Hal,

> But when I run
>   ./apps/openssl version -d
> it says:
>   OPENSSLDIR: "/usr/local/ssl"
> I was expecting /etc/pki/tls from the Configure line above.
>
> What am I missing?  How do I tell it where to find the default certificates?

It is very likely that your binary is actually loading the system's shared 
libraries instead of
the ones you just compiled. You can verify whether this using the `ldd` 
command, see below.

There is a shared library wrapper called `shlib_wrap.sh` which can be used to 
run
the compiled application correctly without installing it:

## incorrect (without wrapper)
msp@msppc:~/src/openssl-1.1.1$ apps/openssl version -d
OPENSSLDIR: "/etc/ssl"

## correct (using the wrapper)
msp@msppc:~/src/openssl-1.1.1$ util/shlib_wrap.sh apps/openssl version -d
OPENSSLDIR: "/opt/openssl-1.1.1-dev/ssl"

HTH,

Matthias




## ldd output without wrapper

msp@msppc:~/src/openssl-1.1.1$ ldd apps/openssl
        linux-vdso.so.1 (0x00007fff05b81000)
        libssl.so.1.1 => /usr/lib64/libssl.so.1.1 (0x00007f6e46ade000)
        libcrypto.so.1.1 => /usr/lib64/libcrypto.so.1.1 (0x00007f6e46820000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007f6e4681a000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f6e467fa000)
        libc.so.6 => /lib64/libc.so.6 (0x00007f6e46641000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f6e46c5d000)

## ldd output using the wrapper

msp@msppc:~/src/openssl-1.1.1$ util/shlib_wrap.sh ldd apps/openssl
        linux-vdso.so.1 (0x00007ffd2032e000)
        libssl.so.1.1 => util/../libssl.so.1.1 (0x00007f4a34aeb000)
        libcrypto.so.1.1 => util/../libcrypto.so.1.1 (0x00007f4a347a2000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007f4a34785000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f4a34765000)
        libc.so.6 => /lib64/libc.so.6 (0x00007f4a345ac000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f4a34c78000)

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to