper

msp at msppc:~/src/openssl-1.1.1$ util/ ldd apps/openssl (0x00007ffd2032e000) => util/../ (0x00007f4a34aeb000) => util/../ (0x00007f4a347a2000) => /lib64/ (0x00007f4a34785000) => /lib64/ (0x00007f4a34765000) => /lib64/ (0x00007f4a345ac000)
        /lib64/ (0x00007f4a34c78000)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 7448 bytes
Desc: not available
URL: <>

More information about the openssl-users mailing list