search

HelloZeroNet / ZeroMail

End-to-end encrypted, P2P messaging site.
GNU General Public License v2.0
90 stars 53 forks source link

OpenSSL: error message using newer lib >= 1.1 #17

Closed haschimoto closed 7 years ago

haschimoto commented 7 years ago

/usr/lib/arm-linux-gnueabihf/libssl.so.1.1: undefined symbol: ECDH_OpenSSL snap 2017-03-01 at 15 36 20

Same issue likely as here: https://github.com/nfcpy/nfcpy/issues/59

HelloZeroNet commented 7 years ago

Probably they renamed or changed the function we need. It would be nice if someone with experience in c++ programming could fix the dll calls: https://github.com/HelloZeroNet/ZeroNet/blob/master/src/lib/opensslVerify/opensslVerify.py

haschimoto commented 7 years ago

it seems this also affects general useage?: snap 2017-03-07 at 16 59 43

HelloZeroNet commented 7 years ago

Yeah, using the pure-python crypto lib is using around 50x more cpu time.

haschimoto commented 7 years ago

It seems I cannot publish anything anymore though. When publishing, it now always reports 0 peers found, even though on big sites which lists hundreds of peers like Talk, etc. I can still refresh sites though, so I am still connected. This is imo a big issue affecting the complete useage of Zeronet (latest client 0.5.3 v1993) and newer SSL, which is common now like under Debian, Ubuntu, etc.

HelloZeroNet commented 7 years ago

There is a package for linux that also include openssl: https://github.com/HelloZeroNet/ZeroBundle/raw/master/dist/ZeroBundle-linux64.tar.gz

For publishing error please check the log/debug.log for more info.

For openssl 1.1 compatibility probably we could use the code from BitMessage: https://github.com/Bitmessage/PyBitmessage/commits/master/src/pyelliptic

haschimoto commented 7 years ago

@HelloZeroNet : Bump: A general fix would be welcome. Anyone who doesnt use the bundle but set up zeronet manually (as in your own tutorial) is basically cut out from using communication tools like zeromail.

HelloZeroNet commented 7 years ago

As far as I know none of most of linux distributions still using openssl 1.0.x, but it's definitely planned in the future.

haschimoto commented 7 years ago

Debian testing/stretch/sid all started using 1.1.x: https://packages.debian.org/de/stretch/openssl On Apr 3, 2017 16:38, "Ozark Mount" ozark2001@googlemail.com wrote:

You meant "none" or "most" still use 1.0.x?

HelloZeroNet commented 7 years ago

Can you please specify your operating system, so I can try to reproduce it?

haschimoto commented 7 years ago

I use Netrunner Core, but ARMHF-version for microcomputer (so current 32/64bit Linux-bundles of Zeronet are not an option for this hardware).

There is a 64bit of Netrunner Core though to possibly test the error when manually installing zeronet on it: https://sourceforge.net/projects/netrunneros/files/netrunner-1701-core/netrunner-core-1701-64bit.iso/download

HelloZeroNet commented 7 years ago

It should be fixed in latest version: https://github.com/HelloZeroNet/ZeroNet/commit/86506515675ffa6d5e6d9080d6e836597c749ac2 Please update and try again.

haschimoto commented 7 years ago

works again flawlessly, thank you very much!