Details
-
Bug
-
Status: Open (View Workflow)
-
Major
-
Resolution: Unresolved
-
11.7.2, 10.6, 10.11, 11.4
-
None
-
None
Description
In the generic linux binary tarballs all binaries and shared libraries should be statically linked against WolfSSL as static linking against OpenSSL is not possible license wise, and dynamic linking can't be used as we do not know what version of OpenSSL is installed on the target server.
Yet when checking library dependencies there are a few results relying on libssl.so.*, and even worse: different versions of it.
E.g.:
mariadb-11.7.2-linux-systemd-x86_64 > ( for a in $(find . -executable -type f); do echo "=== $a ==="; ldd $a 2>/dev/null | grep ssl; echo; done ) | grep -B1 ssl.so
|
=== ./lib/libgalera_smm.so ===
|
libssl.so.1.0.0 => not found
|
--
|
=== ./lib/plugin/hashicorp_key_management.so ===
|
libssl.so.3 => /lib/x86_64-linux-gnu/libssl.so.3 (0x00007f06924f0000)
|
--
|
=== ./lib/plugin/ha_s3.so ===
|
libssl.so.3 => /lib/x86_64-linux-gnu/libssl.so.3 (0x00007ff1f7d76000)
|
--
|
=== ./bin/garbd ===
|
libssl.so.1.0.0 => not found
|
--
|
=== ./bin/aria_s3_copy ===
|
libssl.so.3 => /lib/x86_64-linux-gnu/libssl.so.3 (0x00007f7dc965a000)
|
Attachments
Issue Links
- relates to
-
MDEV-20394 Galera library and garbd not compiled against TLS/SSL library statically in tarballs
-
- Confirmed
-