Compile oqs-provider for openssl installed in arbitrary path

[xianglingzhang]

Hi, I have installed openssl-3.4.0-dev in /usr/local/ssl

./Configure --prefix=/usr/local/ssl --openssldir=/usr/local/ssl '-Wl,-rpath,$(LIBRPATH)'

but when I compile oqs-provider with

cmake -S . -B _build && cmake --build _build
CMake Deprecation Warning at CMakeLists.txt:4 (cmake_minimum_required):
  Compatibility with CMake < 3.5 will be removed from a future version of
  CMake.

  Update the VERSION argument <min> value or use a ...<max> suffix to tell
  CMake that the project does not need compatibility with older versions.


-- The C compiler identification is GNU 11.2.1
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Check for working C compiler: /opt/rh/devtoolset-11/root/usr/bin/cc - skipped
-- Detecting C compile features
-- Detecting C compile features - done
-- Creating Release build
-- Build will store public keys in PKCS#8 structures
-- Build will not include external encoding library for SPKI/PKCS#8
-- Found OpenSSL: /usr/local/lib64/libcrypto.so (found suitable version "3.4.0", minimum required is "3.0")
-- liboqs found: Include dir at /usr/local/include;/usr/local/include/oqs
-- Building commit 0ec51ec in /home/zxl/oqsopenssl/openssl/oqs-provider
-- Configuring done (0.5s)
CMake Warning at oqsprov/CMakeLists.txt:40 (add_library):
  Cannot generate a safe linker search path for target oqsprovider because
  files in some directories may conflict with libraries in implicit
  directories:

    link library [libcrypto.so] in /usr/lib64 may be hidden by files in:
      /usr/local/ssl/lib64

  Some of these libraries may not be found correctly.


CMake Warning at oqsprov/CMakeLists.txt:40 (add_library):
  Cannot generate a safe runtime search path for target oqsprovider because
  files in some directories may conflict with libraries in implicit
  directories:

    runtime library [libcrypto.so.1.1] in /usr/lib64 may be hidden by files in:
      /usr/local/lib64

  Some of these libraries may not be found correctly.


-- Generating done (0.0s)
-- Build files have been written to: /home/zxl/oqsopenssl/openssl/oqs-provider/_build
[  3%] Building C object oqsprov/CMakeFiles/oqsprovider.dir/oqsprov.c.o
[  6%] Building C object oqsprov/CMakeFiles/oqsprovider.dir/oqsprov_capabilities.c.o
[  9%] Building C object oqsprov/CMakeFiles/oqsprovider.dir/oqsprov_keys.c.o
[ 12%] Building C object oqsprov/CMakeFiles/oqsprovider.dir/oqs_kmgmt.c.o
[ 16%] Building C object oqsprov/CMakeFiles/oqsprovider.dir/oqs_sig.c.o
[ 19%] Building C object oqsprov/CMakeFiles/oqsprovider.dir/oqs_kem.c.o
[ 22%] Building C object oqsprov/CMakeFiles/oqsprovider.dir/oqs_encode_key2any.c.o
[ 25%] Building C object oqsprov/CMakeFiles/oqsprovider.dir/oqs_endecoder_common.c.o
[ 29%] Building C object oqsprov/CMakeFiles/oqsprovider.dir/oqs_decode_der2key.c.o
[ 32%] Building C object oqsprov/CMakeFiles/oqsprovider.dir/oqsprov_bio.c.o
[ 35%] Linking C shared module ../lib/oqsprovider.so
[ 35%] Built target oqsprovider
[ 38%] Building C object test/CMakeFiles/oqs_test_signatures.dir/oqs_test_signatures.c.o
[ 41%] Building C object test/CMakeFiles/oqs_test_signatures.dir/test_common.c.o
[ 45%] Linking C executable oqs_test_signatures
[ 45%] Built target oqs_test_signatures
[ 48%] Building C object test/CMakeFiles/oqs_test_kems.dir/oqs_test_kems.c.o
[ 51%] Building C object test/CMakeFiles/oqs_test_kems.dir/test_common.c.o
[ 54%] Linking C executable oqs_test_kems
[ 54%] Built target oqs_test_kems
[ 58%] Building C object test/CMakeFiles/oqs_test_groups.dir/oqs_test_groups.c.o
[ 61%] Building C object test/CMakeFiles/oqs_test_groups.dir/test_common.c.o
[ 64%] Building C object test/CMakeFiles/oqs_test_groups.dir/tlstest_helpers.c.o
[ 67%] Linking C executable oqs_test_groups
[ 67%] Built target oqs_test_groups
[ 70%] Building C object test/CMakeFiles/oqs_test_tlssig.dir/oqs_test_tlssig.c.o
[ 74%] Building C object test/CMakeFiles/oqs_test_tlssig.dir/test_common.c.o
[ 77%] Building C object test/CMakeFiles/oqs_test_tlssig.dir/tlstest_helpers.c.o
[ 80%] Linking C executable oqs_test_tlssig
[ 80%] Built target oqs_test_tlssig
[ 83%] Building C object test/CMakeFiles/oqs_test_endecode.dir/oqs_test_endecode.c.o
[ 87%] Building C object test/CMakeFiles/oqs_test_endecode.dir/test_common.c.o
[ 90%] Linking C executable oqs_test_endecode
[ 90%] Built target oqs_test_endecode
[ 93%] Building C object test/CMakeFiles/oqs_test_evp_pkey_params.dir/oqs_test_evp_pkey_params.c.o
[ 96%] Building C object test/CMakeFiles/oqs_test_evp_pkey_params.dir/test_common.c.o
[100%] Linking C executable oqs_test_evp_pkey_params
[100%] Built target oqs_test_evp_pkey_params

It doesn't get the right openssl (it seems like find_package(OpenSSL 3.0 REQUIRED) can only find the default openssl), how to compile oqs-provider for openssl installed in arbitrary path?

[SWilson4]

Hi @xianglingzhang, thanks for the question. You can tell CMake where to find your custom installation of OpenSSL by setting the OPENSSL_ROOT_DIR variable. Please let me know if that fixes your issue.

As a future note, if you want to try out oqs-provider for a specific OpenSSL version without causing issues with an existing OpenSSL installation, you can use the fullbuild.sh script to automatically configure and build an arbitrary OpenSSL version without doing a system-wide installation.

[SWilson4]

I've converted this to a discussion so it's found more easily in our knowledge base for others who may encounter a similar problem.

[xianglingzhang]

Hi, it works, thanks a lot! @SWilson4