Cannot dynamically link with libcrypto shared library

Jayashankara · October 27, 2021, 6:54am

Hi Cohult,

what is openssl version for confd-basic-7.6 for centos 7.

Thanks,
Jayashankara

Jayashankara · October 27, 2021, 6:56am

We have faced below issue for OpenSSL 1.0.2k-fips 26 Jan 2017.

confd-basic-7.6.linux.x86_64/…/confd/bin/confd -c …/config/confd.conf --addloadpath /home/migupta/test_with_latest_confd/confd-basic-7.6.linux.x86_64/…/confd/etc/confd
Bad configuration: …/config/confd.conf:0: cannot dynamically link with libcrypto shared library

We also tried OpenSSL 1.1.1k 25 Mar 2021, Still same issue.

Thanks,
Jai

cohult · October 27, 2021, 8:32pm

You can likely get away with a simple soft link for Centos 7 or 8.
Example:

$ ln -s /usr/lib64/libcrypto.so /usr/lib64/libcrypto.so.1.0.0

github.com

ConfD-Developer/ConfD-Demos/blob/6afa025e74a0ee87dc877de66c867af984deb5b4/dp-performance/Dockerfile.pre7#L21

    
      
          
          
WORKDIR /
          RUN dnf group install -y "Development Tools" \
              && dnf install -y openssh openssl-devel compat-openssl10 python3 python3-pip nano \
              && ln -s /usr/bin/python3 /usr/bin/python \
              && python3 -m pip install --upgrade pip \
              && python3 -m pip install --no-cache-dir paramiko
          
          
COPY confd-${CONFD_VERSION}.linux.x86_64.installer.bin /tmp
          WORKDIR ${CONFD_DIR}
          RUN ln -s /usr/lib64/libcrypto.so.10 /usr/lib64/libcrypto.so.1.0.0 \
              && /tmp/confd-${CONFD_VERSION}.linux.x86_64.installer.bin ${CONFD_DIR} \
              && rm -rf examples.confd doc \
              && yes | ssh-keygen -m pem -N '' -f ${CONFD_DIR}/etc/confd/ssh/ssh_host_rsa_key
          
          
ADD app.tar.gz /
          WORKDIR /app
          
          
CMD [ "./run.sh" ]

If not, you need to rebuild libconfd. See ConfD UG chapter " Using a different version of OpenSSL and optionally activating FIPS". Then download the libconfd tarball and See “Building the crypto interface module” in the README.
Example:

github.com

ConfD-Developer/ConfD-Demos/blob/3401f999d3fc2f263d789a1ff300549ec2087eb6/dp-performance/Dockerfile.pre74#L22

    
      
          WORKDIR /
          RUN apt-get update \
              && apt-get install -y --no-install-recommends psmisc libxml2-utils python3 python3-pip python3-setuptools build-essential libssl-dev openssh-client curl htop nano \
              && python3 -m pip install --upgrade pip \
              && python3 -m pip install --no-cache-dir paramiko bs4 lxml pyang
          
          
COPY confd-${CONFD_VERSION}.linux.x86_64.installer.bin /tmp
          RUN ln -s libcrypto.so /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0 \
              && /tmp/confd-${CONFD_VERSION}.linux.x86_64.installer.bin ${CONFD_DIR}
          
          
# Add the ConfD cryptography integration and C-library API source
          ADD confd-${CONFD_VERSION}.libconfd.tar.gz /tmp
          
          
# Rebuild the ConfD crypto integration for libcrypto1.1
          WORKDIR /tmp/confd-${CONFD_VERSION}/libconfd
          RUN make install_crypto
          
          
# Cleanup
          RUN rm -rf /tmp/* /var/tmp/* \
              && apt-get autoremove -y \
              && apt-get clean \