Good morning, and apologies for the length of the post...
I have run into a strange conflict using openssl-0.9.7e-r1 / perl on gentoo. An
perl app that uses Net::FTP (amongst others) generates the following error when
run:
/usr/bin/perl: symbol lookup error: /usr/lib/libssl.so.0.9.7: undefined symbol:
EVP_idea_cbc
After going to the ebuild, putting it in overlay and removing no-idea from
the configure options, I rebuilt the package on our build host (emerge -bv
openssl) and then distributed to the affected server. There was no effect -
same error, even though openssl no-idea shows that idea is installed and
working. strings /usr/lib/ssl.so.0.9.7 | grep EVP_idea_cbc also come up fine.
What is stranger though is when taking the source, running ./config, and making
libssl.so.0.9.7, then copying into /usr/lib the error goes away. Commenting out
Use Net::FTP; also makes that error go away, but breaks the script. Net::FTP
only seems a culprit in this script and I've asked the developer if there are
any routines in Net::FTP that use crypto that he's calling...
Diffing the Makefiles doesn't seem to show *anything* that would cause a
significant difference in output (see end). Still, disabling some items like
--noexecstack has had no effect (and probably a bad idea, after reading
bugs.gentoo.org). The gentoo patches are not causing the discrepancy afaict,
because copying the good makefile over yields working libs. It's worth noting
that with the good makefile I have to do a manual make libssl.0.9.7. I have
als remerged perl to be on the safe side.
So, with a stock system, I think it's strange that a standard pm would require
crypto disabled by default, but weirder is that perl isn't finding the symbol.
Severely stumped - any ideas?
P.S. I've also done an ebuild that basically uncompiles the source, runs config
with the right options, and goes... but that seems a bit reckless given that
the gentoo dev team put that stuff in there for a reason... right?
# Makefile from openssl default ./config , Makefile.ebuild cp from
/var/tmp/portage/openssl*
diff Makefile Makefile.ebuild
64c64
CFLAG= -fPIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H
-DOPENSSL_NO_KRB5 -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -m486 -Wall
-DSHA1_ASM -DMD5_ASM -DRMD160_ASM
---
CFLAG= -fPIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H
-DOPENSSL_NO_KRB5 -DL_ENDIAN -DTERMIO-Wall -O3 -march=pentium3
-mcpu=pentium4 -pipe -fomit-frame-pointer -Wa,--noexecstack -DSHA1_ASM
-DMD5_ASM -DRMD160_ASM
106c106
FIPS_DES_ENC= fips_des_enc.o
---
FIPS_DES_ENC=
180,181c180,181
DIRS= crypto fips ssl $(SHLIB_MARK) sigs apps test tools
SHLIBDIRS= fips crypto ssl
---
DIRS= crypto ssl $(SHLIB_MARK) sigs apps test tools
SHLIBDIRS= crypto ssl
--
gentoo-user@gentoo.org mailing list
