-
Notifications
You must be signed in to change notification settings - Fork 3.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
lighttpd: missing dependency libcrypto.so.3 #23794
Comments
How have you configured lighttpd? What selections were made in Latest release of lighttpd is lighttpd 1.4.75. Please use lighttpd 1.4.75 instead of lighttpd 1.4.74. |
lighttpd config:
Compiling 1.4.75 gives:
|
Just pull updates and sync feeds. packages/net/lighttpd/Makefile Line 18 in 876b0bc
|
After:
lighttpd 1.4.74 at least starts compiling but then hits the same dependency: libcrypto.so.3 |
Both lighttpd 1.4.74 and 1.4.75 compile fine after selecting the lighttpd-mod-mbedtls package. Shouldn't menuconfig select lighttpd-mod-mbedtls automatically if you select libmbedtls as crypto library? |
So if this issue resolved for you?
lighttpd Makefile config in openwrt defaults to use nettle for crypto functions (SHA-1, SHA-256, etc) in the lighttpd core and non-TLS modules such as lighttpd mod_auth. If you select libmbedtls as crypto library in in menuconfig for lighttpd, then lighttpd will compile the base lighttpd modules against mbedtls crypto library instead of nettle. lighttpd mod_mbedtls is a separate lighttpd module, and it depends on mbedtls TLS library, mbedtls x509 library, and mbedtls crypto library. |
Interesting. After changing the crypto library from mbedtls to nettle lighttpd compiles successfully. The problem is that if you select mbedtls as crypto library, you need to select lighttpd-mod-mbedtls as well. If you don't you end up with the missing dependency libcrypto.so.3 error. |
I've hit the same issue as I would like to make system using OpenSSL only.
Ok, but it seems, that lighttpd itself supports OpenSSL as well, thus I'm wondering if there is any reason to not support this library additionally? I've probed that option in #24004 |
Sorry, I got side-tracked. Still fighting with Ubuntu and Debian to pretend like they know how to update software. I'll try to review this some time next week. |
More detailed comment in #24004 regarding extending support to force the lighttpd base application to use openssl for crypto functions (such as SHA-256).
Yes, the openwrt lighttpd Makefile could do a better job here, independent of #24004 |
Currently, it is not feasible to configure lighttpd to use OpenSSL as its internal crypto library. Instead, one must rely on alternative crypto libraries such as Nettle or mbedTLS. This setup is not ideal in scenarios where a single crypto library is preferred. To address this issue, lets propose introducing OpenSSL as an additional configuration option. This change will provide the necessary dependency resolution, fixing: Package lighttpd is missing dependencies for the following libraries: libcrypto.so.3 Fixes: openwrt#23794 Co-developed-by:: Glenn Strauss <gstrauss@gluelogic.com> Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> Signed-off-by: Petr Štetiar <ynezz@true.cz>
Currently, it is not feasible to configure lighttpd to use OpenSSL as its internal crypto library. Instead, one must rely on alternative crypto libraries such as Nettle or mbedTLS. This setup is not ideal in scenarios where a single crypto library is preferred. To address this issue, lets propose introducing OpenSSL as an additional configuration option. This change will provide the necessary dependency resolution, fixing: Package lighttpd is missing dependencies for the following libraries: libcrypto.so.3 Fixes: openwrt#23794 Co-developed-by:: Glenn Strauss <gstrauss@gluelogic.com> Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> Signed-off-by: Petr Štetiar <ynezz@true.cz>
This might address the issue raised by @rodajc. Would someone else help confirm? --- a/net/lighttpd/Makefile
+++ b/net/lighttpd/Makefile
@@ -133,9 +133,11 @@ if PACKAGE_lighttpd
config LIGHTTPD_CRYPTOLIB_MBEDTLS
bool "libmbedtls"
+ select PACKAGE_lighttpd-mod-mbedtls
config LIGHTTPD_CRYPTOLIB_WOLFSSL
bool "libwolfssl"
+ select PACKAGE_lighttpd-mod-wolfssl
endchoice
endif
@ynezz's PR #24004 is also an improvement and is being handled separately. Another question: on OpenWRT, should the lighttpd Makefile default to using mbedtls as the crypto lib instead of Nettle? If the default dependency of hostapd is mbedtls, then I think it makes sense for that to be the default for lighttpd, too. |
@rodajc any change to test the patch above? I'm going to leave out this patch for now until I am unable to get feedback. |
Actually, @rodajc this patch seems better to me and follows the same pattern currently used for
|
This change will provide the necessary dependency resolution, fixing: Package lighttpd is missing dependencies for the following libraries: libcrypto.so.3 Fixes: openwrt#23794 Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
This change will provide the necessary dependency resolution, fixing: Package lighttpd is missing dependencies for the following libraries: libcrypto.so.3 Fixes: openwrt#23794 Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
This change will provide the necessary dependency resolution, fixing: Package lighttpd is missing dependencies for the following libraries: libcrypto.so.3 Fixes: openwrt#23794 Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
This change will provide the necessary dependency resolution, fixing: Package lighttpd is missing dependencies for the following libraries: libcrypto.so.3 Fixes: openwrt#23794 Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
This change will provide the necessary dependency resolution, fixing: Package lighttpd is missing dependencies for the following libraries: libcrypto.so.3 Fixes: openwrt#23794 Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
This change will provide the necessary dependency resolution, fixing: Package lighttpd is missing dependencies for the following libraries: libcrypto.so.3 Fixes: openwrt#23794 Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
|
This change will provide the necessary dependency resolution, fixing: Package lighttpd is missing dependencies for the following libraries: libcrypto.so.3 Fixes: openwrt#23794 Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
|
Maybe a mistyped path in your patches/series file? Do the filenames match? You might remove |
Yes. There was a reference to a patch I didn't finish in lighttpd/patches/series. But now:
|
There are numerous starting points to set up an openwrt build. Please check the documentation (https://openwrt.org/docs/guide-developer/start) I am guessing: perhaps you have not recently updated your working copy or rebuilt the |
This patch solves the issue. |
This change will provide the necessary dependency resolution, fixing: Package lighttpd is missing dependencies for the following libraries: libcrypto.so.3 Fixes: openwrt#23794 Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
This change will provide the necessary dependency resolution, fixing: Package lighttpd is missing dependencies for the following libraries: libcrypto.so.3 Fixes: openwrt#23794 Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
lighttpd: 1.4.74
Maintainer: @gstrauss
Environment: rockchip armv8, OpenWrt v23.05.3
Description:
Clean new compilation of v23.05.3 reports a missing dependency for lighttpd: libcrypto.so.3
The text was updated successfully, but these errors were encountered: