This is on develop commit c848b488c876859f624725e8fdaf633aa6391652 (latest as of right now).
After building, the openssl binary does not contain the $ORIGIN rpath, and instead only contains a fixed rpath that openssl puts in from the --prefix arg to config. openssl does not honor $LDFLAGS. The effect is that openssl will always look for system libcrypto, etc. unless LD_LIBRARY_PATH is explicitly set.
The first path is automatically put there by openssl based on --prefix. (This is a separate issue, because with relocatable things you don't want the build-time prefix in the rpath, and especially not listed first, because it will always win over $ORIGIN if it still exists.)
This is on develop commit c848b488c876859f624725e8fdaf633aa6391652 (latest as of right now).
After building, the openssl binary does not contain the $ORIGIN rpath, and instead only contains a fixed rpath that openssl puts in from the --prefix arg to config. openssl does not honor $LDFLAGS. The effect is that openssl will always look for system libcrypto, etc. unless LD_LIBRARY_PATH is explicitly set.
The fix is simple, but took a while to figure out because of openssl's non-standard build system and recursive make. Simply append
to the configure args in buildout-build.cfg.
After building with this arg, the rpath looks much better:
The first path is automatically put there by openssl based on --prefix. (This is a separate issue, because with relocatable things you don't want the build-time prefix in the rpath, and especially not listed first, because it will always win over $ORIGIN if it still exists.)