On 6/22/18 7:44 AM, Willy Tarreau wrote:
> Did you try to disable or adjust the PCRE flags as I indicated in
> previous e-mail to see if it's the side effect ?
I have _now_ ... needed a few minutes.
> One possible cause could be pcre-config reporting -I/usr and causing
> -I/usr/inc to be included before the SSL_INC path. A quick test could consist
> in building without PCRE to validate or invalidate that assumption. If it
> fixes it, please retry with "PCREDIR=" so that it doesn't try to set
> PCRE_INC/PCRE_LIB.
There's certainly a pcre-related 'oddity' ... regardless of build with, or
without, PCRE, it's linking *something* with pcre1 lib.
Notice ...
Built WITH pcre2's libs spec'd
make V=1 \
TARGET=linux2628 \
USE_SYSTEMD=1 \
USE_PCRE2=1 \
USE_PCRE2_JIT=1 \
USE_OPENSSL=1 \
SSL_INC=" -I/usr/local/openssl11/include" \
SSL_LIB=" -L/usr/local/openssl11/lib64
-Wl,-rpath,/usr/local/openssl11/lib64" \
PCRE2_INC=" -I/usr/local/include" \
PCRE2_LIB=" -L/usr/local/lib64 -Wl,-rpath,/usr/local/lib64" \
ADDLIB="-ldl -lssl -lcrypto -lpcre2-posix -lpcre2-8"
ldd ./haproxy | egrep -i "ssl|crypto|pcre"
libssl.so.1.1 => /usr/local/openssl11/lib64/libssl.so.1.1
(0x00007f1d575c8000)
libcrypto.so.1.1 => /usr/local/openssl11/lib64/libcrypto.so.1.1
(0x00007f1d5712d000)
libpcre2-8.so.0 => /usr/local/lib64/libpcre2-8.so.0
(0x00007f1d56c0f000)
libpcre2-posix.so.2 => /usr/local/lib64/libpcre2-posix.so.2
(0x00007f1d56a0c000)
??? libpcre.so.1 => /usr/lib64/libpcre.so.1 (0x00007f27070bd000)
haproxy -vv
...
Built with OpenSSL version : OpenSSL 1.1.0h-fips 27 Mar 2018
Running on OpenSSL version : OpenSSL 1.1.0h 27 Mar 2018
...
Built withOUT pcre2
make V=1 \
TARGET=linux2628 \
USE_SYSTEMD=1 \
USE_OPENSSL=1 \
SSL_INC=" -I/usr/local/openssl11/include" \
SSL_LIB=" -L/usr/local/openssl11/lib64
-Wl,-rpath,/usr/local/openssl11/lib64" \
ADDLIB="-ldl -lssl -lcrypto"
...
Built without PCRE or PCRE2 support (using libc's regex instead)
...
ldd ./haproxy | egrep -i "ssl|crypto|pcre"
libssl.so.1.1 => /usr/local/openssl11/lib64/libssl.so.1.1
(0x00007f34c9591000)
libcrypto.so.1.1 => /usr/local/openssl11/lib64/libcrypto.so.1.1
(0x00007f34c90f6000)
??? libpcre.so.1 => /usr/lib64/libpcre.so.1 (0x00007f0a0c9d9000)
haproxy -vv
Built with OpenSSL version : OpenSSL 1.1.0h-fips 27 Mar 2018
Running on OpenSSL version : OpenSSL 1.1.0h 27 Mar 2018
Now to track down what's sourcing that "libpcre.so.1 =>
/usr/lib64/libpcre.so.1"