I tried with many different ways to compile xmlsec for AIX 5.2
using GCC 3.3.2 and I am not able to get it working with SSL 0.9.7 or 0.9.8.
I tried (among other tries) :
- compile it using openssl 0.9.7 precompiled by IBM (both shared and static)
- using openssl 0.9.8 compiled from source with gcc (no shared only static since the
configure refuse to make a shared version)
- compiled with shared xor static option
- using special option and or not
Whatever I tried, it is broken :
- when using 0.9.7 : error during compile on x509vfy.c line 594 structure has no member
named 'depth'
- when using nothing static (crypto-dl not specified), it compiles ok but check goes only
failed
I looked at the log and the reason is it cannot load the libraries xmlsec-openssl.so.
Note that it only compiles libxmlsec[-openssl].a and not '.so' , which I suppose is
correct on AIX.
course, PATH, LIBPATH, LD_LIBRARY_PATH have in first place the right place
for the libraries or binaries.
During the compile, it shows a warning :
Warning: Linking the shared library libxmlsec1-openssl.la against the static library
/lib/libcrypto.a is not portable!
- when using static, it does not compiled and complain about not CFF libraries
(crypto-dl=no)
it just core dumped when running the check if it goes until the end of
compile.(crypto-dl not set).
Note that I was able to compile openssl, libxml and libxslt with no problem
and the test (check or equivalent) are all ok.
Any Ideas ?
Frederic
xmlsec mailing list
xmlsec (AT) aleksey (DOT) com

Please run ./configure and send the config.log file it produces.
Aleksey
xmlsec mailing list
xmlsec (AT) aleksey (DOT) com

I join the config.log with only setting simple options
(prefix, xml, xslt and openssl directories).
If I should send it inside the body of mail, I will send it
tomorrow, since it is 20h30 now for me
I hope you will find something, because I didn't until now

Frederic

Sent: Thursday, January 05, 2006 8:16 PM
Subject: Re: [xmlsec] Xmlsec not ok with AIX 5.2

Please run ./configure and send the config.log file it produces.

Aleksey

xmlsec mailing list
xmlsec (AT) aleksey (DOT) com

According to this log, ./configure script found SSL 0.9.8
installed in /opt/XML

includes /opt/XML/include
library /opt/XML/lib/libcrypto.a

Is this correct? What error do you get for this setup?

Aleksey

xmlsec mailing list
xmlsec (AT) aleksey (DOT) com

Well, I try again other ways to compile and I think I found a way.
Perhaps it could be useful to include it inside the doc
or the configure.
I figure one way I didn't check with your question So Thanks a lot !

First I answear to your question :
It is correct. I decided to compile myself SSL
and I did the self-test and all were ok for SSL.
Now for Xmlsec, the compile part is ok, but when
I do make check, all tests are failed.
In the log they all say the same thing :

r=7:io function

ibraryCreate:error=1:xmlsec library function failed:crypto=openssl

yFunctions:error=1:xmlsec library function failed:
Error: unable to load xmlsec-openssl library. Make sure you have
this it installed, check shared libraries path (LD_LIBRARY_PATH)
envornment variable or use "" option to specify different
crypto engine.
Error: initialization failed

Here is my env : (part of it)
PATH=/opt/XML/bin:
LIBPATH=/opt/XML/lib:
(even if not necessary on AIX)
LDFLAGS='-L/opt/XML/lib '

The only thing I found is that SSL (0.9.8) is only compiled as static library,
and SSL(0.9.7) given by IBM (precompiled) is both shared and static version.

Now my way to get it working :
I compile SSL 0.9.8 in the normal way (aix-gcc) not shared since it is not possible
according to the documentation (AIX + GCC K, but AIX + XLC (IBM compiler) K).
Then I compile xmlenc with the following options :
/configure -with-libxslt=
lled_my_openssl
-- enable-crypto-dl=no
I was always using previously which brokes the compile step.
Now, without specified but only (apps)-crypto-dl=no,
it compiles well and as far as I see right now, the beginning of the test (check) is ok
except from (b64)-dsa,
,
*-x509-*, and
it continues.
I send later on the final status.
I will try to change of SSL Library to see if it changes something in the check, as I
know
now how to compile it.

So, compiling with gcc on AIX needs to disable crypto-dl to work and of course
to add the libcrypto.a staticly to the program when we compile it with xmlenc.

Hope this can help other users

Frederic

Message
From: "Aleksey Sanin" <aleksey (AT) aleksey (DOT) com>
To: "ASS" <asso (AT) cp (DOT) finances.gouv.fr>
Cc: <xmlsec (AT) aleksey (DOT) com>
Sent: Friday, January 06, 2006 5:47 AM
Subject: Re: [xmlsec] Xmlsec not ok with AIX 5.2

According to this log, ./configure script found SSL 0.9.8
installed in /opt/XML

includes /opt/XML/include
library /opt/XML/lib/libcrypto.a

Is this correct? What error do you get for this setup?

Aleksey

xmlsec mailing list
xmlsec (AT) aleksey (DOT) com

So, compiling with gcc on AIX needs to disable crypto-dl to work and of course
to add the libcrypto.a staticly to the program when we compile it with xmlenc.

Now I recall that AIX has some special "loader domains" for
loading shared libs. I believe what happened in your case is
that the xmlsec-openssl was compiled against the *new* SSL
0.9.8 that you did build yourself but then it was trying to load
the *old* SSL 0.9.7 installed by the system. And this fails
for obvious reasons. Take a look here:

http://dcs.nac.uci.edu/~strombrg/AIX-shared-libs.html

for solutions to this problems.

Aleksey

xmlsec mailing list
xmlsec (AT) aleksey (DOT) com