On 2012-04-07 20:39 +0200, Marc Singer wrote:

> On Sat, Apr 7, 2012 at 10:55 AM, Sven Joachim <svenj...@gmx.de> wrote:
>>
>> Apparently shellinaboxd is statically linked with ssl, which is bad.

Sorry, should have read the build logs more carefully and actually
peeked in the source code.

> No, it's dynamically link at runtime which is good.  :-)

It dlopens libssl.so which is not good, since that file only exists if
libssl-dev is installed.

> I'm looking into how to get a Recommends: dependency on libssl without
> knowing the soname a priori.

Trick upstream into linking against ssl rather than dlopening it?  Until
that happens, I don't have a better idea than to patch libhttp/ssl.c:

--8<---------------cut here---------------start------------->8---
diff --git a/libhttp/ssl.c b/libhttp/ssl.c
index f9cb37f..0d39079 100755
--- a/libhttp/ssl.c
+++ b/libhttp/ssl.c
@@ -298,7 +298,7 @@ static void loadSSL(void) {
     { { &X509_free },                   "X509_free" }
   };
   for (unsigned i = 0; i < sizeof(symbols)/sizeof(symbols[0]); i++) {
-    if (!(*symbols[i].var = loadSymbol("libssl.so", symbols[i].fn))) {
+    if (!(*symbols[i].var = loadSymbol("libssl.so.1.0.0", symbols[i].fn))) {
       debug("Failed to load SSL support. Could not find \"%s\"",
             symbols[i].fn);
       for (unsigned j = 0; j < sizeof(symbols)/sizeof(symbols[0]); j++) {
--8<---------------cut here---------------end--------------->8---

and to add a "Recommends: libssl1.0.0" to debian/control.  Of course,
this will break on the next libssl soname change.

Cheers,
       Sven



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to