make results in "../lib//libs2n.so: undefined reference to `EVP_DecryptFinal_ex'"

[aws]

make results in "../lib//libs2n.so: undefined reference to `EVP_DecryptFinal_ex'"

[sanderjo]

Update: In bin/Makefile I changed

    LIBS = -ldl -lrt -lpthread

to

    LIBS = -ldl -lrt -lpthread -lcrypto

and then the make goes well ... up until the tests:

make[2]: Entering directory `/git/s2n/tests/unit'
Running s2n_3des_test.c                                    ... PASSED      27245 tests

Running s2n_aead_aes_test.c                                ... PASSED   49579370 tests
Running s2n_aes_test.c                                     ... PASSED      54184 tests
Running s2n_cbc_verify_test.c                              ... PASSED    8641804 tests
Running s2n_cipher_suite_match_test.c                      ... PASSED          4 tests
Running s2n_client_disabled_test.c                         ... PASSED          4 tests
Running s2n_client_extensions_test.c                       ... FAILED test 170
!((client_conn = s2n_connection_new(S2N_CLIENT)) == (((void *)0))) is not true  (s2n_client_extensions_test.c line 470)
Error Message: 'error calling mlock'
make[2]: *** [s2n_client_extensions_test] Error 1
make[2]: Leaving directory `/git/s2n/tests/unit'
make[1]: *** [all] Error 2
make[1]: Leaving directory `/git/s2n/tests'
make: *** [all] Error 2

[mehlis]

can reproduce this problem on my Fedora, your fix is working for me, too.

Test is aborts with:

make[2]: Entering directory '/home/c/git/public/s2n/tests/unit'
Running s2n_record_test.c                                  ... PASSED     179816 tests
Running s2n_stuffer_hex_test.c                             ... PASSED        317 tests
Running s2n_aes_test.c                                     ... PASSED      54184 tests
Running s2n_stuffer_base64_test.c                          ... PASSED        465 tests
Running s2n_handshake_test.c                               ... FAILED test 43
!((server_conn = s2n_connection_new(S2N_SERVER)) == (((void *)0))) is not true  (s2n_handshake_test.c line 136)
Error Message: 'error calling mlock'

[colmmacc]

This failure is likely because the ulimits on the amount of memory that may be locked are too low for the tests to pass.

[sanderjo]

@colmmacc I re-ran on a 4GB system (instead of on a 1 - 2GB RAM docker container), and with the Makefile patch ... all tests pass! So your memory statement seems correct.

[sanderjo]

Pull request sent for bin/Makefile

[anatol]

I have the same compilation issue at Linux Arch. This bug is closed but I do not see that the proposed fix is submitted to trunk.

Any plans to submit the actual fix?

[colmmacc]

Reading the first report in this thread it looks like an attempt to build against the system version of OpenSSL rather than a bundled static libcrypto.a. The problem is that libs2n.so hasn't included libcrypto.a , which is pretty important.

Is there a good recipe to ensure that libs2n is linked against the system libcrypto.a if that's what you'd like to do?