I'm building haproxy 2.0.0,

        git log | head
                commit ba23630ad009464dc8e4d01dac9ce779eb84cc2a
                Author: Willy Tarreau <w...@1wt.eu>
                Date:   Sun Jun 16 20:00:26 2019 +0200

                    [RELEASE] Released version 2.0.0

                    Released version 2.0.0 with the following main changes :
                        - MINOR: fd: Don't use atomic operations when it's not 
                        - DOC: mworker-prog: documentation for the program 
                        - MINOR: http: add a new "http-request replace-uri" 

on linux.

I use a local openssl build/install,

        which openssl
        openssl version
                OpenSSL 1.1.1c  28 May 2019

setting ssl flags to use that local instance, with rpath, haproxy build has no 

        make V=1 \
        TARGET=linux-glibc \
        USE_SYSTEMD=1 \
        USE_PCRE2=1 \
        USE_PCRE2_JIT=1 \
        USE_OPENSSL=1 \
        SSL_LIB=" -L/opt/prod/openssl111c/lib64 
-Wl,-rpath,/opt/prod/openssl111c/lib64" \
        SSL_INC=" -I/opt/prod/openssl111c/include" \
        USE_THREAD=1 \
        USE_TFO=1 \

Checking the install,

        make install PREFIX=/opt/prod/haproxy
        /opt/prod/haproxy/sbin/haproxy -vv
                HA-Proxy version 2.0.0 2019/06/16 - https://haproxy.org/
                Build options :
                  TARGET  = linux-glibc
                Built with multi-threading support (MAX_THREADS=64, default=4).
                Built with OpenSSL version : OpenSSL 1.1.0i-fips  14 Aug 2018
                Running on OpenSSL version : OpenSSL 1.1.1c  28 May 2019 

reports an OpenSSL version mismatch.

What do I need to change in the haproxy build config so that is correctly 
recognizes the rpath, and consistently builds & links with the specified 
openssl local instance?


Reply via email to