AIX Open Source

AIX Open Source

Share your experiences and connect with fellow developers to discover how to build and manage open source software for the AIX operating system

 View Only
  • 1.  openssl 3.0

    Posted Tue December 13, 2022 01:14 PM

    If I want to compile openssl apps on a TL1 install is there any way to compile openssl 1.1.1 apps? The headers have:

    /usr/include/openssl
     grep VERSION opensslv.h
    # define OPENSSL_VERSION_MAJOR 3
    # define OPENSSL_VERSION_MINOR 0
    # define OPENSSL_VERSION_PATCH 4



    ------------------------------
    philip miloslavsky
    ------------------------------


  • 2.  RE: openssl 3.0

    Posted Tue December 20, 2022 12:16 PM
    I think AIX 7.3TL1 does not provide 1.1.1 library for building application but it provides library to run already built application.
    The openssl 3.0 provides 1.1.1 library load only (not export symbols to build). 
    So if you want to build with openssl 1.1.1 then you need to install openssl 1.1.1 and built applications can run with openssl 3.0

    ------------------------------
    SANKET RATHI
    ------------------------------



  • 3.  RE: openssl 3.0

    Posted Tue January 10, 2023 09:15 AM
    I'm not sure I want to go this route, but I think you mean: https://www.ibm.com/resources/mrs/assets/DirectDownload?source=aixbp&lang=en_US   right? The openssl for AIX 7.3? It's a tarball - the readme says it puts the headers in /usr/include but that's probably not right. Anyway, I think what you mean is install just the headers in some custom areas and dont install anything else, and then link against the libs that come with AIX73 TL1 by default?

    ------------------------------
    philip miloslavsky
    ------------------------------



  • 4.  RE: openssl 3.0

    Posted Wed January 11, 2023 08:47 AM
    Edited by Ayappan P Thu January 12, 2023 08:49 AM

    If applications need to build against openssl 1.1.1, then openssl 3.0 version should be removed and openssl 1.1.1 fileset should be installed. 
    Because openssl 3.0 fileset ships openssl 3.0 headers and 3.0 shared library, as well as older 1.0.2, 1.1.1 shared libraries with load-only flag (which means linker won't use these for linking). 



    ------------------------------
    Ayappan P
    ------------------------------



  • 5.  RE: openssl 3.0

    Posted Thu January 12, 2023 07:04 AM
    I think the issue is (correct me if I am wrong) dev and run are combined for 1.1.1 install which means 3.0 headers would become 111 headers: openssl-1.1.1.1202/
    openssl-1.1.1.1202/openssl.base
    openssl-1.1.1.1202/openssl.license
    openssl-1.1.1.1202/openssl.man.en_US

    I think we have this problem going the other way too: Start with AIX72 TL5 box, be forced to do yum update, /opt/freeware requires 111 which means machine openssl headers must become 111


    ------------------------------
    philip miloslavsky
    ------------------------------



  • 6.  RE: openssl 3.0

    Posted Thu January 12, 2023 08:59 AM

    There is a typo in my earlier thread which I edited it now. 

    It should be "then openssl 3.0 version should be removed " instead of " then openssl 3.0 version should not removed" 
    As I mentioned earlier, for building apps against 
    openssl 1.1.1 , the build machine has to have openssl 1.1.1 ( specifically openssl 1.1.2.1202) installed. That  apps also can be run in a machine having openssl 3.0 installed. 



    ------------------------------
    Ayappan P
    ------------------------------



  • 7.  RE: openssl 3.0

    Posted Mon January 16, 2023 09:48 AM
    Sorry for delay in response.
    I think this may not be a good idea to downgrade already shipped openssl on AIX 73TL1.
    If there is any AIX application that is dependent on openssl 3.0 then that may not work when openssl 3.0 is replaced by openssl 1.1.1
    So I think right approach is to get openssl 3.0 fix to make things work on AIX 73TL1.

    ------------------------------
    SANKET RATHI
    ------------------------------