Hal,
I just reread your initial post and noticed that my explanation is somewhat inconsistent
with your observations, since in your case the system openssl prints the expected path.
Nevertheless, using
util/wrap.pl apps/openssl ...
is the correct way to test your self-built application. And with the given information,
you should be able to figure out what precisely happens in your original case using
ldd an/or strace.
Matthias
> -----Original Message-----
> From: openssl-users <openssl-users-bounces@xxxxxxxxxxx> On Behalf Of Dr. Matthias St. Pierre
> Sent: Saturday, December 18, 2021 9:20 AM
> To: Hal Murray <halmurray+openssl@xxxxxxxxx>; openssl-users@xxxxxxxxxxx
> Subject: RE: Confusion Configuring
>
> For OpenSSL 3.0, it's better to use util/wrap.pl instead.
>
> (Note: util/wrap.pl is created from util/wrap.pl.in by the Configure command)
>
> > -----Original Message-----
> > From: openssl-users <openssl-users-bounces@xxxxxxxxxxx> On Behalf Of Dr. Matthias St. Pierre
> > Sent: Saturday, December 18, 2021 9:11 AM
> > To: Hal Murray <halmurray+openssl@xxxxxxxxx>; openssl-users@xxxxxxxxxxx
> > Subject: RE: Confusion Configuring
> >
> > Hal,
> >
> > > But when I run
> > > ./apps/openssl version -d
> > > it says:
> > > OPENSSLDIR: "/usr/local/ssl"
> > > I was expecting /etc/pki/tls from the Configure line above.
> > >
> > > What am I missing? How do I tell it where to find the default certificates?
> >
> > It is very likely that your binary is actually loading the system's shared libraries instead of
> > the ones you just compiled. You can verify whether this using the `ldd` command, see below.
> >
> > There is a shared library wrapper called `shlib_wrap.sh` which can be used to run
> > the compiled application correctly without installing it:
> >
> > ## incorrect (without wrapper)
> > msp@msppc:~/src/openssl-1.1.1$ apps/openssl version -d
> > OPENSSLDIR: "/etc/ssl"
> >
> > ## correct (using the wrapper)
> > msp@msppc:~/src/openssl-1.1.1$ util/shlib_wrap.sh apps/openssl version -d
> > OPENSSLDIR: "/opt/openssl-1.1.1-dev/ssl"
> >
> > HTH,
> >
> > Matthias
> >
> >
> >
> >
> > ## ldd output without wrapper
> >
> > msp@msppc:~/src/openssl-1.1.1$ ldd apps/openssl
> > linux-vdso.so.1 (0x00007fff05b81000)
> > libssl.so.1.1 => /usr/lib64/libssl.so.1.1 (0x00007f6e46ade000)
> > libcrypto.so.1.1 => /usr/lib64/libcrypto.so.1.1 (0x00007f6e46820000)
> > libdl.so.2 => /lib64/libdl.so.2 (0x00007f6e4681a000)
> > libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f6e467fa000)
> > libc.so.6 => /lib64/libc.so.6 (0x00007f6e46641000)
> > /lib64/ld-linux-x86-64.so.2 (0x00007f6e46c5d000)
> >
> > ## ldd output using the wrapper
> >
> > msp@msppc:~/src/openssl-1.1.1$ util/shlib_wrap.sh ldd apps/openssl
> > linux-vdso.so.1 (0x00007ffd2032e000)
> > libssl.so.1.1 => util/../libssl.so.1.1 (0x00007f4a34aeb000)
> > libcrypto.so.1.1 => util/../libcrypto.so.1.1 (0x00007f4a347a2000)
> > libdl.so.2 => /lib64/libdl.so.2 (0x00007f4a34785000)
> > libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f4a34765000)
> > libc.so.6 => /lib64/libc.so.6 (0x00007f4a345ac000)
> > /lib64/ld-linux-x86-64.so.2 (0x00007f4a34c78000)Attachment:
smime.p7s
Description: S/MIME cryptographic signature
