[PATCH] Configure: fix build from sources for OpenSSL on OS X

Maxim Dounin mdounin at mdounin.ru
Thu Jun 19 11:55:11 UTC 2014


Hello!

On Tue, Jun 17, 2014 at 03:38:09PM -0700, Piotr Sikora wrote:

> Hey Maxim,
> 
> > Suggested patch for OpenSSL, in contrast, only required for build
> > of OpenSSL by nginx (which is exotic on OS X anyway), only needed
> > for old versions of OpenSSL, and will break building for i386 if
> > needed for whatever reason, as well as building of at least some
> > supported OpenSSL versions.
> 
> So, in summary, on 64-bit OS X:
> - 64-bit build (default) is broken with all versions of OpenSSL,
> - 32-bit build (non-default) works fine with all versions of OpenSSL,
> - env KERNEL_BITS=64 fixes 64-bit build, but only with OpenSSL-1.0.1,
> - my patch fixes 64-bit build (default) with OpenSSL-0.9.8,
> OpenSSL-1.0.0 and OpenSSL-1.0.1 at the cost of breaking 32-bit build
> (non-default), which can be fixed with a simple test for "arch i386"
> in CFLAGS.
> 
> Yet it's still a no-go?

As I already wrote:

- There is no problem unless you are trying to ask nginx to 
  compile OpenSSL for you.  That is, all discussed cases are 
  non-default.

- The problem is clearly on the OpenSSL side.

- An obvious workaround for all versions of OpenSSL is to compile 
  OpenSSL yourself; workaround for recent versions of OpenSSL is 
  to define KERNEL_BITS.

- Suggested change breaks at least some builds (and/or requires 
  additional checks to avoid breaking them), and doesn't look 
  future-proof at all.

So the answer is still no.

-- 
Maxim Dounin
http://nginx.org/



More information about the nginx-devel mailing list