Hi,

On Fri, Jul 07, 2023 at 08:58:11PM +0200, Arne Schwabe wrote:
> This also shows the extra data from the OpenSSL error function that
> can contain extra information. For example, the command
> 
>     openvpn --providers vollbit
> 
> will print out (on macOS):
> 
>      OpenSSLerror:12800067:DSO support routines::could not load the shared 
> library:filename(/opt/homebrew/Cellar/openssl@3/3.1.1_1/lib/ossl-modules/vollbit.dylib):
>  
> dlopen(/opt/homebrew/Cellar/openssl@3/3.1.1_1/lib/ossl-modules/vollbit.dylib, 
> 0x0002): tried: 
> '/opt/homebrew/Cellar/openssl@3/3.1.1_1/lib/ossl-modules/vollbit.dylib' (no 
> such file), 
> '/System/Volumes/Preboot/Cryptexes/OS/opt/homebrew/Cellar/openssl@3/3.1.1_1/lib/ossl-modules/vollbit.dylib'
>  (no such file), 
> '/opt/homebrew/Cellar/openssl@3/3.1.1_1/lib/ossl-modules/vollbit.dylib' (no 
> such file)

Feature-ACK on providing more detail, because otherwise these errors
can get really hard to track down.

Your example above is somewhat excessive on repeating paths, but I do
not see this on my FreeBSD test case

$ src/openvpn/openvpn --providers legacyXX default --show-tls
2023-07-10 17:44:27 OpenSSLerror:12800067:DSO support routines::could not load 
the shared library:filename(/usr/lib/ossl-modules/legacyXX.so): 
/usr/lib/ossl-modules/legacyXX.so: Undefined symbol "ossl_md4_functions"
2023-07-10 17:44:27 OpenSSLerror:12800067:DSO support routines::could not load 
the shared library:
2023-07-10 17:44:27 OpenSSLerror:07880025:common libcrypto 
routines::reason(524325):name=legacyXX

"this is just the right amount of details" :-) - for something that
does not exist, I get

2023-07-10 17:45:17 OpenSSLerror:12800067:DSO support routines::could not load 
the shared library:filename(/usr/lib/ossl-modules/legacyYY.so): Cannot open 
"/usr/lib/ossl-modules/legacyYY.so"


Code-wise, I would prefer to have someone who understands OpenSSL give
this another look...  Selva, Antonio?  Thanks :-)

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             g...@greenie.muc.de

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to