[erlang-questions] [centos-7]With newer Erlang versions has the eliptic curve crypto situation changed?

[Hans Nilsson R]

Thanks!

Will be fixed in OTP-21.0-rc2 and in a patch on OTP-20 which also has this error.

It is the engine support down in openssl that has problems, so I simply disable our engine support if EC is disabled.

/Hans

On 05/03/2018 09:23 PM, Bryan Hunt wrote:
> 
> Hi,
> 
> Before, when building OTP I always set the compile time option to disable elliptic curve cryptography using the 
> CFLAGS environmental variable (RHEL doesn’t ship with it) : 
> 
> ```
> export CFLAGS="-DOPENSSL_NO_EC=1"
> ./otp_build configure  \
>         --without-odbc \
>         --without-cosEventDomain \
>         --without-cosEvent \
>         --without-cosFileTransfer \
>         --without-cosNotification \
>         --without-cosProperty \
>         --without-cosTime \
>         --without-cosTransactions \
>         --without-debugger \
>         --without-et \
>         --without-gs \
>         --without-ic \
>         --without-javac \
>         --without-jinterface \
>         --without-megaco \
>         --without-observer \
>         --without-orber \
>         --without-percept \
>         --without-typer \
>         --without-wx \
>         --without-tv \
>         --without-diameter \
>         --without-hipe
> ```
> 
> And that still works for the older versions. 
> 
> But when applied to OTP-21.0-rc1 I receive the following error : 
> 
> ```
> gmake[6]: Entering directory `/root/otp/lib/crypto/c_src'
>  CC     ../priv/obj/x86_64-unknown-linux-gnu/crypto.o
> In file included from /usr/include/openssl/ecdh.h:78:0,
>                  from /usr/include/openssl/engine.h:86,
>                  from crypto.c:63:
> /usr/include/openssl/ec.h:82:4: error: #error EC is disabled.
>  #  error EC is disabled.
>     ^
> gmake[6]: Leaving directory `/root/otp/lib/crypto/c_src'
> gmake[6]: *** [../priv/obj/x86_64-unknown-linux-gnu/crypto.o] Error 1
> gmake[5]: *** [release_spec] Error 2
> gmake[5]: Leaving directory `/root/otp/lib/crypto/c_src'
> gmake[4]: *** [release] Error 2
> gmake[4]: Leaving directory `/root/otp/lib/crypto/c_src'
> gmake[3]: *** [release] Error 2
> gmake[3]: Leaving directory `/root/otp/lib/crypto/c_src'
> gmake[2]: *** [release] Error 2
> gmake[2]: Leaving directory `/root/otp/lib/crypto'
> gmake[1]: Leaving directory `/root/otp/lib'
> gmake[1]: *** [release] Error 2
> gmake: *** [release] Error 2
> The command '/bin/sh -c ./build-erlang.sh' returned a non-zero code: 1
> Unable to find image 'bryanhuntesl/centos7-erlang:OTP-21.0-rc1' locally
> docker: Error response from daemon: manifest for bryanhuntesl/centos7-erlang:OTP-21.0-rc1 not found.
> See 'docker run --help’.
> ```
> 
> Has this behaviour changed recently ?
> 
> Bryan
> 
> 
> 
> 
> 
> _______________________________________________
> erlang-questions mailing list
> erlang-questions@REDACTED
> http://erlang.org/mailman/listinfo/erlang-questions
>