[SOLVED] openvpn-2.4.9 x86 extension has a broken openssl dependency

Tiny Core Extensions > TCE Bugs

(1/3) > >>

ovacikar:
Was having an issue with openvpn 2.4.9 extension coexist with openssh extension on Tiny Core 14 x86. openvpn was not able to read any SSL certificates:

--- Code: ---Mon Feb 5 20:40:36 2024 us=172773 OpenVPN 2.4.9 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on May 2 2020
Mon Feb 5 20:40:36 2024 us=172945 library versions: OpenSSL 1.1.1w 11 Sep 2023, LZO 2.10
Mon Feb 5 20:40:36 2024 us=173564 PO_INIT maxevents=4 flags=0x00000002
Mon Feb 5 20:40:36 2024 us=186835 OpenSSL: error:25066067:DSO support routines:dlfcn_load:could not load the shared library
Mon Feb 5 20:40:36 2024 us=187016 OpenSSL: error:25070067:DSO support routines:DSO_load:could not load the shared library
Mon Feb 5 20:40:36 2024 us=187167 OpenSSL: error:0E07506E:configuration file routines:module_load_dso:error loading dso
Mon Feb 5 20:40:36 2024 us=187310 OpenSSL: error:0E076071:configuration file routines:module_run:unknown module name
Mon Feb 5 20:40:36 2024 us=187452 OpenSSL: error:0909006C:PEM routines:get_name:no start line
Mon Feb 5 20:40:36 2024 us=187571 Error reading extra certificate
Mon Feb 5 20:40:36 2024 us=187684 Exiting due to fatal error
--- End code ---

Problem was, openssh depends on openssl.tcz, but openvpn depends on a different openssl-1.1.1.tcz

Ended up getting rid of all openssl-1.1.1 stuff, downloading and compiling openvpn 2.5.1 :

2024-02-05 22:23:28 OpenVPN 2.5.1 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Feb 5 2024
2024-02-05 22:23:28 library versions: OpenSSL 3.2.0 23 Nov 2023, LZO 2.10
2024-02-05 22:23:28 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2024-02-05 22:23:28 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2024-02-05 22:23:28 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2024-02-05 22:23:28 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2024-02-05 22:23:28 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx:1194
2024-02-05 22:23:28 Socket Buffers: R=[180224->180224] S=[180224->180224]
2024-02-05 22:23:28 UDP link local: (not bound)
2024-02-05 22:23:28 UDP link remote: [AF_INET]xxx:1194
2024-02-05 22:23:28 TLS: Initial packet from [AF_INET]xxx:1194, sid=35224f82 77356a5b
2024-02-05 22:23:28 VERIFY OK: depth=1, CN=xxx
2024-02-05 22:23:28 VERIFY KU OK
2024-02-05 22:23:28 Validating certificate extended key usage
2024-02-05 22:23:28 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2024-02-05 22:23:28 VERIFY EKU OK
2024-02-05 22:23:28 VERIFY X509NAME OK: CN=xxx
2024-02-05 22:23:28 VERIFY OK: depth=0, CN=xxx

ovacikar:
Submitted 2.5.1 update to the repository. But noticed the build script created a huge 2MB file ???

Rich:
Hi ovacikar

--- Quote from: ovacikar on February 06, 2024, 07:57:42 AM --- ... But noticed the build script created a huge 2MB file ???
--- End quote ---
Since we don't know which build script you used, we can
only make some general comments.

Extension.tcz <-- Programs and libraries get stripped to reduce size.

Typically, the following items get removed and packaged into separate extensions:
Extension-dev.tcz <-- Development files, headers (.h), static libraries (.a), .pc, etc.
Extension-doc.tcz <-- Document files, man pages, etc.
Extension-locale.tcz <-- Language files, .mo, etc.

ovacikar:
I used the same build script as the previous submission , 11.x 2.4.9.

Replacing openssl dependency, URL and download with curl instead of wget

http://tinycorelinux.net/11.x/x86/tcz/src/openvpn/openvpn.build

Rich:
Hi ovacikar
I can't say for sure why your package is so much larger. I suspect
part of it is compiler related. Over the years, it seems that each
new version of gcc produces bigger binaries than the previous
version.

--- Quote from: Rich on February 06, 2024, 09:56:08 AM ---Extension.tcz <-- Programs and libraries get stripped to reduce size.
--- End quote ---
I don't see that happening in the script. The other thing I don't see
is compiler flags being set. It's possible the previous submitter ran
these commands prior to running the script:

--- Code: ---export CFLAGS="-march=i486 -mtune=i686 -Os -pipe"
export CXXFLAGS="-march=i486 -mtune=i686 -Os -pipe"
export LDFLAGS="-Wl,-O1"
--- End code ---

--- Quote ---Extension-dev.tcz <-- Development files, headers (.h), static libraries (.a), .pc, etc.
--- End quote ---
I doubt that's it. It's only 2 header files.

--- Quote ---Extension-doc.tcz <-- Document files, man pages, etc.
--- End quote ---
This may be part of it. The man pages look like they are about 150K to 200K.

--- Quote ---Extension-locale.tcz <-- Language files, .mo, etc.
--- End quote ---
No language files, so that's not it.

Navigation

[0] Message Index

[#] Next page

Go to full version