Re: Custom OpenSSL

On 8/6/24 7:55 PM, Tomasz Kurzawa wrote:
> So, just to clarify, there’s no straightforward method to specify the
> OpenSSL version for cryptsetup using an environment variable or
> configuration file? I’m trying to use a particular OpenSSL version
> exclusively for cryptsetup without altering anything in pkgconfig.

Nothing officially supported, as I think it is not needed as you can
use chroot or modification of that pkgconfig.
I think you can set path to pkgconfig so it would work automagically.

(As mentioned, OpenSSL lib has providers - separate ld libraries - so
it is not so simple. Specifically for FIPS provider you will probably
need to also setup OpenSSL config file.)

Note that cryptsetup supports several crypto backends, it would be pain
to maintain all variants.

Anyway, if there is some simple change that could help, report it
on project page or create a merge request.

Thanks,
Milan