Bitcoin Forum
April 16, 2014, 11:07:19 PM *
News: ♦♦ A bug in OpenSSL, used by Bitcoin-Qt/Bitcoin Core, could allow your bitcoins to be stolen. Immediately updating Bitcoin Core to 0.9.1 is required in some cases, especially if you're using 0.9.0. Download. More info.
The same bug also affected the forum. Changing your forum password is recommended.
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: ECDSA dropped out of openssl 1.0.0b?  (Read 5063 times)
marcus_of_augustus
Hero Member
*****
Offline Offline

Activity: 1134



View Profile

Ignore
May 23, 2011, 09:05:26 AM
 #1

Code:
$ make -f makefile.unix bitcoind
g++ -c -O2 -Wno-invalid-offsetof -Wformat -g -D__WXDEBUG__ -DNOPCH -DFOURWAYSSE2 -DUSE_SSL -DUSE_UPNP=0 -o obj/nogui/util.o util.cpp
In file included from util.cpp:4:
headers.h:38:27: error: openssl/ecdsa.h: No such file or directory

Code:
$ openssl version
OpenSSL 1.0.0b-fips 16 Nov 2010

Soooo, no ecdsa.h included with  openssl 1.0.0b.

Do I need to ruin my repository 'adhering' linux just to build bitcoin?

What gives here?

Monetary Freedom - a basic human right
"Disarming money as a tool for tyranny."
"Disintermediating the State."
1397689639
Hero Member
*
Offline Offline

Posts: 1397689639

View Profile Personal Message (Offline)

Ignore
1397689639
Reply with quote  #2

1397689639
Report to moderator
1397689639
Hero Member
*
Offline Offline

Posts: 1397689639

View Profile Personal Message (Offline)

Ignore
1397689639
Reply with quote  #2

1397689639
Report to moderator
BitcoinBULLBEARGET THE UNBEATABLE
BITCOIN TRADING FORECAST

Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1397689639
Hero Member
*
Offline Offline

Posts: 1397689639

View Profile Personal Message (Offline)

Ignore
1397689639
Reply with quote  #2

1397689639
Report to moderator
1397689639
Hero Member
*
Offline Offline

Posts: 1397689639

View Profile Personal Message (Offline)

Ignore
1397689639
Reply with quote  #2

1397689639
Report to moderator
1397689639
Hero Member
*
Offline Offline

Posts: 1397689639

View Profile Personal Message (Offline)

Ignore
1397689639
Reply with quote  #2

1397689639
Report to moderator
theymos
Administrator
Hero Member
*
Offline Offline

Activity: 1526


View Profile
May 23, 2011, 09:28:21 AM
 #2

OpenSSL 1.0.0b does have ECDSA. You're using some modified version. A few distros remove ECDSA due to (overblown) patent concerns.

error
Sr. Member
****
Offline Offline

Activity: 462



View Profile

Ignore
May 23, 2011, 09:28:49 AM
 #3

Don't build bitcoin on a Red Hat derived system. Red Hat strips all the ECC stuff out of OpenSSL.

15UFyv6kfWgq83Pp3yhXPr8rknv9m6581W
marcus_of_augustus
Hero Member
*****
Offline Offline

Activity: 1134



View Profile

Ignore
May 23, 2011, 09:35:46 AM
 #4


What if I like Redhat or CentOS?

Bitcoin just cannot be built cleanly on them without a protracted battle with repository nazis or jacking your system (think SElinux scrap)?

Basically, I'm SOOL if I want to build "officially" on anything RH derived is what you are saying, right?

Monetary Freedom - a basic human right
"Disarming money as a tool for tyranny."
"Disintermediating the State."
ribuck
Donator
Hero Member
*
Offline Offline

Activity: 1204


View Profile

Ignore
May 23, 2011, 11:36:27 AM
 #5

What if I like Redhat or CentOS?
Just install OpenSSL from a tarball (from http://www.openssl.org/source/ ) instead of from the repository. You may also have to link the static libraries libssl.a and libcrypto.a into /usr/lib
marcus_of_augustus
Hero Member
*****
Offline Offline

Activity: 1134



View Profile

Ignore
May 23, 2011, 12:41:32 PM
 #6

What if I like Redhat or CentOS?
Just install OpenSSL from a tarball (from http://www.openssl.org/source/ ) instead of from the repository. You may also have to link the static libraries libssl.a and libcrypto.a into /usr/lib

Have you actually done this or are you saying "this could be done"?

Monetary Freedom - a basic human right
"Disarming money as a tool for tyranny."
"Disintermediating the State."
theymos
Administrator
Hero Member
*
Offline Offline

Activity: 1526


View Profile
May 23, 2011, 06:30:29 PM
 #7

OpenSSL is an easy compile. You can just prefix it somewhere and use that version for Bitcoin only. I used to do this when my system's OpenSSL was the wrong version.

error
Sr. Member
****
Offline Offline

Activity: 462



View Profile

Ignore
May 23, 2011, 07:32:08 PM
 #8

Right. The "official" Bitcoin binary builds have OpenSSL statically linked in (or they'd fail spectacularly on a Red Hat box). Just do the same yourself.

15UFyv6kfWgq83Pp3yhXPr8rknv9m6581W
xf2_org
Member
**
Offline Offline

Activity: 70


View Profile WWW

Ignore
May 23, 2011, 08:38:58 PM
 #9

Fedora / RHEL / derivatives have EC removed for patent related reasons (one reason why I refuse to distribute a bitcoin binary to anyone, for any reason).

It is trivial to compile and install openssl yourself, then build bitcoin.  I run Fedora 14, as do many others on the forums/IRC, and use this solution without a problem.


Jeff Garzik, bitcoin core dev team

Donations / tip jar: 1BrufViLKnSWtuWGkryPsKsxonV2NQ7Tcj
marcus_of_augustus
Hero Member
*****
Offline Offline

Activity: 1134



View Profile

Ignore
May 23, 2011, 08:58:51 PM
 #10


Messy.

Monetary Freedom - a basic human right
"Disarming money as a tool for tyranny."
"Disintermediating the State."
bittrader
Jr. Member
*
Offline Offline

Activity: 42



View Profile

Ignore
May 24, 2011, 02:15:39 AM
 #11

Some instructions for building OpenSSL on CentOS 5.5 for use with Bitcoin are here: http://www.staff.tugraz.at/michael.steurer/Bitcoin-CentOS5.5-V1.pdf

It's pretty straightforward. One small part of the guide is incorrect though. It tells you to run something like this:

Code:
$ ./Configure --prefix=~/Bitcoin/Deps --openssldir=~/Bitcoin/Deps/openssl linux-x86_64

when actually you need this:

Code:
$ ./Configure --prefix=~/Bitcoin/Deps --openssldir=/openssl linux-x86_64
yogi
Hero Member
*****
Offline Offline

Activity: 868


Hamster ate my bitcoin


View Profile

Ignore
June 26, 2012, 05:14:46 PM
 #12


This is also true for 32bit configure.

This:

Code:
$ ./Configure --prefix=~/Bitcoin/Deps --openssldir=~/Bitcoin/Deps/openssl linux-generic32

Needs to be this:

Code:
$ ./Configure --prefix=~/Bitcoin/Deps --openssldir=/openssl linux-generic32

jgarzik
Staff
Hero Member
*****
Offline Offline

Activity: 1260


View Profile

Ignore
June 26, 2012, 05:39:39 PM
 #13


The preferred "fixes" for Red Hat, CentOS, Fedora systems are, if you want to do it yourself,

1) Download SRPM

2) Download associated source code from openssl.org

3) Edit SPECS/openssl.spec,
a) replacing source tarball filename with the downloaded one
b) comment out all references to source1
c) remove the "no-ec" stuff from the configure line

4) rebuild with "rpmbuild -ba SPECS/openssl.spec" or similar

5) install build rpms found in RPMS/


Jeff Garzik, bitcoin core dev team and BitPay engineer; opinions are my own, not my employer.
Donations / tip jar: 1BrufViLKnSWtuWGkryPsKsxonV2NQ7Tcj
gmaxwell
Staff
Hero Member
*****
Online Online

Activity: 1078


View Profile

Ignore
July 02, 2012, 02:54:15 AM
 #14


The preferred "fixes" for Red Hat, CentOS, Fedora systems are, if you want to do it yourself,

I maintain modified openssl Fedora rpm's for my own use:

https://people.xiph.org/~greg/openssl/

Perhaps some other people might find them useful, either outright or just the spec file changes.
marcus_of_augustus
Hero Member
*****
Offline Offline

Activity: 1134



View Profile

Ignore
July 02, 2012, 06:51:30 AM
 #15


The preferred "fixes" for Red Hat, CentOS, Fedora systems are, if you want to do it yourself,

I maintain modified openssl Fedora rpm's for my own use:

https://people.xiph.org/~greg/openssl/

Perhaps some other people might find them useful, either outright or just the spec file changes.

You missed out on the bounty ... https://bitcointalk.org/index.php?topic=85228.0

Monetary Freedom - a basic human right
"Disarming money as a tool for tyranny."
"Disintermediating the State."
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!