Re: EXT :Re: LibCryptoEVPInterface OPENSSL_VERSION_NUMBER

 Cincom's suggestion to my problem ticket is to load the VW 9.0 External-Cryptography package. Testing that now (we have an automated Jenkins build job that I'm integrating that into). 
    On Monday, March 21, 2022, 10:31:52 a.m. EDT, Bob Nemec <[email protected]> wrote:  
 
  Axel thanks for the 64-bit library suggestion, but no luck. Same symptom as with the 32-bit image & library. 
And yes, this is a CentOS 7 box ...  Linux 3.10.0-1062.12.1.el7.x86_64
I'll what Cincom says. 

Bob
    On Monday, March 21, 2022, 10:17:23 a.m. EDT, Guerrero, Axel [US] (ES) <[email protected]> wrote:  
 
 <!--#yiv4481720987 filtered {}#yiv4481720987 filtered {}#yiv4481720987 filtered {}#yiv4481720987 filtered {}#yiv4481720987 p.yiv4481720987MsoNormal, #yiv4481720987 li.yiv4481720987MsoNormal, #yiv4481720987 div.yiv4481720987MsoNormal {margin:0in;font-size:11.0pt;font-family:"Calibri", sans-serif;}#yiv4481720987 a:link, #yiv4481720987 span.yiv4481720987MsoHyperlink {color:#0563C1;text-decoration:underline;}#yiv4481720987 p.yiv4481720987msonormal, #yiv4481720987 li.yiv4481720987msonormal, #yiv4481720987 div.yiv4481720987msonormal {margin-right:0in;margin-left:0in;font-size:11.0pt;font-family:"Calibri", sans-serif;}#yiv4481720987 span.yiv4481720987EmailStyle26 {font-family:"Calibri", sans-serif;color:windowtext;}#yiv4481720987 .yiv4481720987MsoChpDefault {font-size:10.0pt;}#yiv4481720987 filtered {}#yiv4481720987 div.yiv4481720987WordSection1 {}-->
Bob,
 
  
 
Based on the openssl version, it seems like you are using RHEL 7.x, is this correct?
 
  
 
If this is the case, then  /usr/lib/libcrypt.so.1 is the directory for the 32-bit libraries.
 
  
 
Can you see if you have /usr/lib64/libcrypto.so.*  (you should be able to as RHEL uses openssl when fetching packages and updates)?
 
If you can see it, can you try setting VW_LIBCRYPTO to /usr/lib64/libcrypto.so.1 ?
 
  
 
  
 
-axel
 
  
 
  
 
  
 
From: [email protected] <[email protected]>On Behalf Of Bob Nemec
Sent: Friday, March 18, 2022 12:59 PM
To: [email protected]
Subject: EXT :Re: [vwnc] LibCryptoEVPInterface OPENSSL_VERSION_NUMBER
 
  
 
  
 
Thanks for the help. 
 
I've packaged a 64-bit VW image to test this, and I'm getting the same result. 
 
Any other diagnostic suggestions?
 
  
 
Kernel.SystemUtils getEnvironmentVariable: 'VW_LIBCRYPTO'   --> '/usr/lib/libcrypt.so.1'
 
Crypto.LibCryptoEVPInterface OPENSSL_VERSION_NUMBER --> nil
 
  
 
$ openssl version
 
OpenSSL 1.0.2k-fips  26 Jan 2017
 
  
 
$ ll /usr/lib/libcrypt*
 
-rwxr-xr-x. 1 root root 38604 Aug  6  2019 /usr/lib/libcrypt-2.17.so
 
lrwxrwxrwx. 1 root root    16 Feb  7  2020 /usr/lib/libcrypt.so.1 -> libcrypt-2.17.so
 
  
 
Bob Nemec
 
  
 
On Thursday, March 17, 2022, 10:23:04 a.m. EDT, Guerrero, Axel [US] (ES) <[email protected]> wrote:
 
  
 
  
 
By any chance, have you set the environment variable VW_LIBCRYPTO ?
 
The variable will look something like VW_LIBCRYPTO=/usr/lib/libcrypto.so.10
 
 
 
Also, make sure you have the appropriate libraries for the “bitness” of your image (32-bit libraries for a 32-bit image,  64-bit libraries for a 64-bit image).
 
 
 
Axel Guerrero
 
 
 
From:[email protected] <[email protected]>On Behalf Of Bob Nemec
Sent: Thursday, March 17, 2022 9:13 AM
To: [email protected]
Subject: EXT :[vwnc] LibCryptoEVPInterface OPENSSL_VERSION_NUMBER
 
 
 
I think I may be missing something obvious when using HttpClient>>post:formData: to an https url. 
I get an exception because LibCryptoHash>>initializeContext fails due to LibCrypto EVP_MD_CTX = nil.
 
Tracing Crypto.LibCryptoEVPInterface initializeLibCrypto I end up at OPENSSL_VERSION_NUMBER which answers nil, running VW 8.3.2 
 
 
 
This image is running on Linux, where I see...
 
 
 
    $ openssl version
 
    OpenSSL 1.0.2k-fips 26 Jan 2017
 
 
 
...but I always get nil from...
 
 
 
LibCryptoEVPInterface OPENSSL_VERSION_NUMBER 
 
 
 
...is there setup step that I'm missing? I've read through the VW Security Guide, but no luck so far. 
 
 
 
Thanks for any help,
 
Bob Nemec