For OpenSSL 3.0, it's better to use util/wrap.pl instead. (Note: util/wrap.pl is created from util/wrap.pl.in by the Configure command) > -----Original Message----- > From: openssl-users <openssl-users-bounces@xxxxxxxxxxx> On Behalf Of Dr. Matthias St. Pierre > Sent: Saturday, December 18, 2021 9:11 AM > To: Hal Murray <halmurray+openssl@xxxxxxxxx>; openssl-users@xxxxxxxxxxx > Subject: RE: Confusion Configuring > > Hal, > > > But when I run > > ./apps/openssl version -d > > it says: > > OPENSSLDIR: "/usr/local/ssl" > > I was expecting /etc/pki/tls from the Configure line above. > > > > What am I missing? How do I tell it where to find the default certificates? > > It is very likely that your binary is actually loading the system's shared libraries instead of > the ones you just compiled. You can verify whether this using the `ldd` command, see below. > > There is a shared library wrapper called `shlib_wrap.sh` which can be used to run > the compiled application correctly without installing it: > > ## incorrect (without wrapper) > msp@msppc:~/src/openssl-1.1.1$ apps/openssl version -d > OPENSSLDIR: "/etc/ssl" > > ## correct (using the wrapper) > msp@msppc:~/src/openssl-1.1.1$ util/shlib_wrap.sh apps/openssl version -d > OPENSSLDIR: "/opt/openssl-1.1.1-dev/ssl" > > HTH, > > Matthias > > > > > ## ldd output without wrapper > > msp@msppc:~/src/openssl-1.1.1$ ldd apps/openssl > linux-vdso.so.1 (0x00007fff05b81000) > libssl.so.1.1 => /usr/lib64/libssl.so.1.1 (0x00007f6e46ade000) > libcrypto.so.1.1 => /usr/lib64/libcrypto.so.1.1 (0x00007f6e46820000) > libdl.so.2 => /lib64/libdl.so.2 (0x00007f6e4681a000) > libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f6e467fa000) > libc.so.6 => /lib64/libc.so.6 (0x00007f6e46641000) > /lib64/ld-linux-x86-64.so.2 (0x00007f6e46c5d000) > > ## ldd output using the wrapper > > msp@msppc:~/src/openssl-1.1.1$ util/shlib_wrap.sh ldd apps/openssl > linux-vdso.so.1 (0x00007ffd2032e000) > libssl.so.1.1 => util/../libssl.so.1.1 (0x00007f4a34aeb000) > libcrypto.so.1.1 => util/../libcrypto.so.1.1 (0x00007f4a347a2000) > libdl.so.2 => /lib64/libdl.so.2 (0x00007f4a34785000) > libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f4a34765000) > libc.so.6 => /lib64/libc.so.6 (0x00007f4a345ac000) > /lib64/ld-linux-x86-64.so.2 (0x00007f4a34c78000)
Attachment:
smime.p7s
Description: S/MIME cryptographic signature