Dev1 Galaxy Forum / [SOLVED] difficulty compiling openssl

Re: [SOLVED] difficulty compiling openssl

dummy@example.com (evanescente~ondine) — Fri, 03 Oct 2025 21:25:23 +0000

Done !
I just took time to think and study the source !

Re: [SOLVED] difficulty compiling openssl

dummy@example.com (g4sra) — Fri, 03 Oct 2025 20:16:01 +0000

Just done a quick google, as of Jan 2024 brotli is an external module and not part of nginx (so will unlikely be in daedelus sources).
You build brotli on its own, no need to build OpenSSL or nginx

I googled for a solution and hit this, there may be better options out there...
https://thelinuxcode.com/enable-brotli- … ion-nginx/

Re: [SOLVED] difficulty compiling openssl

dummy@example.com (g4sra) — Fri, 03 Oct 2025 18:54:00 +0000

Ha, just tried it for fun and even that fails

Re: [SOLVED] difficulty compiling openssl

dummy@example.com (g4sra) — Fri, 03 Oct 2025 17:54:30 +0000

This is absolutely, mindboggingly complicated for no reason

One reason it is absolutely mindboggingly complicated is that you are compiling outside of the packaging system.
I would not even attempt it this way, my approach would be to

apt-get source openssl
apt-get source nginx

*Build them both without modification*
Once that works, for each package modify the compilation options (most likely debian/rules) to achieve the desired result.

Re: [SOLVED] difficulty compiling openssl

dummy@example.com (evanescente~ondine) — Fri, 03 Oct 2025 17:45:27 +0000

.Yes it should, but I corrected it: no change.
cd /home/drm/openssl-3.5.1/ \
&& if [ -f Makefile ]; then make clean; fi \
&& ./config --prefix=/home/drm/openssl-3.5.1//.openssl no-shared no-threads enable-tls1_3 enable-quic \
&& make \
&& make install_sw LIBDIR=lib
/bin/sh: 3: ./config: not found
make[1]: *** [objs/Makefile:1703: /home/drm/openssl-3.5.1//.openssl/include/openssl/ssl.h] Error 127
make[1]: Leaving directory '/usr/local/src/nginx-1.29.1'
make: *** [Makefile:13: install] Error 2

I do not know why it uses cmake or not make, config, or whatever else, and "./configure --help" reads like Chinese to me.

Re: [SOLVED] difficulty compiling openssl

dummy@example.com (g4sra) — Fri, 03 Oct 2025 17:07:59 +0000

nginx is still trying to compile OpenSSL (which looks like it requires 'cmake' not 'make' anyway).
Where did these come from, they look suspicious to me ?

--with-cc-opt="-I /home/drm/openssl-3.5.1/include" \
--with-ld-opt="-L /home/drm/openssl-3.5.1/lib"

Shoudn't the paths be

/home/drm/openssl-3.5.1/install/include
/home/drm/openssl-3.5.1/install/lib64

Your guide is

./configure --help

Re: [SOLVED] difficulty compiling openssl

dummy@example.com (evanescente~ondine) — Fri, 03 Oct 2025 16:33:05 +0000

this was the build options:

./configure \
--prefix=/etc/nginx \
--sbin-path=/usr/sbin/nginx \
--conf-path=/etc/nginx/nginx.conf \
--pid-path=/var/run/nginx.pid \
--lock-path=/var/run/nginx.lock \
--error-log-path=/var/log/nginx/error.log \
--http-log-path=/var/log/nginx/access.log \
--modules-path=/usr/lib/nginx/modules \
--with-compat \
--with-http_ssl_module \
--with-http_v2_module \
--with-http_v3_module \
--with-http_addition_module \
--with-http_random_index_module \
--with-http_slice_module \
--with-http_stub_status_module \
--with-threads \
--with-file-aio \
--add-dynamic-module=/home/drm/ngx_brotli \
--with-openssl=/home/drm/openssl-3.5.1 \
--with-openssl-opt="enable-tls1_3 enable-quic" \
--with-cc-opt="-I /home/drm/openssl-3.5.1/include" \
--with-ld-opt="-L /home/drm/openssl-3.5.1/lib"

Re: [SOLVED] difficulty compiling openssl

dummy@example.com (evanescente~ondine) — Fri, 03 Oct 2025 16:29:22 +0000

I want to compile nginx with the http/3 and brotli compression support. The default build doesn't have the second. That requires, among other things, an SSL implementation,

I installed both packages you mentioned and made some progress. Until it blocks again. I really hate compilations, they're the quintessence of all the nonsense in computers.

rm@84-47-09-37-40-35 /u/l/s/nginx-1.29.1 [2]> make -j (nproc)
make -f objs/Makefile
make[1]: Entering directory '/usr/local/src/nginx-1.29.1'
cd /home/drm/openssl-3.5.1 \
&& if [ -f Makefile ]; then make clean; fi \
&& ./config --prefix=/home/drm/openssl-3.5.1/.openssl no-shared no-threads enable-tls1_3 enable-quic \
&& make \
&& make install_sw LIBDIR=lib
/bin/sh: 3: ./config: not found
make[1]: *** [objs/Makefile:1703: /home/drm/openssl-3.5.1/.openssl/include/openssl/ssl.h] Error 127
make[1]: Leaving directory '/usr/local/src/nginx-1.29.1'
make: *** [Makefile:10: build] Error 2

Here's the structure of openssl-3.5.1

/home/drm/openssl-3.5.1
└──􀀂 install
├──􀀂 bin
│ ├──􀀀 c_rehash
│ └──􀀀 openssl
├──􀀂 include
│ └──􀀂 openssl
│ ├──􀂴 asn1.h
│ ├──􀂴 asn1err.h
│ ├──􀂴 asn1t.h
│ ├──􀂴 async.h
│ ├──􀂴 asyncerr.h
│ ├──􀂴 bio.h
│ ├──􀂴 bioerr.h
│ └──􀂴 135 unlisted
├──􀀂 lib64
│ ├──􀀂 cmake
│ │ └──􀀂 OpenSSL …
│ ├──􀀂 engines-4
│ │ ├──􀂖 afalg.so
│ │ ├──􀂖 capi.so
│ │ ├──􀂖 loader_attic.so
│ │ └──􀂖 padlock.so
│ ├──􀂖 libcrypto.a
│ ├──🔗 libcrypto.so -> /home/drm/openssl-3.5.1/install/lib64/libcrypto.so.4
│ ├──􀀀 libcrypto.so.4
│ ├──􀂖 libssl.a
│ ├──🔗 libssl.so -> /home/drm/openssl-3.5.1/install/lib64/libssl.so.4
│ ├──􀀀 libssl.so.4
│ ├──􀀂 ossl-modules
│ │ └──􀂖 legacy.so
│ └──􀀂 pkgconfig
│ ├──􀀀 libcrypto.pc
│ ├──􀀀 libssl.pc
│ └──􀀀 openssl.pc
├──􀀂 share
│ ├──􀀂 doc
│ │ └──􀀂 openssl …
│ └──􀀂 man
│ ├──􀀂 man1 …
│ ├──􀀂 man3 …
│ ├──􀀂 man5 …
│ └──􀀂 man7 …
└──􀀂 ssl
├──􀀂 certs
├──􀀀 ct_log_list.cnf
├──􀀀 ct_log_list.cnf.dist
├──􀀂 misc
│ ├──􀀀 CA.pl
│ ├──🔗 tsget -> /home/drm/openssl-3.5.1/install/ssl/misc/tsget.pl
│ └──􀀀 tsget.pl
├──􀀀 openssl.cnf
├──􀀀 openssl.cnf.dist
└──􀀂 private

Re: [SOLVED] difficulty compiling openssl

dummy@example.com (evanescente~ondine) — Fri, 03 Oct 2025 15:45:44 +0000

I want to compile nginx with the http/3 and brotli compression support. The default build doesn't have the second. That requires, among other things, an SSL implementation, and openssl seemed the most secure and straightforward to compile. Or so I thought.

Re: [SOLVED] difficulty compiling openssl

dummy@example.com (g4sra) — Fri, 03 Oct 2025 15:39:16 +0000

As it is unclear to me why you are compiling OpenSSL (my fault TL;DR;)

g4sra@localhost:# apt-file search libssl.a
libssl-dev: /usr/lib/x86_64-linux-gnu/libssl.a
g4sra@localhost:# apt-file search libcrypto.a
libssl-dev: /usr/lib/x86_64-linux-gnu/libcrypto.a

So installing the libssl-dev package would satisfy both those previously mentioned libraries (for me)

Re: [SOLVED] difficulty compiling openssl

dummy@example.com (g4sra) — Fri, 03 Oct 2025 15:32:04 +0000

That error is caused by a missing system header file.
Ensure you have installed the package corresponding to your compiler version,

gcc -v 2>&1 | tail -1
gcc version 12.2.0 (Debian 12.2.0-14+deb12u1)

for me that is

apt install libgcc-12-dev

Re: [SOLVED] difficulty compiling openssl

dummy@example.com (RedGreen925) — Fri, 03 Oct 2025 04:17:14 +0000

And then, the compilation still fails.
Feel free to look into the errors here.

So why the 4.0.0-dev version and not the 3.5.1? This has been shown above to work and is included/built in an excalibur system.

Edit: Oh non-mangled link to the pastebin.

https://pastebin.com/zTPZeV6b

Re: [SOLVED] difficulty compiling openssl

dummy@example.com (evanescente~ondine) — Fri, 03 Oct 2025 03:55:53 +0000

Let me telll you, upgrading to excalibur was a pain in the bottom.
... And then, the compilation still fails.
Feel free to look into the errors here.

Re: [SOLVED] difficulty compiling openssl

dummy@example.com (ralph.ronnquist) — Thu, 02 Oct 2025 22:56:22 +0000

The Devuan imperative has always been: do not use stable, oldstable. or oldoldstable as release codenames!

Those codenames have individual meanings for the forked packages and the Debian packages., so there is always this period of time when Debian has "moved" its meanings (e.g. it's stbale packages are in the trixie release) while the Devuan forked packages have note so "moved" (e.g., its "stable" packages are still in the "daedalus" release).

The reason may be of some complexity to digest, but the rule is simple:
do not use stable, oldstable. or oldoldstable as release codenames!

Re: [SOLVED] difficulty compiling openssl

dummy@example.com (evanescente~ondine) — Thu, 02 Oct 2025 22:23:37 +0000

Huh. I see. Sorry I was really not clear on the devuan release system or codenames. I'll upgrade everything and see what happens.