Content-Type: text/plain;
	charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.200.110.1.12\))
Subject: Re: Libpq linked statically linked to OpenSSL/LibreSSL
From: Marco Bambini <marco@creolabs.com>
In-Reply-To: <7B10A8B6-04E3-49F3-AB0D-413E8B0AC365@creolabs.com>
Date: Tue, 6 Dec 2022 11:05:49 +0100
Cc: "pgsql-interfaces@lists.postgresql.org"
 <pgsql-interfaces@lists.postgresql.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <10650109-6ECE-4F7D-9014-2785AA2D413B@creolabs.com>
References: <CD503DB4-0B66-42FB-9E57-1DF6CEDA4D67@creolabs.com>
 <PA4PR05MB8969E8C20AC8EC343149E0F8A7189@PA4PR05MB8969.eurprd05.prod.outlook.com>
 <PA4PR05MB896952E77CAFA3AD5CB188EBA7189@PA4PR05MB8969.eurprd05.prod.outlook.com>
 <7B10A8B6-04E3-49F3-AB0D-413E8B0AC365@creolabs.com>
To: =?utf-8?Q?ALBERTO_CABELLO_S=C3=81NCHEZ?= <alberto@unex.es>
Archived-At: 
 <https://www.postgresql.org/message-id/10650109-6ECE-4F7D-9014-2785AA2D413B%40creolabs.com>
Precedence: bulk

Hi,

I made some progresses, especially in understanding where the issue can =
be.

I started with a fresh postgresql-15.1 source code installation:
# ./configure --with-openssl --without-readline

I then modified the Makefile.global in the src directory by replacing =
the occurrences of -lssl and -lcrypto with:
/root/rothsoft/libressl-3.6.1/ssl/.libs/libssl.a =
/root/rothsoft/libressl-3.6.1/crypto/.libs/libcrypto.a
in the LIBS entry.

Then from src/interfaces/libpq I executed:
# make

libpq was successfully created but when I perform a:
# nm -D libpq.so

the output looks like:

000000000001f110 T appendBinaryPQExpBuffer
000000000001f000 T appendPQExpBuffer
000000000001f0d0 T appendPQExpBufferChar
000000000001f150 T appendPQExpBufferStr
                 U ASN1_STRING_data
                 U ASN1_STRING_length
                 U BIO_clear_flags
                 U BIO_int_ctrl
                 U BIO_new
                 U BIO_set_flags
                 U BIO_s_socket
                 U calloc
                 U close
                 U connect
000000000001ecd0 T createPQExpBuffer
                 U CRYPTO_get_id_callback
                 U CRYPTO_get_locking_callback
                 U CRYPTO_num_locks
                 U CRYPTO_set_id_callback
                 U CRYPTO_set_locking_callback
                 U __ctype_b_loc
                 U __ctype_tolower_loc
                 U __ctype_toupper_loc
                 w __cxa_finalize
000000000001ed30 T destroyPQExpBuffer
                 U ENGINE_by_id
                 U ENGINE_finish
                 U ENGINE_free
                 U ENGINE_init
                 U ENGINE_load_private_key
000000000001ed90 T enlargePQExpBuffer
                 U ERR_clear_error
                 U ERR_get_error
                 U __errno_location
                 U ERR_put_error
                 U ERR_reason_error_string
                 U EVP_DigestFinal_ex
                 U EVP_DigestInit_ex
...

Please notice all the U entries in the crypto/ssl functions, so it looks =
like that they are NOT statically linked inside the libpq.so shared =
library, even if I replaced the LIBS in the Makefile.

Anyone can help me with this issue?

Thanks,
Marco


> On 5 Dec 2022, at 17:47, Marco Bambini <marco@creolabs.com> wrote:
>=20
> Thanks Alberto,
>=20
> This is a very promising approach.
>=20
> I tried to modify the Makefile in src/interfaces/libpq/Makefile and I =
replaced the occurrences of -lssl and -lcrypto with:
> /root/rothsoft/libressl-3.6.1/ssl/.libs/libssl.a
> /root/rothsoft/libressl-3.6.1/crypto/.libs/libcrypto.a
>=20
> The compilation process is OK but when I tried to execute the test app =
I receive a link error:
> Error loading DLL: =
/root/rothsoft/engines/postgreSQL/Linux/postgresql/libpq.so: undefined =
symbol: GENERAL_NAME_free
>=20
> GENERAL_NAME_free usually means that libcrypto is missed.
>=20
> Any help would be really appreciated.
>=20
> Please note that I also tried with:
> -l:/root/rothsoft/libressl-3.6.1/ssl/.libs/libssl.a
> -l:/root/rothsoft/libressl-3.6.1/crypto/.libs/libcrypto.a
>=20
> Thanks,
> Marco
>=20
>=20
>> On 5 Dec 2022, at 14:10, ALBERTO CABELLO S=C3=81NCHEZ =
<alberto@unex.es> wrote:
>>=20
>>>> Hi all,
>>>>=20
>>>> After several attempts, I am asking for help with how to compile =
libpq with OpenSSL
>>>> statically linked.
>>>> I need to have libpq linked with LibreSSL, but if I could =
statically link OpenSSL, I think
>>>> I could switch the TLS libraries at compile time.
>>>=20
>>> redo the step which creates libpq.so appending your libssl.a =
location
>>> (mine is /usr/lib/x86_64-linux-gnu/libssl.a) at the end.
>>=20
>> Just wanted to correct: you also have to remove "-lssl". So I guess =
you can just
>> substitute "-lssl" for libssl.a location in =
src/interfaces/libpq/Makefile (two occurrences)
>> and build as usual.
>>=20
>=20
>=20
>=20