openssl: restore removed libcrypto symbols as compat symbols
ClosedPublic
Actions

Authored by gordon on Thu, Nov 5, 5:42 PM.

Project Tags

None

Referenced Files

	F177286882: D61229.1794092931.diff
	Fri, Nov 6, 11:08 PM

	F177286842: D61229.1794092668.diff
	Fri, Nov 6, 11:04 PM

	F177282416: D61229.1794078290.diff
	Fri, Nov 6, 7:04 PM

	F177282177: D61229.1794078107.diff
	Fri, Nov 6, 7:01 PM

	F177282047: D61229.1794077927.diff
	Fri, Nov 6, 6:58 PM

Subscribers

imp

Details

Reviewers

ngie

Commits

rGf3b6bb140490: openssl: restore removed libcrypto symbols as compat symbols

Summary

c01c0a27cb82 (D60397) stopped exporting 52 names from libcrypto.so.35 that upstream does not export. Binaries and libraries linked against the earlier libcrypto.so.35 can still import them; the libssl.so.35 from 15.0 and 15.1 imports 15 of them, so it fails to load with the new libcrypto.

Provide all 52 again as non-default (compat) versions, in the version nodes they had before: OPENSSL_cpuid_setup@OPENSSL_3_0_9, the others @OPENSSL_3_5_0. Existing consumers resolve them; new links cannot bind to them. The default exports do not change and still match upstream.

The wrappers live in a new FreeBSD-only file, compat.c. Remove it at the next SHLIB_MAJOR bump.

Test Plan

Tested on arm64: the 52 names are exported as name@VERSION, the set of default exports is unchanged, and no __compat_ name is exported. The installed 15.1 openssl(1) and libssl.so.35 load with LD_BIND_NOW=1 on the new libcrypto (they fail without this change) and complete a TLS 1.2 AES128-SHA loopback handshake. A new program that calls ossl_crypto_mutex_new fails to link.