evilsocket / evilsocket/legba

legba fails to build with OpenSSL 4.0

Open
#103 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
1.9k
Forks
116
PR merge metrics
No merged PRs in 30d

Description

Versions:

- legba HEAD https://github.com/evilsocket/legba/commit/c82104a4f03d7b050bea2a6d255b0e5ff5947436
- OpenSSL 4.0.0

Steps to reproduce:
```
$ git clone https://github.com/evilsocket/legba.git
$ cd legba
$ OPENSSL_NO_VENDOR=true cargo build
....
--- stderr

thread 'main' (5826) panicked at /build/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/openssl-sys-0.9.109/build/main.rs:492:5:

This crate is only compatible with OpenSSL (version 1.0.1 through 1.1.1, or 3), or LibreSSL 2.5
through 4.1.x, but a different version of OpenSSL was found. The build is now aborting
due to this version mismatch.

note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
```
- [legba-openssl-4.0-build-failure.log](https://github.com/user-attachments/files/30362581/legba-openssl-4.0-build-failure.log)
- [openssl-sys 0.9.114](https://github.com/rust-openssl/rust-openssl/compare/openssl-sys-v0.9.113...openssl-sys-v0.9.114)
- [openssl 0.10.78](https://github.com/rust-openssl/rust-openssl/compare/openssl-v0.10.77...openssl-v0.10.78)

@kpcyrd @pierres

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reproducing the failure with `OPENSSL_NO_VENDOR=true cargo build` against OpenSSL 4.0.0, then inspect the linked `openssl-sys 0.9.114` and `openssl 0.10.78` changes as the relevant dependency entry points. Done means legba builds successfully with OpenSSL 4.0.0 without the version-mismatch panic.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
build-system
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
62/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.