OpenSSL 1.1.x brokens

[Alexpux]

At least next mingw packages have issues building with new openssl:

gdcm 
libmowgli
libwebsockets

[tschoonj]

I assume the following error is related:

checking for file conflicts...
error: failed to commit transaction (conflicting files)
mingw-w64-i686-openssl: /mingw32/share/man/man3/BN_print.3ssl.gz exists in filesystem
mingw-w64-i686-openssl: /mingw32/share/man/man3/HMAC.3ssl.gz exists in filesystem
mingw-w64-i686-openssl: /mingw32/share/man/man3/LHASH.3ssl.gz exists in filesystem
mingw-w64-i686-openssl: /mingw32/share/man/man3/MD5.3ssl.gz exists in filesystem
mingw-w64-i686-openssl: /mingw32/share/man/man3/MDC2.3ssl.gz exists in filesystem
mingw-w64-i686-openssl: /mingw32/share/man/man3/RC4.3ssl.gz exists in filesystem
mingw-w64-i686-openssl: /mingw32/share/man/man3/UI.3ssl.gz exists in filesystem
mingw-w64-x86_64-openssl: /mingw64/share/man/man3/BN_print.3ssl.gz exists in filesystem
mingw-w64-x86_64-openssl: /mingw64/share/man/man3/HMAC.3ssl.gz exists in filesystem
mingw-w64-x86_64-openssl: /mingw64/share/man/man3/LHASH.3ssl.gz exists in filesystem
mingw-w64-x86_64-openssl: /mingw64/share/man/man3/MD5.3ssl.gz exists in filesystem
mingw-w64-x86_64-openssl: /mingw64/share/man/man3/MDC2.3ssl.gz exists in filesystem
mingw-w64-x86_64-openssl: /mingw64/share/man/man3/RC4.3ssl.gz exists in filesystem
mingw-w64-x86_64-openssl: /mingw64/share/man/man3/UI.3ssl.gz exists in filesystem
Errors occurred, no packages were upgraded.
:: Starting core system upgrade...
 there is nothing to do
:: Starting full system upgrade...
resolving dependencies...
looking for conflicting packages...

[Alexpux]

@tschoonj no it is not related

[lazka]

• opusfile -> opusfile: remove http support (doesn't build with openssl 1.1) #4460
• libsrtp -> builds fine here (ah you fixed it already..)

[Alexpux]

Libsrtp build but without OpenSSL

[lazka]

python3 is also broken (built without openssl support) -> #4462

[iDunk5400]

FindOpenSSL.cmake (C:/msys64/mingw64/share/cmake-3.12/Modules/FindOpenSSL.cmake):

...
-- Found OpenSSL: C:/msys64/mingw64/lib/libcrypto.a (found version "1.1.1")
-- Using OpenSSL include dir at C:/msys64/mingw64/include
...
-- Looking for openssl/conf.h
-- Looking for openssl/conf.h - found
-- Looking for openssl/engine.h
-- Looking for openssl/engine.h - not found
-- Looking for openssl/err.h
-- Looking for openssl/err.h - found
-- Looking for openssl/rand.h
-- Looking for openssl/rand.h - found
-- Looking for openssl/ssl.h
-- Looking for openssl/ssl.h - not found
-- Looking for NID_secp384r1
-- Looking for NID_secp384r1 - found
-- Looking for NID_X9_62_prime256v1
-- Looking for NID_X9_62_prime256v1 - found
-- Looking for sk_SSL_COMP_pop_free
-- Looking for sk_SSL_COMP_pop_free - not found
-- Looking for SSL_COMP_get_compression_methods
-- Looking for SSL_COMP_get_compression_methods - not found
-- Looking for EVP_MD_CTX_new
-- Looking for EVP_MD_CTX_new - not found
-- Looking for EVP_sha1
-- Looking for EVP_sha1 - not found
-- Looking for EVP_sha256
-- Looking for EVP_sha256 - not found
-- Looking for EVP_sha512
-- Looking for EVP_sha512 - not found
-- Looking for FIPS_mode
-- Looking for FIPS_mode - not found
-- Looking for HMAC_Update
-- Looking for HMAC_Update - not found
-- Looking for OPENSSL_config
-- Looking for OPENSSL_config - not found
-- Looking for SHA512_Update
-- Looking for SHA512_Update - found

$ ls /mingw64/include/openssl/ssl.h
/mingw64/include/openssl/ssl.h
$ ls /mingw64/include/openssl/engine.h
/mingw64/include/openssl/engine.h

[MSP-Greg]

If anyone wants to try the package I've used with Ruby:

https://ci.appveyor.com/api/buildjobs/293ujnaycuk7nv0p/artifacts/mingw-w64-x86_64-openssl-1.1.1-1-any.pkg.tar.xz

SHA256 & SHA512 are on the 'messages' tab, see:
https://ci.appveyor.com/project/MSP-Greg/ruby-makepkg-mingw/build/messages

[peterbud]

xmlsec -> #4472

[peterbud]

@Alexpux : what was the problem with wget? For me it compiled OK

[lazka]

@iDunk5400 what's the affected package using FindOpenSSL.cmake? So one can try to reproduce the issue.

[iDunk5400]

@lazka Sorry for the lack of context. Your #4462 helped shed light on what's going on. I've now modified some cmake checks in the project that was failing to build for me (unrelated to MSYS2), and now it builds fine.

[lazka]

@iDunk5400 you can probably revert that (in the future at least). It was an issue with the msys2 package.

I've opened #4475 and #4476

[iDunk5400]

@lazka Thank you for the info.

[Alexpux]

I'm edit fail list

[Ede123]

Another issue I'm seeing in Inkscape (linked against libpoppler which is linked against libcurl which is linked against libssl) when executed on the AppVeyor CI server:

Not sure what exactly is causing it yet...

What I don't understand is why it's looking for this function in libcurl-4.dll, as this function is actually part of openssl.

[Ede123]

The issue above is not directly related to the OpenSSL update (it only made it apparent by adding a new function not available previously) but is the result of AppVeyor build images containing an older version of the OpenSSL DLLs (libssl-1_1-x64.dll / libcrypto-1_1-x64.dll) in C:\Windows\system32, see appveyor/ci#2571

Applications will load these before even looking at the PATH variable (unless the DLL is located in the same directory as the application executable).

[MSP-Greg]

@Ede123

Sorry for not mentioning that. I think they're the Shining Light OpenSSL-Win64 1.1.0 dll's. Most of my CI uses binaries that link to dll's via a manifest, so only one repo's CI had the issue....

[lazka]

appveyor has been updated now: https://www.appveyor.com/updates

[lazka]

Is there anything left to do there?

[lazka]

Please open a new issue if there is.