ECDSA dropped out of openssl 1.0.0b?

[marcus_of_augustus]

Code:

$ make -f makefile.unix bitcoind
g++ -c -O2 -Wno-invalid-offsetof -Wformat -g -D__WXDEBUG__ -DNOPCH -DFOURWAYSSE2 -DUSE_SSL -DUSE_UPNP=0 -o obj/nogui/util.o util.cpp
In file included from util.cpp:4:
headers.h:38:27: error: openssl/ecdsa.h: No such file or directory

Code:

$ openssl version
OpenSSL 1.0.0b-fips 16 Nov 2010

Soooo, no ecdsa.h included with  openssl 1.0.0b.

Do I need to ruin my repository 'adhering' linux just to build bitcoin?

What gives here?

[1714973898]

1714973898

[theymos]

OpenSSL 1.0.0b does have ECDSA. You're using some modified version. A few distros remove ECDSA due to (overblown) patent concerns.

[error]

Don't build bitcoin on a Red Hat derived system. Red Hat strips all the ECC stuff out of OpenSSL.

[marcus_of_augustus]

What if I like Redhat or CentOS?

Bitcoin just cannot be built cleanly on them without a protracted battle with repository nazis or jacking your system (think SElinux scrap)?

Basically, I'm SOOL if I want to build "officially" on anything RH derived is what you are saying, right?

[ribuck]

What if I like Redhat or CentOS?

Just install OpenSSL from a tarball (from http://www.openssl.org/source/ ) instead of from the repository. You may also have to link the static libraries libssl.a and libcrypto.a into /usr/lib

[marcus_of_augustus]

What if I like Redhat or CentOS?

Just install OpenSSL from a tarball (from http://www.openssl.org/source/ ) instead of from the repository. You may also have to link the static libraries libssl.a and libcrypto.a into /usr/lib

Have you actually done this or are you saying "this could be done"?

[theymos]

OpenSSL is an easy compile. You can just prefix it somewhere and use that version for Bitcoin only. I used to do this when my system's OpenSSL was the wrong version.

[error]

Right. The "official" Bitcoin binary builds have OpenSSL statically linked in (or they'd fail spectacularly on a Red Hat box). Just do the same yourself.

[xf2_org]

Fedora / RHEL / derivatives have EC removed for patent related reasons (one reason why I refuse to distribute a bitcoin binary to anyone, for any reason).

It is trivial to compile and install openssl yourself, then build bitcoin.  I run Fedora 14, as do many others on the forums/IRC, and use this solution without a problem.

[marcus_of_augustus]

Messy.

[bittrader]

Some instructions for building OpenSSL on CentOS 5.5 for use with Bitcoin are here: http://www.staff.tugraz.at/michael.steurer/Bitcoin-CentOS5.5-V1.pdf

It's pretty straightforward. One small part of the guide is incorrect though. It tells you to run something like this:

Code:

$ ./Configure --prefix=~/Bitcoin/Deps --openssldir=~/Bitcoin/Deps/openssl linux-x86_64

when actually you need this:

Code:

$ ./Configure --prefix=~/Bitcoin/Deps --openssldir=/openssl linux-x86_64

[yogi]

This is also true for 32bit configure.

This:

Code:

$ ./Configure --prefix=~/Bitcoin/Deps --openssldir=~/Bitcoin/Deps/openssl linux-generic32

Needs to be this:

Code:

$ ./Configure --prefix=~/Bitcoin/Deps --openssldir=/openssl linux-generic32

[jgarzik]

The preferred "fixes" for Red Hat, CentOS, Fedora systems are, if you want to do it yourself,

1) Download SRPM

2) Download associated source code from openssl.org

3) Edit SPECS/openssl.spec,
a) replacing source tarball filename with the downloaded one
b) comment out all references to source1
c) remove the "no-ec" stuff from the configure line

4) rebuild with "rpmbuild -ba SPECS/openssl.spec" or similar

5) install build rpms found in RPMS/

[gmaxwell]

The preferred "fixes" for Red Hat, CentOS, Fedora systems are, if you want to do it yourself,

I maintain modified openssl Fedora rpm's for my own use:

https://people.xiph.org/~greg/openssl/

Perhaps some other people might find them useful, either outright or just the spec file changes.

[marcus_of_augustus]

The preferred "fixes" for Red Hat, CentOS, Fedora systems are, if you want to do it yourself,

I maintain modified openssl Fedora rpm's for my own use:

https://people.xiph.org/~greg/openssl/

Perhaps some other people might find them useful, either outright or just the spec file changes.

You missed out on the bounty ... https://bitcointalk.org/index.php?topic=85228.0