first build on Linux: OpenSSL issue

mzimmers

@SGaist sorry, I forgot to mention that I'm using Qt 6.5.3.

So, in the error message, where it says "built with" -- does that refer to my application, or to the version of Qt I'm running? And, I don't understand the "runtime version" being < 3.x; this is a new system with a new install of Qt, and I do have a libssl3.so in my /usr/lib/x86_64-linux-gnu folder.

I guess what I'm really asking is, which version of the library should I be trying to use - the old one, or the new one?

Thanks...

SGaist

The prebuilt versions of Qt do not link to OpenSSL directly but loads it at run time. So what you see there is the version of OpenSSL that was used to build the loading support. The runtime value is the version of OpenSSL that was found when your application is loaded.

It is surprising that you have such a mismatch. Can you use strace to check which version of OpenSSL is found ?

JoeCFD

@mzimmers run
locate libssl3.so
to see if you have more than one.

My guess is you have one with Qt installation and your app is built with it. But when you run your app, it links with the one( /usr/lib/x86_64-linux-gnu/libssl3.so ) installed with distribution. Ubuntu 22.04 has Qt 6.2.4. If you install it, you can purge it because you are not using it.

mzimmers

@JoeCFD

locate libssl3.so
/snap/chromium/1135/usr/lib/x86_64-linux-gnu/libssl3.so
/snap/chromium/2704/usr/lib/x86_64-linux-gnu/libssl3.so
/snap/gnome-42-2204/141/usr/lib/x86_64-linux-gnu/libssl3.so
/snap/slack/118/usr/lib/x86_64-linux-gnu/libssl3.so
/snap/snap-store/433/usr/lib/x86_64-linux-gnu/libssl3.so
/snap/snap-store/959/usr/lib/x86_64-linux-gnu/libssl3.so
/usr/lib/firefox/libssl3.so
/usr/lib/thunderbird/libssl3.so
/usr/lib/x86_64-linux-gnu/libssl3.so

This might be of more interest:

mzimmers@LinuxBoxZimmers:/usr/lib/x86_64-linux-gnu$ ls -l libssl*
-rw-r--r-- 1 root root  382024 Feb 17  2023 libssl3.so
-rw-r--r-- 1 root root 1016494 Oct 10 02:03 libssl.a
lrwxrwxrwx 1 root root      13 Oct 10 02:03 libssl.so -> libssl.so.1.1
-rw-r--r-- 1 root root  598104 Oct 10 02:03 libssl.so.1.1
mzimmers@LinuxBoxZimmers:/usr/lib/x86_64-linux-gnu$

If I understand this, my system is set up to use 1.1 (that's where the link is pointing)...is that how it should be?

@SGaist can you give me the proper invocation for strace? I tried it, but it just gives reams of output.

Thanks...

JoeCFD

@mzimmers show
ldd your app | grep libssl

mzimmers

@JoeCFD nothing.

JoeCFD

@mzimmers ldd your app

mzimmers

@JoeCFD I did:

mzimmers@LinuxBoxZimmers:~/QtProjects/build-NgaIcdFw-Desktop_Qt_6_5_3_GCC_64bit-Debug$ ldd appNgaIcdFw | grep libssl
mzimmers@LinuxBoxZimmers:~/QtProjects/build-NgaIcdFw-Desktop_Qt_6_5_3_GCC_64bit-Debug$

JoeCFD

@mzimmers no need. The Qt plugin has issue. Not your code.

mzimmers

@JoeCFD which plugin are you referring to?

JoeCFD

@mzimmers
Qt has a plugin libqopensslbackend.so in under gcc_64/plugins/tls. But I can see the direct link to libssl.

Anyway, libssl.so -> libssl.so.1.1 softlink always points to libssl.so.1.1.
I guess if you softlink libssl.so to libssl3.so, the problem may be gone. However, other packages in your system may be affected if they use 1.1.

mzimmers

@JoeCFD said in first build on Linux: OpenSSL issue:

Qt has a plugin libqopensslbackend.so in under gcc_64/plugins/tls. But I can see the direct link to libssl.

And this plugin links to version 1.1 of OpenSSL? Or is this because of the link in my /usr/lib/x86_64-linux-gnu folder?

I'd prefer to eliminate the error message, but not at the expense of breaking other applications in the system.

JoeCFD

@mzimmers Which Qt modules are you using? I ran a few Qt 6.6 network examples and could not see your issue.

mzimmers

@JoeCFD

Qt 6.5.3
Desktop gcc 64-bit
WebAssembly (single-threaded)
Android
Sources
Qt HTTP Server (TP)
Qt Virtual Keyboard
Qt WebSockets

Thanks...

SGaist

How come you have both OpenSSL 3 and 1.1 ?

How did you install them ?

JoeCFD

@mzimmers I have two in my computer as well. But my libssl points to libssl.so.3 and openssl version shows OpenSSL 3.0.2.

Maybe you can try to reinstall it.
sudo apt-get reinstall openssl
and then run
openssl version
to see if you have the right version

mzimmers

@JoeCFD still points to 1.1. shrug

I suppose I could manually relink it, but I'm not sure about the side effects.

mzimmers

@SGaist I have no idea - this is how the system came to me. The only real change my IT department made was to install some anti-virus application; maybe that used the older version of openssl?

JoeCFD

@mzimmers anti-virus application in Linux? I do not have any. But I know Linux viruses indeed exist.

I have libssl.so.3. You seem not having it.
run
sudo synaptic
Search for libssl
to see if you have installed libssl-dev
If not, install it. This one has version 3.0.2.

mzimmers

@JoeCFD I believe I do have it:

mzimmers@LinuxBoxZimmers:~/Downloads$ whereis libssl
libssl: /usr/lib/x86_64-linux-gnu/libssl.so /usr/lib/x86_64-linux-gnu/libssl3.so /usr/lib/x86_64-linux-gnu/libssl.a
mzimmers@LinuxBoxZimmers:~/Downloads$ cd /usr/lib/x86_64-linux-gnu/
mzimmers@LinuxBoxZimmers:/usr/lib/x86_64-linux-gnu$ ls -l libssl*
-rw-r--r-- 1 root root  382024 Feb 17  2023 libssl3.so
-rw-r--r-- 1 root root 1016494 Oct 10 02:03 libssl.a
lrwxrwxrwx 1 root root      13 Oct 10 02:03 libssl.so -> libssl.so.1.1
-rw-r--r-- 1 root root  598104 Oct 10 02:03 libssl.so.1.1
mzimmers@LinuxBoxZimmers:/usr/lib/x86_64-linux-gnu$

The link just happens to be pointing to my older version. I don't know why.