Re: Custom Build Errors
Mark Sigsbee <[email protected]> Wed, 15 Apr 2026 13:39:31 -0400
| Newsgroups | gmane.comp.encryption.openssl.user |
|---|---|
| Message-ID | <CAPqvXLO8m5+scte1y3P=fcc9Cb2Yhpb9+S_S4SM1Pmsyt158TQ@mail.gmail.com> |
--0000000000006b9648064f8333e5 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable According to this: openssl/README-FIPS.md at master =C2=B7 openssl/openssl <https://github.com/openssl/openssl/blob/master/README-FIPS.md> I executed this in the 3.6.0 directory. And I did it in the 3.6.0. directory based on the previous section: $ cp ../openssl-3.1.2/providers/fips.so providers/. $ cp ../openssl-3.1.2/providers/fipsmodule.cnf providers/. // Note that for OpenSSL 3.1.2 that the `fipsmodule.cnf` file should not // be copied across multiple machines if it contains an entry for // `install-status`. (Otherwise the self tests would be skipped). // Validate the output of the following to make sure we are using the // OpenSSL 3.1.2 FIPS provider $ ./util/wrap.pl -fips apps/openssl list -provider-path providers \ -provider fips -providers // Now run the current tests using the OpenSSL 3.1.2 FIPS provider. $ make tests On Wed, Apr 15, 2026 at 10:54=E2=80=AFAM Neil Horman <[email protected]> = wrote: > Mark- > Based on what you've described, is it possible that, when you tried > to make use of 3.1.2 provider with the 3.6 library that you, in addition = to > copying the 3.1.2 fips.so file from your 3.1.2 build, you also copied the > 3.1.2 libcrypto.so.3 and libssl.so.3 files to the 3.6 directory? That > would also result in the errors that you are seeing. Only the fips.so fi= le > should have been copied from the 3.1.2 build. > > Neil > > > On Wed, Apr 15, 2026 at 10:34=E2=80=AFAM Mark Sigsbee <[email protected]= > wrote: > >> Honestly, I've been following so may threads trying to resolve this, at >> this point I'm not sure what I did. I do know that both of the lib*.so.= 3 >> files are in the root folder (openssl-3.6.0). >> >> $ sudo echo $LD_LIBRARY_PATH >> /PKI/openssl-3.6.0 >> >> I get the same error when re-executing the command. >> >> On Wed, Apr 15, 2026 at 9:46=E2=80=AFAM Neil Horman <[email protected]= > wrote: >> >>> did you run make install to put openssl-3.6 in that directory? Or is >>> that your build directory? If its the latter then the libraries >>> (libcrypto.so.3 and libssl.so.3) will be in the root of that subtree, a= nd >>> LD_LIBRARY_PATH should just be set to /PKI/openssl-3.6.0 >>> >>> Neil >>> >>> >>> On Wed, Apr 15, 2026 at 9:45=E2=80=AFAM Mark Sigsbee <[email protected]= m> wrote: >>> >>>> Thanks for the response. >>>> >>>> /PKI/openssl-3.6.0/lib >>>> >>>> Doesn't exist. >>>> >>>> On Wed, Apr 15, 2026 at 9:31=E2=80=AFAM Neil Horman <[email protected]= rg> >>>> wrote: >>>> >>>>> you don't have the library search path configured correctly on your >>>>> platform. Try running: >>>>> >>>>> LD_LIBRARY_PATH=3D/PKI/openssl-3.6.0/lib PKI/openssl-3.6.0/apps/opens= sl >>>>> list -providers -verbose >>>>> >>>>> That will allow the application to run. You may also need to set >>>>> OPENSSL_CONF and OPENSSL_MODULES appropriately to find the needed >>>>> configuration and provider DSO's >>>>> >>>>> To avoid needing to set these values you need to configure openssl >>>>> using the --prefix option to set the latter two variables automatical= ly. >>>>> To avoid the need for LD_LIBRARY_PATH, you either need to configure y= our >>>>> environment to add /PKI/openssl-3.6.0/lib[64] to the library search p= ath >>>>> globally, or install the library to a location already in the search = path >>>>> (though the latter isn't recommended if you are using a system with a >>>>> default openssl already configured there). >>>>> >>>>> Neil >>>>> >>>>> >>>>> On Wed, Apr 15, 2026 at 9:13=E2=80=AFAM Mark Sigsbee <msigsbee@gmail.= com> >>>>> wrote: >>>>> >>>>>> I'm trying to build 3.6.0 with 3.2.1 for its approved FIPS library o= n >>>>>> Ubuntu 22.04. I know the default version of OpenSSL is 3.0 and basic= ally >>>>>> leave it alone or the world will come to an end. >>>>>> >>>>>> I'm building a newer version hoping to resolve issues that I'm >>>>>> getting with 3.0 and confirmed by Ubuntu Pro support. >>>>>> >>>>>> I d/l'ed both into $ /PKI. >>>>>> I followed the build instructions provided here: openssl/README-FIP= S.md >>>>>> at master =C2=B7 openssl/openssl >>>>>> <https://github.com/openssl/openssl/blob/master/README-FIPS.md> >>>>>> >>>>>> My check agrees with the check results in the readme. >>>>>> >>>>>> When I execute: >>>>>> $ sudo /PKI/openssl-3.6.0/apps/openssl list -providers -verbose >>>>>> >>>>>> I get this: >>>>>> /PKI$ sudo /PKI/openssl-3.6.0/apps/openssl list -providers -verbose >>>>>> /PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libssl.so.3: >>>>>> version `OPENSSL_3.4.0' not found (required by >>>>>> /PKI/openssl-3.6.0/apps/openssl) >>>>>> /PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libssl.so.3: >>>>>> version `OPENSSL_3.2.0' not found (required by >>>>>> /PKI/openssl-3.6.0/apps/openssl) >>>>>> /PKI/openssl-3.6.0/apps/openssl: >>>>>> /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.0.9' not fo= und >>>>>> (required by /PKI/openssl-3.6.0/apps/openssl) >>>>>> /PKI/openssl-3.6.0/apps/openssl: >>>>>> /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.3.0' not fo= und >>>>>> (required by /PKI/openssl-3.6.0/apps/openssl) >>>>>> /PKI/openssl-3.6.0/apps/openssl: >>>>>> /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.5.0' not fo= und >>>>>> (required by /PKI/openssl-3.6.0/apps/openssl) >>>>>> /PKI/openssl-3.6.0/apps/openssl: >>>>>> /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.6.0' not fo= und >>>>>> (required by /PKI/openssl-3.6.0/apps/openssl) >>>>>> /PKI/openssl-3.6.0/apps/openssl: >>>>>> /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.4.0' not fo= und >>>>>> (required by /PKI/openssl-3.6.0/apps/openssl) >>>>>> /PKI/openssl-3.6.0/apps/openssl: >>>>>> /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.2.0' not fo= und >>>>>> (required by /PKI/openssl-3.6.0/apps/openssl) >>>>>> >>>>>> How do I correct this and get my desired result? >>>>>> >>>>>> -- >>>>>> You received this message because you are subscribed to the Google >>>>>> Groups "openssl-users" group. >>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>> send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org >>>>>> To view this discussion visit >>>>>> https://groups.google.com/a/openssl.org/d/msgid/openssl-users/CAPqvX= LPc7dDaR3S05bmdSAaFJSZ0k5uSmCs0AY_juicFindorQ%40mail.gmail.com >>>>>> <https://groups.google.com/a/openssl.org/d/msgid/openssl-users/CAPqv= XLPc7dDaR3S05bmdSAaFJSZ0k5uSmCs0AY_juicFindorQ%40mail.gmail.com?utm_medium= =3Demail&utm_source=3Dfooter> >>>>>> . >>>>>> >>>>> --=20 You received this message because you are subscribed to the Google Groups "= openssl-users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org To view this discussion visit https://groups.google.com/a/openssl.org/d/msg= id/openssl-users/CAPqvXLO8m5%2Bscte1y3P%3Dfcc9Cb2Yhpb9%2BS_S4SM1Pmsyt158TQ%= 40mail.gmail.com. --0000000000006b9648064f8333e5 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">According to this:=C2=A0 <a href=3D"https://github.com/openssl/openssl/blob/master/README-FIPS.md">o= penssl/README-FIPS.md at master =C2=B7 openssl/openssl</a><br><br>I execute= d this in the 3.6.0 directory. And I did it in the 3.6.0. directory based o= n the previous section:<br><br>$ cp ../openssl-3.1.2/providers/fips.so prov= iders/.<br>$ cp ../openssl-3.1.2/providers/fipsmodule.cnf providers/.<br>//= Note that for OpenSSL 3.1.2 that the `fipsmodule.cnf` file should not<br>/= / be copied across multiple machines if it contains an entry for<br>// `ins= tall-status`. (Otherwise the self tests would be skipped).<br><br>// Valida= te the output of the following to make sure we are using the<br>// OpenSSL = 3.1.2 FIPS provider<br>$ ./util/<a href=3D"http://wrap.pl">wrap.pl</a> -fip= s apps/openssl list -provider-path providers \<br>-provider fips -providers= <br><br>// Now run the current tests using the OpenSSL 3.1.2 FIPS provider.= <br>$ make tests</div><br><div class=3D"gmail_quote gmail_quote_container">= <div dir=3D"ltr" class=3D"gmail_attr">On Wed, Apr 15, 2026 at 10:54=E2=80= =AFAM Neil Horman <<a href=3D"mailto:[email protected]">nhorman@openss= l.org</a>> wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"ma= rgin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:= 1ex"><div dir=3D"ltr">Mark-<div>=C2=A0 =C2=A0 =C2=A0Based on what you'v= e described, is it possible that, when you tried to make use of 3.1.2 provi= der with the 3.6 library that you, in addition to copying the 3.1.2 fips.so= file from your 3.1.2 build, you also copied the 3.1.2 libcrypto.so.3 and l= ibssl.so.3 files to the 3.6 directory?=C2=A0 That would also result in the = errors that you are seeing.=C2=A0 Only the fips.so file should have been co= pied from the 3.1.2 build.</div><div><br></div><div>Neil</div><div><br></di= v></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr= ">On Wed, Apr 15, 2026 at 10:34=E2=80=AFAM Mark Sigsbee <<a href=3D"mail= to:[email protected]" target=3D"_blank">[email protected]</a>> wrote:<= br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8e= x;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"= >Honestly, I've been following so may threads trying to resolve this, a= t this point I'm not sure what I did.=C2=A0 I do know that both of the = lib*.so.3 files are in the root folder (openssl-3.6.0).<br><br>$ sudo echo = $LD_LIBRARY_PATH<div>/PKI/openssl-3.6.0<br><br>I get the same error when re= -executing the command.</div></div><br><div class=3D"gmail_quote"><div dir= =3D"ltr" class=3D"gmail_attr">On Wed, Apr 15, 2026 at 9:46=E2=80=AFAM Neil = Horman <<a href=3D"mailto:[email protected]" target=3D"_blank">nhorman= @openssl.org</a>> wrote:<br></div><blockquote class=3D"gmail_quote" styl= e=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);paddin= g-left:1ex"><div dir=3D"ltr">did you run make install to put openssl-3.6 in= that directory?=C2=A0 Or is that your build directory?=C2=A0 If its the la= tter then the libraries (libcrypto.so.3 and libssl.so.3) will be in the roo= t of that subtree, and LD_LIBRARY_PATH should just be set to /PKI/openssl-3= .6.0<div><br></div><div>Neil</div><div><br></div></div><br><div class=3D"gm= ail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Apr 15, 2026 at 9:= 45=E2=80=AFAM Mark Sigsbee <<a href=3D"mailto:[email protected]" target= =3D"_blank">[email protected]</a>> wrote:<br></div><blockquote class=3D= "gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(2= 04,204,204);padding-left:1ex"><div dir=3D"ltr">Thanks for the response.<br>= <br>/PKI/openssl-3.6.0/lib<br><br>Doesn't exist.</div><br><div class=3D= "gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Apr 15, 2026 at= 9:31=E2=80=AFAM Neil Horman <<a href=3D"mailto:[email protected]" tar= get=3D"_blank">[email protected]</a>> wrote:<br></div><blockquote clas= s=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid r= gb(204,204,204);padding-left:1ex"><div dir=3D"ltr">you=C2=A0don't have = the library search path configured correctly on your platform.=C2=A0 Try ru= nning:<div><br></div><div>LD_LIBRARY_PATH=3D/PKI/openssl-3.6.0/lib PKI/open= ssl-3.6.0/apps/openssl list -providers -verbose</div><div><br></div><div>Th= at will allow the application to run.=C2=A0 You may also need to set OPENSS= L_CONF and OPENSSL_MODULES appropriately to find the needed configuration a= nd provider DSO's</div><div><br></div><div>To avoid needing to set thes= e values you need to configure openssl using the --prefix option to set the= latter two variables=C2=A0automatically.=C2=A0 To avoid the need for LD_LI= BRARY_PATH, you either need to configure your environment to add /PKI/opens= sl-3.6.0/lib[64] to the library search path globally, or install the librar= y to a location already in the search path (though the latter isn't rec= ommended if you are using a system with a default openssl already configure= d there).</div><div><br></div><div>Neil</div><div><br></div></div><br><div = class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Apr 15,= 2026 at 9:13=E2=80=AFAM Mark Sigsbee <<a href=3D"mailto:msigsbee@gmail.= com" target=3D"_blank">[email protected]</a>> wrote:<br></div><blockquo= te class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px = solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr">I'm trying to= build 3.6.0 with 3.2.1 for its approved FIPS library on Ubuntu 22.04. I kn= ow the default version of OpenSSL is 3.0 and basically leave it alone or th= e world will come to an end.<br><br>I'm building a newer version hoping= to resolve issues that I'm getting with 3.0 and confirmed by Ubuntu Pr= o support.<div><br>I d/l'ed both into $ /PKI.<br>I followed the build i= nstructions provided here:=C2=A0 <a href=3D"https://github.com/openssl/openssl/blob/master/README-FIPS.md" t= arget=3D"_blank">openssl/README-FIPS.md at master =C2=B7 openssl/openssl</a= ><br><br>My check agrees with the check results in the readme.<br><br>When = I execute:<br>$ sudo /PKI/openssl-3.6.0/apps/openssl list -providers -verbo= se<br><br>I get this:<br>/PKI$ sudo /PKI/openssl-3.6.0/apps/openssl list -p= roviders -verbose<br>/PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu= /libssl.so.3: version `OPENSSL_3.4.0' not found (required by /PKI/opens= sl-3.6.0/apps/openssl)<br>/PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linu= x-gnu/libssl.so.3: version `OPENSSL_3.2.0' not found (required by /PKI/= openssl-3.6.0/apps/openssl)<br>/PKI/openssl-3.6.0/apps/openssl: /lib/x86_64= -linux-gnu/libcrypto.so.3: version `OPENSSL_3.0.9' not found (required = by /PKI/openssl-3.6.0/apps/openssl)<br>/PKI/openssl-3.6.0/apps/openssl: /li= b/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.3.0' not found (r= equired by /PKI/openssl-3.6.0/apps/openssl)<br>/PKI/openssl-3.6.0/apps/open= ssl: /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.5.0' not = found (required by /PKI/openssl-3.6.0/apps/openssl)<br>/PKI/openssl-3.6.0/a= pps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.6.0&#= 39; not found (required by /PKI/openssl-3.6.0/apps/openssl)<br>/PKI/openssl= -3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL= _3.4.0' not found (required by /PKI/openssl-3.6.0/apps/openssl)<br>/PKI= /openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3: version = `OPENSSL_3.2.0' not found (required by /PKI/openssl-3.6.0/apps/openssl)= <br><br>How do I correct this and get my desired result?=C2=A0<br><div><br>= </div></div></div> <p></p> -- <br> You received this message because you are subscribed to the Google Groups &= quot;openssl-users" group.<br> To unsubscribe from this group and stop receiving emails from it, send an e= mail to <a href=3D"mailto:openssl-users+unsubscribe-MCmKBN63+BlAfugRpC6u6w@public.gmane.org" target=3D"= _blank">openssl-users+unsubscribe-MCmKBN63+BlAfugRpC6u6w@public.gmane.org</a>.<br> To view this discussion visit <a href=3D"https://groups.google.com/a/openss= l.org/d/msgid/openssl-users/CAPqvXLPc7dDaR3S05bmdSAaFJSZ0k5uSmCs0AY_juicFin= dorQ%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter" target=3D= "_blank">https://groups.google.com/a/openssl.org/d/msgid/openssl-users/CAPq= vXLPc7dDaR3S05bmdSAaFJSZ0k5uSmCs0AY_juicFindorQ%40mail.gmail.com</a>.<br> </blockquote></div> </blockquote></div> </blockquote></div> </blockquote></div> </blockquote></div> </blockquote></div> <p></p> -- <br /> You received this message because you are subscribed to the Google Groups &= quot;openssl-users" group.<br /> To unsubscribe from this group and stop receiving emails from it, send an e= mail to <a href=3D"mailto:openssl-users+unsubscribe-MCmKBN63+BlAfugRpC6u6w@public.gmane.org">openssl-us= [email protected]</a>.<br /> To view this discussion visit <a href=3D"https://groups.google.com/a/openss= l.org/d/msgid/openssl-users/CAPqvXLO8m5%2Bscte1y3P%3Dfcc9Cb2Yhpb9%2BS_S4SM1= Pmsyt158TQ%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https:/= /groups.google.com/a/openssl.org/d/msgid/openssl-users/CAPqvXLO8m5%2Bscte1y= 3P%3Dfcc9Cb2Yhpb9%2BS_S4SM1Pmsyt158TQ%40mail.gmail.com</a>.<br /> --0000000000006b9648064f8333e5--