From nobody Thu May 11 15:45:18 2023 X-Original-To: freebsd-arch@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QHGSV0vqrz4BNNc for ; Thu, 11 May 2023 15:45:30 +0000 (UTC) (envelope-from kevans@freebsd.org) Received: from smtp.freebsd.org (smtp.freebsd.org [96.47.72.83]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QHGSV0QSkz4bNn; Thu, 11 May 2023 15:45:30 +0000 (UTC) (envelope-from kevans@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1683819930; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=5a7otI97PcDGXdz/Cwi1/6odZaKer1veDNR5t0+ln8w=; b=VaHlO2+8zBw/IShMKblINpwIcPXXw8xQ5nV7nGstmpDzt+GYGIPD94Zx/V0TdW33s6WtIZ qe6YHtUDSCJsla3+65f2Cd7FkTOf8hvfBMHg2zFAJ2tHO3Ml5C+czqkBs8R4HxTch33wNf zvV5ie/rh+1cc54mPckSkXX3lwjy/DJLi8xCxmQM5Wvunygf038qiACgx1oYF6Bgyenh9e sCLIwVXS+99xfoJ7rsXfZeePTJfSiqIhzH57udzrrKlQi6Afr2CUBmHGTwl21zysoIhKKU outv6Sm4A4inoojHx2JsV4YOYvAZbU6P8+yNLly6oW8lz7RAxmucNJalahVBDQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1683819930; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=5a7otI97PcDGXdz/Cwi1/6odZaKer1veDNR5t0+ln8w=; b=DK60CCO3xgfOE1DhkTcXfEPantoQSzE+IbG2OsusyyLhgngexuSJMsQmMwPivOMHOFdhD9 JV2WNNkE9aN2aJYTCDhNZ+WpMwvuuwLEK7Q8sCfs9ARzhYlFpnm4d0f6VMZBGuxUQHqyi9 X7ugy/vusIfcUkFOg3+fQslDdQgbrWg1qPDyPllmvOCDoLSpmb0wa98612BLkUQ9WdtMBM Nlw92wVMAEDAemL/Ii8w/DWUXmnCRLr9l+g7lDcccg6qW31AH8v6gwTycb3oE1Fc59DS8w tPjiKUr3qYNe5/J12POkswPcNHliM09Nl3i5Zg5Qx3BpeBCSJa5asBIY0pbYkQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1683819930; a=rsa-sha256; cv=none; b=TKkwEcE9Wr6mH3dCL7kt08TghN811G6i2yUTSP/LNFAb9CcrbRtDaLlvwYVlr9OW7GYGF9 SoASjC7pc7cgYa0NykZZeaZUFS/Ao4umIO5PxdJaW7cffdjp01MEVFkbTdHCF9l/b72Sb8 boYvw5bNWAwr9pMLFAOwJI+xlzzHk6CoaVrJ4AlEF4WWae1Vk+g7kaz0FvGcWq8ckRqsmU nNkrd+YcH6PdqwwtN41ansloKTGFJyo7izlhDjeVy7Rux+zACRCak1Y0PbqSio86pbXNWb Yj7iLMUZfLccMdzCVo511Ja3Tg+6ZevnHjjVq/9PjkYWgeK7EsWWiPt2Tzmm7Q== Received: from mail-qv1-f51.google.com (mail-qv1-f51.google.com [209.85.219.51]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1D4" (verified OK)) (Authenticated sender: kevans) by smtp.freebsd.org (Postfix) with ESMTPSA id 4QHGST6MqSzMDL; Thu, 11 May 2023 15:45:29 +0000 (UTC) (envelope-from kevans@freebsd.org) Received: by mail-qv1-f51.google.com with SMTP id 6a1803df08f44-61b71b7803bso42266656d6.1; Thu, 11 May 2023 08:45:29 -0700 (PDT) X-Gm-Message-State: AC+VfDzV5yDDTW5L2BD7BLco9QriUhWnH+HOgXMPYWzUBdL0Y61qhtMV V1Om3ukASG6/1wjy+wHL+HhJKnNInkEGziOrGvE= X-Google-Smtp-Source: ACHHUZ42wVPWlSmRRTln3cVlXMe49Gw5gQJa7Xhm0bas/HbereHMVQ1ysG3pnOsw5bQAe94X1P/BvRz09eW1Mj8QYF0= X-Received: by 2002:ad4:5b8f:0:b0:61d:be1e:7c4e with SMTP id 15-20020ad45b8f000000b0061dbe1e7c4emr31937283qvp.12.1683819929450; Thu, 11 May 2023 08:45:29 -0700 (PDT) List-Id: Discussion related to FreeBSD architecture List-Archive: https://lists.freebsd.org/archives/freebsd-arch List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-arch@freebsd.org MIME-Version: 1.0 References: In-Reply-To: From: Kyle Evans Date: Thu, 11 May 2023 10:45:18 -0500 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: OpenSSL 3.0 for 14.0-RELEASE: issues with 1.x/3.x symbol clashing, ports linking against base OpenSSL, ports that don't compile/link against OpenSSL 3, etc To: Enji Cooper Cc: Antoine Brodin , Pierre Pronchery , freebsd-arch@freebsd.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-ThisMailContainsUnwantedMimeParts: N On Thu, May 11, 2023 at 9:54=E2=80=AFAM Enji Cooper = wrote: > > > > On May 11, 2023, at 00:23, Antoine Brodin wrote: > > > > =EF=BB=BFOn Thu, May 11, 2023 at 6:31=E2=80=AFAM Pierre Pronchery > > wrote: > >> > >> Hi everyone, > >> > >> It's been a long and tough fight, but I finally managed to complete a > >> `make buildworld` on amd64 with the latest state of my work on OpenSSL > >> 3; see https://github.com/freebsd/freebsd-src/pull/740 for a first dra= ft > >> of a pull-request via GitHub. > >> > >> I will probably not be able to work on this again until the DevSummit = at > >> BSDCan, so feel free to take it from there until then. > >> > >> HTH! > >> -- khorben > > > > Thanks, I have this error during buildworld: > > > > =3D=3D=3D> secure/lib/libcrypto/modules/fips (all) > > make[6]: /usr/obj/poudriere/data/src-openssl3/amd64.amd64/secure/lib/li= bcrypto/modules/fips/.depend, > > 1: ignoring stale .depend for > > /usr/obj/poudriere/data/src-openssl3/amd64.amd64/tmp/usr/lib/libcrypto.= a > > building shared library fips.so > > cc -target x86_64-unknown-freebsd14.0 > > --sysroot=3D/usr/obj/poudriere/data/src-openssl3/amd64.amd64/tmp > > -B/usr/obj/poudriere/data/src-openssl3/amd64.amd64/tmp/usr/bin > > -Wl,-zrelro -fstack-protector-strong -shared -Wl,-x > > -Wl,--fatal-warnings -Wl,--warn-shared-textrel -o fips.so.full > > -Wl,-soname,fips.so fips_entry.pico fipsprov.pico self_test.pico > > self_test_kats.pico -lcrypto > > ld: error: unable to find library -lcrypto > > cc: error: linker command failed with exit code 1 (use -v to see invoca= tion) > > *** Error code 1 > > Good find! > > The modules directory will likely need to be built in a later stage of wo= rld (after libcrypto has been installed). That, or LDFLAGS needs to be adju= sted to find libcrypto in the build tree. > I suspect it's a fairly simple one, actually: move all of the parts that actually build libcrypto into a subdir of secure/lib/libcrypto and make sure there's a proper SUBDIR_DEPENDS_modules=3D libcrypto. The module is built in secure/lib/libcrypto/Makefile, but I would guess either it's racing the build of modules/ (SUBDIR) against the build of the module in the parent Makefile, or it's just going to build the SUBDIR first every time. I don't recall the exact behavior of make here. libcrypto is in _prebuild_libs, but I don't think we have any way you can actually tell we're in the prebuild phase to avoid SUBDIR'ing in the modules/ while we're doing the earlier build. If we did, the later all pass should descend back into libcrypto/ and do nothing for the lib itself but build the modules. Thanks, Kyle Evans