Re: EXT :Re: LibCryptoEVPInterface OPENSSL_VERSION_NUMBER

 All indications are that the issue with our our Linux openSSL install, not with VW (at least not with the 9.0.1 version). I'm still working on it, but with our IT rather than Cincom. James Savidge was very helpful. 
Bob 

    On Tuesday, March 22, 2022, 09:07:00 a.m. EDT, Bob Nemec <[email protected]> wrote:  
 
  Cincom's suggestion to my problem ticket is to load the VW 9.0 External-Cryptography package. Testing that now (we have an automated Jenkins build job that I'm integrating that into). 
    On Monday, March 21, 2022, 10:31:52 a.m. EDT, Bob Nemec <[email protected]> wrote:  
 
  Axel thanks for the 64-bit library suggestion, but no luck. Same symptom as with the 32-bit image & library. 
And yes, this is a CentOS 7 box ...  Linux 3.10.0-1062.12.1.el7.x86_64
I'll what Cincom says. 

Bob
    On Monday, March 21, 2022, 10:17:23 a.m. EDT, Guerrero, Axel [US] (ES) <[email protected]> wrote:  
 
 <!--#yiv7982587100 filtered {}#yiv7982587100 filtered {}#yiv7982587100 filtered {}#yiv7982587100 filtered {}#yiv7982587100 p.yiv7982587100MsoNormal, #yiv7982587100 li.yiv7982587100MsoNormal, #yiv7982587100 div.yiv7982587100MsoNormal {margin:0in;font-size:11.0pt;font-family:"Calibri", sans-serif;}#yiv7982587100 a:link, #yiv7982587100 span.yiv7982587100MsoHyperlink {color:#0563C1;text-decoration:underline;}#yiv7982587100 p.yiv7982587100msonormal, #yiv7982587100 li.yiv7982587100msonormal, #yiv7982587100 div.yiv7982587100msonormal {margin-right:0in;margin-left:0in;font-size:11.0pt;font-family:"Calibri", sans-serif;}#yiv7982587100 span.yiv7982587100EmailStyle26 {font-family:"Calibri", sans-serif;color:windowtext;}#yiv7982587100 .yiv7982587100MsoChpDefault {font-size:10.0pt;}#yiv7982587100 filtered {}#yiv7982587100 div.yiv7982587100WordSection1 {}-->
Bob,
 
  
 
Based on the openssl version, it seems like you are using RHEL 7.x, is this correct?
 
  
 
If this is the case, then  /usr/lib/libcrypt.so.1 is the directory for the 32-bit libraries.
 
  
 
Can you see if you have /usr/lib64/libcrypto.so.*  (you should be able to as RHEL uses openssl when fetching packages and updates)?
 
If you can see it, can you try setting VW_LIBCRYPTO to /usr/lib64/libcrypto.so.1 ?
 
  
 
  
 
-axel
 
  
 
  
 
  
 
From: [email protected] <[email protected]>On Behalf Of Bob Nemec
Sent: Friday, March 18, 2022 12:59 PM
To: [email protected]
Subject: EXT :Re: [vwnc] LibCryptoEVPInterface OPENSSL_VERSION_NUMBER
 
  
 
  
 
Thanks for the help. 
 
I've packaged a 64-bit VW image to test this, and I'm getting the same result. 
 
Any other diagnostic suggestions?
 
  
 
Kernel.SystemUtils getEnvironmentVariable: 'VW_LIBCRYPTO'   --> '/usr/lib/libcrypt.so.1'
 
Crypto.LibCryptoEVPInterface OPENSSL_VERSION_NUMBER --> nil
 
  
 
$ openssl version
 
OpenSSL 1.0.2k-fips  26 Jan 2017
 
  
 
$ ll /usr/lib/libcrypt*
 
-rwxr-xr-x. 1 root root 38604 Aug  6  2019 /usr/lib/libcrypt-2.17.so
 
lrwxrwxrwx. 1 root root    16 Feb  7  2020 /usr/lib/libcrypt.so.1 -> libcrypt-2.17.so
 
  
 
Bob Nemec
 
  
 
On Thursday, March 17, 2022, 10:23:04 a.m. EDT, Guerrero, Axel [US] (ES) <[email protected]> wrote:
 
  
 
  
 
By any chance, have you set the environment variable VW_LIBCRYPTO ?
 
The variable will look something like VW_LIBCRYPTO=/usr/lib/libcrypto.so.10
 
 
 
Also, make sure you have the appropriate libraries for the “bitness” of your image (32-bit libraries for a 32-bit image,  64-bit libraries for a 64-bit image).
 
 
 
Axel Guerrero
 
 
 
From:[email protected] <[email protected]>On Behalf Of Bob Nemec
Sent: Thursday, March 17, 2022 9:13 AM
To: [email protected]
Subject: EXT :[vwnc] LibCryptoEVPInterface OPENSSL_VERSION_NUMBER
 
 
 
I think I may be missing something obvious when using HttpClient>>post:formData: to an https url. 
I get an exception because LibCryptoHash>>initializeContext fails due to LibCrypto EVP_MD_CTX = nil.
 
Tracing Crypto.LibCryptoEVPInterface initializeLibCrypto I end up at OPENSSL_VERSION_NUMBER which answers nil, running VW 8.3.2 
 
 
 
This image is running on Linux, where I see...
 
 
 
    $ openssl version
 
    OpenSSL 1.0.2k-fips 26 Jan 2017
 
 
 
...but I always get nil from...
 
 
 
LibCryptoEVPInterface OPENSSL_VERSION_NUMBER 
 
 
 
...is there setup step that I'm missing? I've read through the VW Security Guide, but no luck so far. 
 
 
 
Thanks for any help,
 
Bob Nemec