blob: 716abced5151046502e8c4db231561bffe7dcb95 [file] [log] [blame]
Darren Tuckera0472e02003-06-24 20:22:09 +10001#!/bin/sh
2#
Darren Tucker442a3832004-12-13 18:08:32 +11003# $Id: findssl.sh,v 1.3 2004/12/13 07:08:33 dtucker Exp $
4#
Darren Tuckera0472e02003-06-24 20:22:09 +10005# findssl.sh
6# Search for all instances of OpenSSL headers and libraries
7# and print their versions.
8# Intended to help diagnose OpenSSH's "OpenSSL headers do not
9# match your library" errors.
10#
11# Written by Darren Tucker (dtucker at zip dot com dot au)
12# This file is placed in the public domain.
13#
Darren Tucker442a3832004-12-13 18:08:32 +110014# Release history:
Darren Tuckera0472e02003-06-24 20:22:09 +100015# 2002-07-27: Initial release.
16# 2002-08-04: Added public domain notice.
17# 2003-06-24: Incorporated readme, set library paths. First cvs version.
Darren Tucker442a3832004-12-13 18:08:32 +110018# 2004-12-13: Add traps to cleanup temp files, from Amarendra Godbole.
Darren Tuckera0472e02003-06-24 20:22:09 +100019#
Damien Millera8e06ce2003-11-21 23:48:55 +110020# "OpenSSL headers do not match your library" are usually caused by
Darren Tuckera0472e02003-06-24 20:22:09 +100021# OpenSSH's configure picking up an older version of OpenSSL headers
22# or libraries. You can use the following # procedure to help identify
23# the cause.
Damien Millera8e06ce2003-11-21 23:48:55 +110024#
Darren Tuckera0472e02003-06-24 20:22:09 +100025# The output of configure will tell you the versions of the OpenSSL
26# headers and libraries that were picked up, for example:
Damien Millera8e06ce2003-11-21 23:48:55 +110027#
Darren Tuckera0472e02003-06-24 20:22:09 +100028# checking OpenSSL header version... 90604f (OpenSSL 0.9.6d 9 May 2002)
29# checking OpenSSL library version... 90602f (OpenSSL 0.9.6b [engine] 9 Jul 2001)
30# checking whether OpenSSL's headers match the library... no
31# configure: error: Your OpenSSL headers do not match your library
Damien Millera8e06ce2003-11-21 23:48:55 +110032#
Darren Tuckera0472e02003-06-24 20:22:09 +100033# Now run findssl.sh. This should identify the headers and libraries
34# present and their versions. You should be able to identify the
35# libraries and headers used and adjust your CFLAGS or remove incorrect
36# versions. The output will show OpenSSL's internal version identifier
37# and should look something like:
38
39# $ ./findssl.sh
40# Searching for OpenSSL header files.
41# 0x0090604fL /usr/include/openssl/opensslv.h
42# 0x0090604fL /usr/local/ssl/include/openssl/opensslv.h
Damien Millera8e06ce2003-11-21 23:48:55 +110043#
Darren Tuckera0472e02003-06-24 20:22:09 +100044# Searching for OpenSSL shared library files.
45# 0x0090602fL /lib/libcrypto.so.0.9.6b
46# 0x0090602fL /lib/libcrypto.so.2
47# 0x0090581fL /usr/lib/libcrypto.so.0
48# 0x0090602fL /usr/lib/libcrypto.so
49# 0x0090581fL /usr/lib/libcrypto.so.0.9.5a
50# 0x0090600fL /usr/lib/libcrypto.so.0.9.6
51# 0x0090600fL /usr/lib/libcrypto.so.1
Damien Millera8e06ce2003-11-21 23:48:55 +110052#
Darren Tuckera0472e02003-06-24 20:22:09 +100053# Searching for OpenSSL static library files.
54# 0x0090602fL /usr/lib/libcrypto.a
55# 0x0090604fL /usr/local/ssl/lib/libcrypto.a
Damien Millera8e06ce2003-11-21 23:48:55 +110056#
Darren Tuckera0472e02003-06-24 20:22:09 +100057# In this example, I gave configure no extra flags, so it's picking up
58# the OpenSSL header from /usr/include/openssl (90604f) and the library
59# from /usr/lib/ (90602f).
60
61#
62# Adjust these to suit your compiler.
63# You may also need to set the *LIB*PATH environment variables if
64# DEFAULT_LIBPATH is not correct for your system.
65#
66CC=gcc
67STATIC=-static
68
69#
Darren Tucker442a3832004-12-13 18:08:32 +110070# Cleanup on interrupt
71#
72trap 'rm -f conftest.c' INT HUP TERM
73
74#
Darren Tuckera0472e02003-06-24 20:22:09 +100075# Set up conftest C source
76#
77rm -f findssl.log
78cat >conftest.c <<EOD
79#include <stdio.h>
80int main(){printf("0x%08xL\n", SSLeay());}
81EOD
82
83#
84# Set default library paths if not already set
85#
86DEFAULT_LIBPATH=/usr/lib:/usr/local/lib
87LIBPATH=${LIBPATH:=$DEFAULT_LIBPATH}
88LD_LIBRARY_PATH=${LD_LIBRARY_PATH:=$DEFAULT_LIBPATH}
89LIBRARY_PATH=${LIBRARY_PATH:=$DEFAULT_LIBPATH}
90export LIBPATH LD_LIBRARY_PATH LIBRARY_PATH
91
92#
93# Search for OpenSSL headers and print versions
94#
95echo Searching for OpenSSL header files.
96if [ -x "`which locate`" ]
97then
98 headers=`locate opensslv.h`
99else
100 headers=`find / -name opensslv.h -print 2>/dev/null`
101fi
102
103for header in $headers
104do
105 ver=`awk '/OPENSSL_VERSION_NUMBER/{printf \$3}' $header`
106 echo "$ver $header"
107done
108echo
109
110#
111# Search for shared libraries.
112# Relies on shared libraries looking like "libcrypto.s*"
113#
114echo Searching for OpenSSL shared library files.
115if [ -x "`which locate`" ]
116then
117 libraries=`locate libcrypto.s`
118else
119 libraries=`find / -name 'libcrypto.s*' -print 2>/dev/null`
120fi
121
122for lib in $libraries
123do
124 (echo "Trying libcrypto $lib" >>findssl.log
125 dir=`dirname $lib`
126 LIBPATH="$dir:$LIBPATH"
127 LD_LIBRARY_PATH="$dir:$LIBPATH"
128 LIBRARY_PATH="$dir:$LIBPATH"
129 export LIBPATH LD_LIBRARY_PATH LIBRARY_PATH
130 ${CC} -o conftest conftest.c $lib 2>>findssl.log
131 if [ -x ./conftest ]
132 then
133 ver=`./conftest 2>/dev/null`
134 rm -f ./conftest
135 echo "$ver $lib"
136 fi)
137done
138echo
139
140#
141# Search for static OpenSSL libraries and print versions
142#
143echo Searching for OpenSSL static library files.
144if [ -x "`which locate`" ]
145then
146 libraries=`locate libcrypto.a`
147else
148 libraries=`find / -name libcrypto.a -print 2>/dev/null`
149fi
150
151for lib in $libraries
152do
153 libdir=`dirname $lib`
154 echo "Trying libcrypto $lib" >>findssl.log
155 ${CC} ${STATIC} -o conftest conftest.c -L${libdir} -lcrypto 2>>findssl.log
156 if [ -x ./conftest ]
157 then
158 ver=`./conftest 2>/dev/null`
159 rm -f ./conftest
160 echo "$ver $lib"
161 fi
162done
163
164#
165# Clean up
166#
167rm -f conftest.c