Re: Custom Build Errors

Neil Horman <[email protected]> Wed, 15 Apr 2026 09:46:45 -0400
Newsgroups gmane.comp.encryption.openssl.user
Message-ID <CAJbOq17R7DaXJ5UtROiJ+2Q0hQE_2RsmDymM2KMh-Snb2XH1pA@mail.gmail.com>
--000000000000f7085f064f7ff2b2
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

did you run make install to put openssl-3.6 in that directory?  Or is that
your build directory?  If its the latter then the libraries (libcrypto.so.3
and libssl.so.3) will be in the root of that subtree, and LD_LIBRARY_PATH
should just be set to /PKI/openssl-3.6.0

Neil


On Wed, Apr 15, 2026 at 9:45=E2=80=AFAM Mark Sigsbee <[email protected]> w=
rote:

> Thanks for the response.
>
> /PKI/openssl-3.6.0/lib
>
> Doesn't exist.
>
> On Wed, Apr 15, 2026 at 9:31=E2=80=AFAM Neil Horman <[email protected]>=
 wrote:
>
>> you don't have the library search path configured correctly on your
>> platform.  Try running:
>>
>> LD_LIBRARY_PATH=3D/PKI/openssl-3.6.0/lib PKI/openssl-3.6.0/apps/openssl
>> list -providers -verbose
>>
>> That will allow the application to run.  You may also need to set
>> OPENSSL_CONF and OPENSSL_MODULES appropriately to find the needed
>> configuration and provider DSO's
>>
>> To avoid needing to set these values you need to configure openssl using
>> the --prefix option to set the latter two variables automatically.  To
>> avoid the need for LD_LIBRARY_PATH, you either need to configure your
>> environment to add /PKI/openssl-3.6.0/lib[64] to the library search path
>> globally, or install the library to a location already in the search pat=
h
>> (though the latter isn't recommended if you are using a system with a
>> default openssl already configured there).
>>
>> Neil
>>
>>
>> On Wed, Apr 15, 2026 at 9:13=E2=80=AFAM Mark Sigsbee <[email protected]=
> wrote:
>>
>>> I'm trying to build 3.6.0 with 3.2.1 for its approved FIPS library on
>>> Ubuntu 22.04. I know the default version of OpenSSL is 3.0 and basicall=
y
>>> leave it alone or the world will come to an end.
>>>
>>> I'm building a newer version hoping to resolve issues that I'm getting
>>> with 3.0 and confirmed by Ubuntu Pro support.
>>>
>>> I d/l'ed both into $ /PKI.
>>> I followed the build instructions provided here:  openssl/README-FIPS.m=
d
>>> at master =C2=B7 openssl/openssl
>>> <https://github.com/openssl/openssl/blob/master/README-FIPS.md>
>>>
>>> My check agrees with the check results in the readme.
>>>
>>> When I execute:
>>> $ sudo /PKI/openssl-3.6.0/apps/openssl list -providers -verbose
>>>
>>> I get this:
>>> /PKI$ sudo /PKI/openssl-3.6.0/apps/openssl list -providers -verbose
>>> /PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libssl.so.3:
>>> version `OPENSSL_3.4.0' not found (required by
>>> /PKI/openssl-3.6.0/apps/openssl)
>>> /PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libssl.so.3:
>>> version `OPENSSL_3.2.0' not found (required by
>>> /PKI/openssl-3.6.0/apps/openssl)
>>> /PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3:
>>> version `OPENSSL_3.0.9' not found (required by
>>> /PKI/openssl-3.6.0/apps/openssl)
>>> /PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3:
>>> version `OPENSSL_3.3.0' not found (required by
>>> /PKI/openssl-3.6.0/apps/openssl)
>>> /PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3:
>>> version `OPENSSL_3.5.0' not found (required by
>>> /PKI/openssl-3.6.0/apps/openssl)
>>> /PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3:
>>> version `OPENSSL_3.6.0' not found (required by
>>> /PKI/openssl-3.6.0/apps/openssl)
>>> /PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3:
>>> version `OPENSSL_3.4.0' not found (required by
>>> /PKI/openssl-3.6.0/apps/openssl)
>>> /PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3:
>>> version `OPENSSL_3.2.0' not found (required by
>>> /PKI/openssl-3.6.0/apps/openssl)
>>>
>>> How do I correct this and get my desired result?
>>>
>>> --
>>> You received this message because you are subscribed to the Google
>>> Groups "openssl-users" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
>>> To view this discussion visit
>>> https://groups.google.com/a/openssl.org/d/msgid/openssl-users/CAPqvXLPc=
7dDaR3S05bmdSAaFJSZ0k5uSmCs0AY_juicFindorQ%40mail.gmail.com
>>> <https://groups.google.com/a/openssl.org/d/msgid/openssl-users/CAPqvXLP=
c7dDaR3S05bmdSAaFJSZ0k5uSmCs0AY_juicFindorQ%40mail.gmail.com?utm_medium=3De=
mail&utm_source=3Dfooter>
>>> .
>>>
>>

--=20
You received this message because you are subscribed to the Google Groups "=
openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msg=
id/openssl-users/CAJbOq17R7DaXJ5UtROiJ%2B2Q0hQE_2RsmDymM2KMh-Snb2XH1pA%40ma=
il.gmail.com.

--000000000000f7085f064f7ff2b2
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">did you run make install to put openssl-3.6 in that direct=
ory?=C2=A0 Or is that your build directory?=C2=A0 If its the latter then th=
e libraries (libcrypto.so.3 and libssl.so.3) will be in the root of that su=
btree, and LD_LIBRARY_PATH should just be set to /PKI/openssl-3.6.0<div><br=
></div><div>Neil</div><div><br></div></div><br><div class=3D"gmail_quote gm=
ail_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Apr 15, =
2026 at 9:45=E2=80=AFAM Mark Sigsbee &lt;<a href=3D"mailto:[email protected]=
om">[email protected]</a>&gt; wrote:<br></div><blockquote class=3D"gmail_q=
uote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,2=
04);padding-left:1ex"><div dir=3D"ltr">Thanks for the response.<br><br>/PKI=
/openssl-3.6.0/lib<br><br>Doesn&#39;t exist.</div><br><div class=3D"gmail_q=
uote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Apr 15, 2026 at 9:31=E2=
=80=AFAM Neil Horman &lt;<a href=3D"mailto:[email protected]" target=3D"_=
blank">[email protected]</a>&gt; wrote:<br></div><blockquote class=3D"gma=
il_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,2=
04,204);padding-left:1ex"><div dir=3D"ltr">you=C2=A0don&#39;t have the libr=
ary search path configured correctly on your platform.=C2=A0 Try running:<d=
iv><br></div><div>LD_LIBRARY_PATH=3D/PKI/openssl-3.6.0/lib PKI/openssl-3.6.=
0/apps/openssl list -providers -verbose</div><div><br></div><div>That will =
allow the application to run.=C2=A0 You may also need to set OPENSSL_CONF a=
nd OPENSSL_MODULES appropriately to find the needed configuration and provi=
der DSO&#39;s</div><div><br></div><div>To avoid needing to set these values=
 you need to configure openssl using the --prefix option to set the latter =
two variables=C2=A0automatically.=C2=A0 To avoid the need for LD_LIBRARY_PA=
TH, you either need to configure your environment to add /PKI/openssl-3.6.0=
/lib[64] to the library search path globally, or install the library to a l=
ocation already in the search path (though the latter isn&#39;t recommended=
 if you are using a system with a default openssl already configured there)=
.</div><div><br></div><div>Neil</div><div><br></div></div><br><div class=3D=
"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Apr 15, 2026 at=
 9:13=E2=80=AFAM Mark Sigsbee &lt;<a href=3D"mailto:[email protected]" tar=
get=3D"_blank">[email protected]</a>&gt; wrote:<br></div><blockquote class=
=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rg=
b(204,204,204);padding-left:1ex"><div dir=3D"ltr">I&#39;m trying to build 3=
.6.0 with 3.2.1 for its approved FIPS library on Ubuntu 22.04. I know the d=
efault version of OpenSSL is 3.0 and basically leave it alone or the world =
will come to an end.<br><br>I&#39;m building a newer version hoping to reso=
lve issues that I&#39;m getting with 3.0 and confirmed by Ubuntu Pro suppor=
t.<div><br>I d/l&#39;ed both into $ /PKI.<br>I followed the build instructi=
ons provided here:=C2=A0

<a href=3D"https://github.com/openssl/openssl/blob/master/README-FIPS.md" t=
arget=3D"_blank">openssl/README-FIPS.md at master =C2=B7 openssl/openssl</a=
><br><br>My check agrees with the check results in the readme.<br><br>When =
I execute:<br>$ sudo /PKI/openssl-3.6.0/apps/openssl list -providers -verbo=
se<br><br>I get this:<br>/PKI$ sudo /PKI/openssl-3.6.0/apps/openssl list -p=
roviders -verbose<br>/PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu=
/libssl.so.3: version `OPENSSL_3.4.0&#39; not found (required by /PKI/opens=
sl-3.6.0/apps/openssl)<br>/PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linu=
x-gnu/libssl.so.3: version `OPENSSL_3.2.0&#39; not found (required by /PKI/=
openssl-3.6.0/apps/openssl)<br>/PKI/openssl-3.6.0/apps/openssl: /lib/x86_64=
-linux-gnu/libcrypto.so.3: version `OPENSSL_3.0.9&#39; not found (required =
by /PKI/openssl-3.6.0/apps/openssl)<br>/PKI/openssl-3.6.0/apps/openssl: /li=
b/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.3.0&#39; not found (r=
equired by /PKI/openssl-3.6.0/apps/openssl)<br>/PKI/openssl-3.6.0/apps/open=
ssl: /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.5.0&#39; not =
found (required by /PKI/openssl-3.6.0/apps/openssl)<br>/PKI/openssl-3.6.0/a=
pps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.6.0&#=
39; not found (required by /PKI/openssl-3.6.0/apps/openssl)<br>/PKI/openssl=
-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL=
_3.4.0&#39; not found (required by /PKI/openssl-3.6.0/apps/openssl)<br>/PKI=
/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3: version =
`OPENSSL_3.2.0&#39; not found (required by /PKI/openssl-3.6.0/apps/openssl)=
<br><br>How do I correct this and get my desired result?=C2=A0<br><div><br>=
</div></div></div>

<p></p>

-- <br>
You received this message because you are subscribed to the Google Groups &=
quot;openssl-users&quot; group.<br>
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:openssl-users+unsubscribe-MCmKBN63+BlAfugRpC6u6w@public.gmane.org" target=3D"=
_blank">openssl-users+unsubscribe-MCmKBN63+BlAfugRpC6u6w@public.gmane.org</a>.<br>
To view this discussion visit <a href=3D"https://groups.google.com/a/openss=
l.org/d/msgid/openssl-users/CAPqvXLPc7dDaR3S05bmdSAaFJSZ0k5uSmCs0AY_juicFin=
dorQ%40mail.gmail.com?utm_medium=3Demail&amp;utm_source=3Dfooter" target=3D=
"_blank">https://groups.google.com/a/openssl.org/d/msgid/openssl-users/CAPq=
vXLPc7dDaR3S05bmdSAaFJSZ0k5uSmCs0AY_juicFindorQ%40mail.gmail.com</a>.<br>
</blockquote></div>
</blockquote></div>
</blockquote></div>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;openssl-users&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:openssl-users+unsubscribe-MCmKBN63+BlAfugRpC6u6w@public.gmane.org">openssl-us=
[email protected]</a>.<br />
To view this discussion visit <a href=3D"https://groups.google.com/a/openss=
l.org/d/msgid/openssl-users/CAJbOq17R7DaXJ5UtROiJ%2B2Q0hQE_2RsmDymM2KMh-Snb=
2XH1pA%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://gro=
ups.google.com/a/openssl.org/d/msgid/openssl-users/CAJbOq17R7DaXJ5UtROiJ%2B=
2Q0hQE_2RsmDymM2KMh-Snb2XH1pA%40mail.gmail.com</a>.<br />

--000000000000f7085f064f7ff2b2--