[stunnel-users] Solaris9/Sparc runtime library problems

[Richard.Hall]

Dave,

On Fri, 23 Jun 2006, Dave Hinz wrote:

> This is probably a very basic problem, but I've checked the FAQ and
> googled through the mailing list's archives and I'm not seeing what
> appears to be a match for this problem.  I'm completely new to
> stunnel.  It built and runs just fine on one of my linux dev boxes,
> but on Solaris, I can't get it to run.
>
> Attempting to run /usr/local/sbin/stunnel, I get the following:
>
> ---begin output---
> jabba% ./stunnel
> ld.so.1: ./stunnel: fatal: libssl.so.0.9.7: open failed: No such file
> or directory
> Killed
> ---end output---
>
> The various debug switches to stunnel give the same output - it's
> dying before anything can  be started, apparently.
>
> libssl.so.0.9.7 is located on that box at
> /usr/local/ssl/lib/libssl.so.0.9.7and other ssl functions of the
> system appear to work normally.  I suspect that stunnel just doesn't
> know how to find it, but I'm at a loss as to how to tell it where to
> look.  Can someone suggest my next steps please?

I'm aware of (at least) three ways to go about fixing this;_

1) Mess around with crle(1) to modify the loading environment system-wide.
I've never (yet) been down this road myself, so can only suggest you read
the man page.

2) Set LD_LIBRARY_PATH at run-time so that stunnel can find the library.
At the moment, 'ldd stunnel' will probably say something like
   ...
   libssl.so.0.9.7 => (file not found)
   ...
whereas 'LD_LIBRARY_PATH=/usr/local/ssl/lib ldd stunnel' will hopefully
say
   ...
   libssl.so.0.9.7 => /usr/local/ssl/lib/libssl.so.0.9.7
   ...

3) Set LD_RUN_PATH at _compile_ time, so that the location is built into
the stunnel binary. I did this at configure time - my notes from a while
back say :-

./configure --prefix=/usr/local/stunnel-4.13 --disable-libwrap \
            --with-ssl=/usr/local/openssl-0.9.7 \
            LDFLAGS='-R /usr/local/openssl-0.9.7/lib'

(LDFLAGS='-R ...  is equivalent to setting LD_RUN_PATH, though I can't now
remember exactly how/why!) If you run 'dump' on the resulting binary, you
will see something like

$ dump -Lv stunnel

stunnel:

  **** DYNAMIC SECTION INFORMATION ****
.dynamic:
[INDEX] Tag         Value
[...]
[5]     NEEDED          libssl.so.0.9.7
[...]
[10]    RUNPATH         /usr/local/openssl-0.9.7/lib
[11]    RPATH           /usr/local/openssl-0.9.7/lib
[...]


My understanding is that (2) is frowned upon by purists, (3) is fine if
you want to fix up a single application, and (1) is better if you will be
wanting to incorporate openssl into a number of applications. YMMV etc.

HTH,
 Richard