[asterisk-bugs] [JIRA] (ASTERISK-26942) pjproject_bundled: Pass asterisk library overrides to pjproject configure

[Badalian Vyacheslav (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-26942?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=236664#comment-236664 ] 

Badalian Vyacheslav edited comment on ASTERISK-26942 at 4/24/17 5:36 PM:
-------------------------------------------------------------------------

I'll try with Google translator :)

If I do configure with pjproject bundled and with-ssl, then:
1. confugure for pjproject is started without the --with-ssl option.
2. The rpath rules CFLAGS and LDFLAGS are not added to user.mak
3. Without LD_PRELOAD in the direction of /usr/local/ssl/lib64,in systemd service in centos 7 libcrypto.1.0.0x and libssl.1.0.0x are loaded ... but there are other libraries that are loaded by dependencies. And they loading libcrypto.10 and libssl.10 (from the delivery of the system). As a result, we get a strange confession, since the names of functions in libraries are similar, but the code is different.

Precisely because of point 3, we would like to be able to generate * .a files from openssl bundled and to insert logic into the asterisk libraries. Firstly, it will give new chipers, in the second, calls will not return with the loading of other libraries that load the system version of openssl.


was (Author: slavon):
I'll try with Google translator :)

If I do configure with pjproject bundled and with-ssl, then:
1. confugure for pjproject is started without the --with-ssl option.
2. The rpath rules CFLAGS and LDFLAGS are not added to user.mak
3. Without LD_PRELOAD in the direction of /usr/local/ssl/lib64,in systemd service in centos 7 libcrypto.1.0.0x and libssl.1.0.0x are loaded ... but there are other libraries that are loaded by dependencies. And they download libcrypto.10 and libssl.10 (from the delivery of the system). As a result, we get a strange confession, since the names of functions in libraries are similar, but the code is different.

Precisely because of point 3, we would like to be able to generate * .a files from openssl bundled and to insert logic into the asterisk libraries. Firstly, it will give new chipers, in the second, calls will not return with the loading of other libraries that load the system version of openssl.

> pjproject_bundled: Pass asterisk library overrides to pjproject configure
> -------------------------------------------------------------------------
>
>                 Key: ASTERISK-26942
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-26942
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>            Reporter: Badalian Vyacheslav
>            Severity: Trivial
>
> if configure used wih --with-ssl options need:
> 1. Add -Wl,-rpath=dir to cflags and ldflags in user.mak in PJSIP
> 2. Add LD_PRELOAD to systemctl ENV becouse some dll without rpath will use system ssl lib, this load two ssl libs (centos 7 have other library name) and code have two jump lables. This leads to strange behavior.
> Also for full support DTLS 1.2 and chrome chipers for WebRTC need compile last openssl library. It is very difficult for a simple user, because I have to play with non-standard parameters. May be you add -with-openssl-bundle options like PJSIP?



--
This message was sent by Atlassian JIRA
(v6.2#6252)