missing symbols in libssl1.0.1f-1ubuntu2.7

[Thomas Berger]

_CONF_new_data is not exported.

The function definition is still in the headers:

# grep -r _CONF_new_data /usr/include/
/usr/include/openssl/conf_api.h:int _CONF_new_data(CONF *conf);

The library itself does not export the symbol:
$ readelf -Ws /lib/x86_64-linux-gnu/libcrypto.so.1.0.0 | grep CONF_new
  1540: 000000000012f630 84 FUNC GLOBAL DEFAULT 12 NCONF_new@@OPENSSL_1.0.0

LSB Relase:
Description: Ubuntu 14.04.1 LTS
Release: 14.04

[dino99 (9d9)]

Also checked the recent changelogs, up to 1ubuntu9 available in vivid, and that issue seems not fixed.

The upstream team have made lot of changes with newer releases: g/h/i/j versions already published. 'g' have a new symbol added, but not that missing one (as i understand).
By the way that library needs to be updated/upgraded more closer and be backported too.

http://upstream.rosalinux.ru/versions/openssl.html http://www.openssl.org/

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[dino99 (9d9)]

Debian maintainer have published the first 1.0.2 betas, which have :

openssl (1.0.2~beta1-1) experimental; urgency=medium

  * New upstream beta version
    - Update list of symbols that should be exported and adjust the symbols

https://packages.debian.org/experimental/openssl

[Thomas Berger (loki-8)]

The symbol was in libssl since 200x. In libssl0.9.8 it is still present, but the libssl-dev headers does not match the old libssl version,

[Thomas Berger (loki-8)]

I did some more research. It looks like every symbol with a leading underscore disappears if build with debuild or other.
I have tried to remove all compiler and linker flags not needed or differ from vanilla build, but this had no effect.

As i could not see any other relevant changes within the patches, i think the library breaks while adding symvers.

[Thomas Berger (loki-8)]

I have done more tests. The issue could be in the debian package building helpers. The library located in the target-directory after the build step does export all symbols. After the packaging process, all symbols starting with an underscore are missing. Maybe this effects other packages too.

[dino99 (9d9)]

Openssl has received many fixes since that report has been opened.
Can you confirm that issue is still present ?

[Launchpad Janitor (janitor)]

[Expired for openssl (Ubuntu) because there has been no activity for 60 days.]

[Nathan Neulinger (nneul-0)]

This is still impacting pretty much any library/app built against libssl that uses that function. Any idea of when it might be fixed?

[Nathan Neulinger (nneul-0)]

In my case, I can't use the Crypt::OpenSSL::CA perl module as a result.

[dino99 (9d9)]

this version has got some updates; do this problem still exist with the now used version ?

https://launchpad.net/ubuntu/+source/openssl

[Nathan Neulinger (nneul-0)]

Nope - same problem is still present:

...
# Can't load '/users/nneul/.local/share/.cpan/build/Crypt-OpenSSL-CA-0.24-DUskTa/blib/arch/auto/Crypt/OpenSSL/CA/CONF/CONF.so' for module Crypt::OpenSSL::CA::CONF: /users/nneul/.local/share/.cpan/build/Crypt-OpenSSL-CA-0.24-DUskTa/blib/arch/auto/Crypt/OpenSSL/CA/CONF/CONF.so: undefined symbol: _CONF_add_string at /usr/lib/x86_64-linux-gnu/perl/5.22/DynaLoader.pm line 187.
...

and no _ prefixed symbols present in the libraries.