Hi, I'm trying to compile SSLsplit to a statically linked binary via the command PCFLAGS='--static' CFLAGS='-static' LDFLAGS='-static' make -j$(nproc) however this method fails with the error detailed below. But if I compile via the make -j$(nproc) the program compiles successfully.
Is it not possible to compile SSLsplit as a statically linked binary anymore?
Requested information:
OS: Ubuntu 22.04.2 LTS
Output of uname -a
Linux UbuntuBox 5.15.0-76-generic #83-Ubuntu SMP Thu Jun 15 19:16:32 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux`
Full output of failed make including the header:
User1457@UbuntuBox:~/Compile_Drop/sslsplit$ PCFLAGS='--static' CFLAGS='-static' LDFLAGS='-static' make -j$(nproc)
Via pkg-config: openssl libevent libevent_openssl libevent_pthreads libpcap
LIBNET_BASE: /usr
Build options: -DHAVE_NETFILTER
Build info: V:GIT
uname -a: Linux UbuntuBox 5.15.0-76-generic #83-Ubuntu SMP Thu Jun 15 19:16:32 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o base64.o base64.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -D"BUILD_PKGNAME=\"sslsplit\"" -D"BUILD_VERSION=\"0.5.5-38-gb2128fc\"" -D"BUILD_DATE=\"2023-07-07\"" -D"BUILD_INFO=\"V:GIT\"" -D"BUILD_FEATURES=\"-DHAVE_NETFILTER\"" -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o build.o build.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o cache.o cache.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o cachedsess.o cachedsess.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o cachefkcrt.o cachefkcrt.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o cachemgr.o cachemgr.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o cachessess.o cachessess.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o cachetgcrt.o cachetgcrt.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o cert.o cert.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o dynbuf.o dynbuf.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o log.o log.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o logbuf.o logbuf.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o logger.o logger.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o logpkt.o logpkt.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o main.o main.c
log.c:1690:46: warning: argument 3 of type ‘int[5]’ with mismatched bound [-Warray-parameter=]
1690 | log_init(opts_t opts, proxy_ctx_t ctx, int clisock[5])
| ~~^~~~
In file included from log.c:29:
log.h:97:39: note: previously declared as ‘int[3]’
97 | int log_init(opts_t , proxy_ctx_t , int[3]) NONNULL(1,2) WUNRES;
| ^~
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o nat.o nat.c
logpkt.c: In function ‘logpkt_pcap_build’:
logpkt.c:367:17: warning: converting a packed ‘ip4_hdr_t’ pointer (alignment 1) to a ‘uint16_t’ {aka ‘short unsigned int’} pointer (alignment 2) may result in an unaligned pointer value [-Waddress-of-packed-member]
367 | CHKSUM_ADD_RANGE(sum, ip4_hdr, sizeof(ip4_hdr_t));
| ^~~~
logpkt.c:81:9: note: defined here
81 | typedef struct attribute((packed)) {
| ^~
logpkt.c:415:9: warning: converting a packed ‘tcp_hdr_t’ pointer (alignment 1) to a ‘uint16_t’ {aka ‘short unsigned int’} pointer (alignment 2) may result in an unaligned pointer value [-Waddress-of-packed-member]
415 | CHKSUM_ADD_RANGE(sum, tcp_hdr, sizeof(tcp_hdr_t) + payloadlen);
| ^~~~
logpkt.c:103:9: note: defined here
103 | typedef struct attribute((packed)) {
| ^~
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o opts.o opts.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o privsep.o privsep.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o proc.o proc.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o proxy.o proxy.c
opts.c: In function ‘opts_free’:
opts.c:132:17: warning: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
132 | DH_free(opts->dh);
| ^~~
In file included from /usr/include/openssl/dsa.h:51,
from /usr/include/openssl/x509.h:37,
from /usr/include/openssl/ssl.h:31,
from ssl.h:35,
from opts.h:34,
from opts.c:29:
/usr/include/openssl/dh.h:200:28: note: declared here
200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH dh);
| ^~~
opts.c: In function ‘opts_set_dh’:
opts.c:778:17: warning: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
778 | DH_free(opts->dh);
| ^~~
In file included from /usr/include/openssl/dsa.h:51,
from /usr/include/openssl/x509.h:37,
from /usr/include/openssl/ssl.h:31,
from ssl.h:35,
from opts.h:34,
from opts.c:29:
/usr/include/openssl/dh.h:200:28: note: declared here
200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH dh);
| ^~~
opts.c: In function ‘opts_set_ecdhcurve’:
opts.c:807:9: warning: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
807 | EC_KEY_free(ec);
| ^~~
In file included from /usr/include/openssl/x509.h:33,
from /usr/include/openssl/ssl.h:31,
from ssl.h:35,
from opts.h:34,
from opts.c:29:
/usr/include/openssl/ec.h:1003:28: note: declared here
1003 | OSSL_DEPRECATEDIN_3_0 void EC_KEY_free(EC_KEY key);
| ^~~
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o pxyconn.o pxyconn.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o pxythrmgr.o pxythrmgr.c
pxyconn.c: In function ‘pxy_srcsslctx_create’:
pxyconn.c:816:17: warning: ‘SSL_CTX_set_tmp_dh_callback’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
816 | SSL_CTX_set_tmp_dh_callback(sslctx, ssl_tmp_dh_callback);
| ^~~~~~~
In file included from ssl.h:35,
from opts.h:34,
from pxyconn.h:32,
from pxyconn.c:29:
/usr/include/openssl/ssl.h:2216:6: note: declared here
2216 | void SSL_CTX_set_tmp_dh_callback(SSL_CTX ctx,
| ^~~~~~~
pxyconn.c:823:17: warning: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
823 | EC_KEY_free(ecdh);
| ^~~
In file included from /usr/include/openssl/x509.h:33,
from /usr/include/openssl/ssl.h:31,
from ssl.h:35,
from opts.h:34,
from pxyconn.h:32,
from pxyconn.c:29:
/usr/include/openssl/ec.h:1003:28: note: declared here
1003 | OSSL_DEPRECATEDIN_3_0 void EC_KEY_free(EC_KEY key);
| ^~~
pxyconn.c:827:17: warning: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
827 | EC_KEY_free(ecdh);
| ^~~
In file included from /usr/include/openssl/x509.h:33,
from /usr/include/openssl/ssl.h:31,
from ssl.h:35,
from opts.h:34,
from pxyconn.h:32,
from pxyconn.c:29:
/usr/include/openssl/ec.h:1003:28: note: declared here
1003 | OSSL_DEPRECATEDIN_3_0 void EC_KEY_free(EC_KEY key);
| ^~~
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o ssl.o ssl.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o sys.o sys.c
ssl.c: In function ‘ssl_engine’:
ssl.c:530:9: warning: ‘ENGINE_by_id’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
530 | engine = ENGINE_by_id(name);
| ^~
In file included from ssl.c:44:
/usr/include/openssl/engine.h:336:31: note: declared here
336 | OSSL_DEPRECATEDIN_3_0 ENGINE ENGINE_by_id(const char id);
| ^~~~
ssl.c:534:9: warning: ‘ENGINE_set_default’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
534 | if (!ENGINE_set_default(engine, ENGINE_METHOD_ALL))
| ^~
In file included from ssl.c:44:
/usr/include/openssl/engine.h:708:27: note: declared here
708 | OSSL_DEPRECATEDIN_3_0 int ENGINE_set_default(ENGINE e, unsigned int flags);
| ^~~~~~
ssl.c: In function ‘ssl_tmp_dh_callback’:
ssl.c:738:9: warning: ‘DH_new’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
738 | if (!(dh = DH_new())) {
| ^~
In file included from /usr/include/openssl/dsa.h:51,
from /usr/include/openssl/x509.h:37,
from /usr/include/openssl/ssl.h:31,
from ssl.h:35,
from ssl.c:29:
/usr/include/openssl/dh.h:199:27: note: declared here
199 | OSSL_DEPRECATEDIN_3_0 DH DH_new(void);
| ^~
ssl.c:744:17: warning: ‘DH_set0_pqg’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
744 | rv = DH_set0_pqg(dh,
| ^~
In file included from /usr/include/openssl/dsa.h:51,
from /usr/include/openssl/x509.h:37,
from /usr/include/openssl/ssl.h:31,
from ssl.h:35,
from ssl.c:29:
/usr/include/openssl/dh.h:255:27: note: declared here
255 | OSSL_DEPRECATEDIN_3_0 int DH_set0_pqg(DH dh, BIGNUM p, BIGNUM q, BIGNUM g);
| ^~~
ssl.c:750:17: warning: ‘DH_set0_pqg’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
750 | rv = DH_set0_pqg(dh,
| ^~
In file included from /usr/include/openssl/dsa.h:51,
from /usr/include/openssl/x509.h:37,
from /usr/include/openssl/ssl.h:31,
from ssl.h:35,
from ssl.c:29:
/usr/include/openssl/dh.h:255:27: note: declared here
255 | OSSL_DEPRECATEDIN_3_0 int DH_set0_pqg(DH dh, BIGNUM p, BIGNUM q, BIGNUM g);
| ^~~
ssl.c:756:17: warning: ‘DH_set0_pqg’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
756 | rv = DH_set0_pqg(dh,
| ^~
In file included from /usr/include/openssl/dsa.h:51,
from /usr/include/openssl/x509.h:37,
from /usr/include/openssl/ssl.h:31,
from ssl.h:35,
from ssl.c:29:
/usr/include/openssl/dh.h:255:27: note: declared here
255 | OSSL_DEPRECATEDIN_3_0 int DH_set0_pqg(DH dh, BIGNUM p, BIGNUM q, BIGNUM g);
| ^~~
ssl.c:762:17: warning: ‘DH_set0_pqg’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
762 | rv = DH_set0_pqg(dh,
| ^~
In file included from /usr/include/openssl/dsa.h:51,
from /usr/include/openssl/x509.h:37,
from /usr/include/openssl/ssl.h:31,
from ssl.h:35,
from ssl.c:29:
/usr/include/openssl/dh.h:255:27: note: declared here
255 | OSSL_DEPRECATEDIN_3_0 int DH_set0_pqg(DH dh, BIGNUM p, BIGNUM q, BIGNUM g);
| ^~~
ssl.c:771:17: warning: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
771 | DH_free(dh);
| ^~~
In file included from /usr/include/openssl/dsa.h:51,
from /usr/include/openssl/x509.h:37,
from /usr/include/openssl/ssl.h:31,
from ssl.h:35,
from ssl.c:29:
/usr/include/openssl/dh.h:200:28: note: declared here
200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH dh);
| ^~~
ssl.c:776:17: warning: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
776 | DH_free(dh);
| ^~~
In file included from /usr/include/openssl/dsa.h:51,
from /usr/include/openssl/x509.h:37,
from /usr/include/openssl/ssl.h:31,
from ssl.h:35,
from ssl.c:29:
/usr/include/openssl/dh.h:200:28: note: declared here
200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH dh);
| ^~~
ssl.c: In function ‘ssl_dh_load’:
ssl.c:798:9: warning: ‘PEM_read_DHparams’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
798 | dh = PEM_read_DHparams(fh, NULL, NULL, NULL);
| ^~
In file included from /usr/include/openssl/ssl.h:36,
from ssl.h:35,
from ssl.c:29:
/usr/include/openssl/pem.h:469:1: note: declared here
469 | DECLARE_PEM_rw_attr(OSSL_DEPRECATEDIN_3_0, DHparams, DH)
| ^~~~~~~
ssl.c: In function ‘ssl_ec_by_name’:
ssl.c:820:9: warning: ‘EC_KEY_new_by_curve_name’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
820 | return EC_KEY_new_by_curve_name(nid);
| ^~
In file included from /usr/include/openssl/x509.h:33,
from /usr/include/openssl/ssl.h:31,
from ssl.h:35,
from ssl.c:29:
/usr/include/openssl/ec.h:998:31: note: declared here
998 | OSSL_DEPRECATEDIN_3_0 EC_KEY EC_KEY_new_by_curve_name(int nid);
| ^~~~~~~~
ssl.c: In function ‘ssl_key_genrsa’:
ssl.c:1370:9: warning: ‘RSA_new’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
1370 | rsa = RSA_new();
| ^~~
In file included from /usr/include/openssl/x509.h:36,
from /usr/include/openssl/ssl.h:31,
from ssl.h:35,
from ssl.c:29:
/usr/include/openssl/rsa.h:201:28: note: declared here
201 | OSSL_DEPRECATEDIN_3_0 RSA RSA_new(void);
| ^~~
ssl.c:1373:9: warning: ‘RSA_generate_key_ex’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
1373 | rv = RSA_generate_key_ex(rsa, keysize, bn, NULL);
| ^~
In file included from /usr/include/openssl/x509.h:36,
from /usr/include/openssl/ssl.h:31,
from ssl.h:35,
from ssl.c:29:
/usr/include/openssl/rsa.h:260:27: note: declared here
260 | OSSL_DEPRECATEDIN_3_0 int RSA_generate_key_ex(RSA rsa, int bits, BIGNUM e,
| ^~~~~~~
ssl.c:1376:17: warning: ‘RSA_free’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
1376 | RSA_free(rsa);
| ^~~~
In file included from /usr/include/openssl/x509.h:36,
from /usr/include/openssl/ssl.h:31,
from ssl.h:35,
from ssl.c:29:
/usr/include/openssl/rsa.h:293:28: note: declared here
293 | OSSL_DEPRECATEDIN_3_0 void RSA_free(RSA r);
| ^~~~
ssl.c:1385:9: warning: ‘EVP_PKEY_assign’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
1385 | EVP_PKEY_assign_RSA(pkey, rsa); / does not increment refcount /
| ^~~~~~~
In file included from /usr/include/openssl/x509.h:29,
from /usr/include/openssl/ssl.h:31,
from ssl.h:35,
from ssl.c:29:
/usr/include/openssl/evp.h:1328:5: note: declared here
1328 | int EVP_PKEY_assign(EVP_PKEY pkey, int type, void key);
| ^~~~~~~
ssl.c: In function ‘ssl_dh_refcount_inc’:
ssl.c:1506:9: warning: ‘DH_up_ref’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
1506 | DH_up_ref(dh);
| ^~~~~
In file included from /usr/include/openssl/dsa.h:51,
from /usr/include/openssl/x509.h:37,
from /usr/include/openssl/ssl.h:31,
from ssl.h:35,
from ssl.c:29:
/usr/include/openssl/dh.h:201:27: note: declared here
201 | OSSL_DEPRECATEDIN_3_0 int DH_up_ref(DH dh);
| ^~~~~
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o thrqueue.o thrqueue.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o url.o url.c
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o util.o util.c
sed -e 's,/usr/local/etc/sslsplit,/usr/local/etc/sslsplit,' -e 's,@@VERSION@@,0.5.5-38-gb2128fc,' -e 's,@@DATE@@,2023-07-07,' sslsplit.conf
sed -e 's,/usr/local/etc/sslsplit,/usr/local/etc/sslsplit,' -e 's,@@VERSION@@,0.5.5-38-gb2128fc,' -e 's,@@DATE@@,2023-07-07,' sslsplit.1
sed -e 's,/usr/local/etc/sslsplit,/usr/local/etc/sslsplit,' -e 's,@@VERSION@@,0.5.5-38-gb2128fc,' -e 's,@@DATE@@,2023-07-07,' sslsplit.conf.5
cc -static -L/usr/lib -pthread -pthread -o sslsplit base64.o build.o cache.o cachedsess.o cachefkcrt.o cachemgr.o cachessess.o cachetgcrt.o cert.o dynbuf.o log.o logbuf.o logger.o logpkt.o main.o nat.o opts.o privsep.o proc.o proxy.o pxyconn.o pxythrmgr.o ssl.o sys.o thrqueue.o url.o util.o -lnet -lssl -lcrypto -ldl -levent_openssl -lssl -lcrypto -levent_pthreads -levent -lpcap -ldbus-1
/usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libcrypto.a(libcrypto-lib-dso_dlfcn.o): in function dlfcn_globallookup': (.text+0x17): warning: Using 'dlopen' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libdbus-1.a(libdbus_1_la-dbus-sysdeps-unix.o): in functionfill_user_info':
(.text+0x2cf): warning: Using 'getgrouplist' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
/usr/bin/ld: sys.o: in function sys_privdrop': /home/User1457/Compile_Drop/sslsplit/sys.c:105: warning: Using 'initgroups' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /home/User1457/Compile_Drop/sslsplit/sys.c:86: warning: Using 'getgrnam' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /home/User1457/Compile_Drop/sslsplit/sys.c:150: warning: Using 'endgrent' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: sys.o: in functionsys_group_str':
/home/User1457/Compile_Drop/sslsplit/sys.c:385: warning: Using 'getgrgid_r' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
/usr/bin/ld: sys.o: in function sys_privdrop': /home/User1457/Compile_Drop/sslsplit/sys.c:95: warning: Using 'getpwnam' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /home/User1457/Compile_Drop/sslsplit/sys.c:147: warning: Using 'endpwent' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libdbus-1.a(libdbus_1_la-dbus-sysdeps-unix.o): in functionfill_user_info':
(.text+0x1d0): warning: Using 'getpwnam_r' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
/usr/bin/ld: sys.o: in function sys_user_str': /home/User1457/Compile_Drop/sslsplit/sys.c:332: warning: Using 'getpwuid_r' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libcrypto.a(libcrypto-lib-bio_addr.o): in functionBIO_lookup_ex':
(.text+0xd7f): warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
/usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libnet.a(libnet_resolve.o): in function libnet_addr2name4': (.text+0xd4): warning: Using 'gethostbyaddr' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libnet.a(libnet_resolve.o): in functionlibnet_name2addr4':
(.text+0x340): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
/usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libnet.a(libnet_resolve.o): in function libnet_name2addr6': (.text+0x549): warning: Using 'gethostbyname2' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libpcap.a(nametoaddr.o): in functionpcap_nametonetaddr':
(.text+0x101): warning: Using 'getnetbyname_r' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
/usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libevent.a(evutil.o): in function evutil_getaddrinfo_common_': (.text+0x1c44): warning: Using 'getprotobynumber' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libpcap.a(nametoaddr.o): in functionpcap_nametoproto':
(.text+0x583): warning: Using 'getprotobyname_r' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
/usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libevent.a(evutil.o): in function evutil_getaddrinfo_common_': (.text+0x1baf): warning: Using 'getservbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libdbus-1.a(libdbus_1_la-dbus-sysdeps-unix.o): in function_dbus_listen_systemd_sockets':
(.text+0x200e): undefined reference to sd_listen_fds' /usr/bin/ld: (.text+0x204f): undefined reference tosd_is_socket'
collect2: error: ld returned 1 exit status
make: *** [GNUmakefile:481: sslsplit] Error 1
Version and origin of OpenSSL used:Origin: Ubuntu package manager (apt/aptitude package: libssl-dev)
Version: OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.0.2 15 Mar 2022)
Version and origin of libevent used:
Origin: Ubuntu package manager (apt/aptitude package: libevent-dev)
Version: 2.1.12-stable-1build3
I know it was possible to compile it as a statically linked binary as evident by issue #82 However perhaps a library has broken this or changes to the code maybe ?
Hi, I'm trying to compile SSLsplit to a statically linked binary via the command
PCFLAGS='--static' CFLAGS='-static' LDFLAGS='-static' make -j$(nproc)
however this method fails with the error detailed below. But if I compile via themake -j$(nproc)
the program compiles successfully. Is it not possible to compile SSLsplit as a statically linked binary anymore?Requested information:
uname -a
Full output of failed
make
including the header: User1457@UbuntuBox:~/Compile_Drop/sslsplit$ PCFLAGS='--static' CFLAGS='-static' LDFLAGS='-static' make -j$(nproc)SSLsplit 0.5.5-38-gb2128fc
Report bugs at https://github.com/droe/sslsplit/issues/new Please supply this header for diagnostics when reporting build issues Before reporting bugs, make sure to try the latest develop branch first: % git clone -b develop https://github.com/droe/sslsplit.git
Via pkg-config: openssl libevent libevent_openssl libevent_pthreads libpcap LIBNET_BASE: /usr Build options: -DHAVE_NETFILTER Build info: V:GIT uname -a: Linux UbuntuBox 5.15.0-76-generic #83-Ubuntu SMP Thu Jun 15 19:16:32 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o base64.o base64.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -D"BUILD_PKGNAME=\"sslsplit\"" -D"BUILD_VERSION=\"0.5.5-38-gb2128fc\"" -D"BUILD_DATE=\"2023-07-07\"" -D"BUILD_INFO=\"V:GIT\"" -D"BUILD_FEATURES=\"-DHAVE_NETFILTER\"" -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o build.o build.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o cache.o cache.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o cachedsess.o cachedsess.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o cachefkcrt.o cachefkcrt.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o cachemgr.o cachemgr.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o cachessess.o cachessess.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o cachetgcrt.o cachetgcrt.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o cert.o cert.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o dynbuf.o dynbuf.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o log.o log.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o logbuf.o logbuf.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o logger.o logger.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o logpkt.o logpkt.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o main.o main.c log.c:1690:46: warning: argument 3 of type ‘int[5]’ with mismatched bound [-Warray-parameter=] 1690 | log_init(opts_t opts, proxy_ctx_t ctx, int clisock[5]) |sslsplit.conf
sed -e 's,/usr/local/etc/sslsplit,/usr/local/etc/sslsplit,' -e 's,@@VERSION@@,0.5.5-38-gb2128fc,' -e 's,@@DATE@@,2023-07-07,' sslsplit.1
sed -e 's,/usr/local/etc/sslsplit,/usr/local/etc/sslsplit,' -e 's,@@VERSION@@,0.5.5-38-gb2128fc,' -e 's,@@DATE@@,2023-07-07,' sslsplit.conf.5
cc -static -L/usr/lib -pthread -pthread -o sslsplit base64.o build.o cache.o cachedsess.o cachefkcrt.o cachemgr.o cachessess.o cachetgcrt.o cert.o dynbuf.o log.o logbuf.o logger.o logpkt.o main.o nat.o opts.o privsep.o proc.o proxy.o pxyconn.o pxythrmgr.o ssl.o sys.o thrqueue.o url.o util.o -lnet -lssl -lcrypto -ldl -levent_openssl -lssl -lcrypto -levent_pthreads -levent -lpcap -ldbus-1
/usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libcrypto.a(libcrypto-lib-dso_dlfcn.o): in function
~~^~~~ In file included from log.c:29: log.h:97:39: note: previously declared as ‘int[3]’ 97 | int log_init(opts_t , proxy_ctx_t , int[3]) NONNULL(1,2) WUNRES; | ^~cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o nat.o nat.c logpkt.c: In function ‘logpkt_pcap_build’: logpkt.c:367:17: warning: converting a packed ‘ip4_hdr_t’ pointer (alignment 1) to a ‘uint16_t’ {aka ‘short unsigned int’} pointer (alignment 2) may result in an unaligned pointer value [-Waddress-of-packed-member] 367 | CHKSUM_ADD_RANGE(sum, ip4_hdr, sizeof(ip4_hdr_t)); | ^~~~logpkt.c:81:9: note: defined here 81 | typedef struct attribute((packed)) { | ^~logpkt.c:415:9: warning: converting a packed ‘tcp_hdr_t’ pointer (alignment 1) to a ‘uint16_t’ {aka ‘short unsigned int’} pointer (alignment 2) may result in an unaligned pointer value [-Waddress-of-packed-member] 415 | CHKSUM_ADD_RANGE(sum, tcp_hdr, sizeof(tcp_hdr_t) + payloadlen); | ^~~~logpkt.c:103:9: note: defined here 103 | typedef struct attribute((packed)) { | ^~cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o opts.o opts.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o privsep.o privsep.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o proc.o proc.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o proxy.o proxy.c opts.c: In function ‘opts_free’: opts.c:132:17: warning: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 132 | DH_free(opts->dh); | ^~~ In file included from /usr/include/openssl/dsa.h:51, from /usr/include/openssl/x509.h:37, from /usr/include/openssl/ssl.h:31, from ssl.h:35, from opts.h:34, from opts.c:29: /usr/include/openssl/dh.h:200:28: note: declared here 200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH dh); | ^~~ opts.c: In function ‘opts_set_dh’: opts.c:778:17: warning: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 778 | DH_free(opts->dh); | ^~~ In file included from /usr/include/openssl/dsa.h:51, from /usr/include/openssl/x509.h:37, from /usr/include/openssl/ssl.h:31, from ssl.h:35, from opts.h:34, from opts.c:29: /usr/include/openssl/dh.h:200:28: note: declared here 200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH dh); | ^~~ opts.c: In function ‘opts_set_ecdhcurve’: opts.c:807:9: warning: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 807 | EC_KEY_free(ec); | ^~~In file included from /usr/include/openssl/x509.h:33, from /usr/include/openssl/ssl.h:31, from ssl.h:35, from opts.h:34, from opts.c:29: /usr/include/openssl/ec.h:1003:28: note: declared here 1003 | OSSL_DEPRECATEDIN_3_0 void EC_KEY_free(EC_KEY key); | ^~~cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o pxyconn.o pxyconn.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o pxythrmgr.o pxythrmgr.c pxyconn.c: In function ‘pxy_srcsslctx_create’: pxyconn.c:816:17: warning: ‘SSL_CTX_set_tmp_dh_callback’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 816 | SSL_CTX_set_tmp_dh_callback(sslctx, ssl_tmp_dh_callback); | ^~~~~~~ In file included from ssl.h:35, from opts.h:34, from pxyconn.h:32, from pxyconn.c:29: /usr/include/openssl/ssl.h:2216:6: note: declared here 2216 | void SSL_CTX_set_tmp_dh_callback(SSL_CTX ctx, | ^~~~~~~ pxyconn.c:823:17: warning: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 823 | EC_KEY_free(ecdh); | ^~~In file included from /usr/include/openssl/x509.h:33, from /usr/include/openssl/ssl.h:31, from ssl.h:35, from opts.h:34, from pxyconn.h:32, from pxyconn.c:29: /usr/include/openssl/ec.h:1003:28: note: declared here 1003 | OSSL_DEPRECATEDIN_3_0 void EC_KEY_free(EC_KEY key); | ^~~pxyconn.c:827:17: warning: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 827 | EC_KEY_free(ecdh); | ^~~In file included from /usr/include/openssl/x509.h:33, from /usr/include/openssl/ssl.h:31, from ssl.h:35, from opts.h:34, from pxyconn.h:32, from pxyconn.c:29: /usr/include/openssl/ec.h:1003:28: note: declared here 1003 | OSSL_DEPRECATEDIN_3_0 void EC_KEY_free(EC_KEY key); | ^~~cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o ssl.o ssl.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o sys.o sys.c ssl.c: In function ‘ssl_engine’: ssl.c:530:9: warning: ‘ENGINE_by_id’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 530 | engine = ENGINE_by_id(name); | ^~In file included from ssl.c:44: /usr/include/openssl/engine.h:336:31: note: declared here 336 | OSSL_DEPRECATEDIN_3_0 ENGINE ENGINE_by_id(const char id); | ^~~~ ssl.c:534:9: warning: ‘ENGINE_set_default’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 534 | if (!ENGINE_set_default(engine, ENGINE_METHOD_ALL)) | ^~ In file included from ssl.c:44: /usr/include/openssl/engine.h:708:27: note: declared here 708 | OSSL_DEPRECATEDIN_3_0 int ENGINE_set_default(ENGINE e, unsigned int flags); | ^~~~~~ ssl.c: In function ‘ssl_tmp_dh_callback’: ssl.c:738:9: warning: ‘DH_new’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 738 | if (!(dh = DH_new())) { | ^~ In file included from /usr/include/openssl/dsa.h:51, from /usr/include/openssl/x509.h:37, from /usr/include/openssl/ssl.h:31, from ssl.h:35, from ssl.c:29: /usr/include/openssl/dh.h:199:27: note: declared here 199 | OSSL_DEPRECATEDIN_3_0 DH DH_new(void); | ^~ssl.c:744:17: warning: ‘DH_set0_pqg’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 744 | rv = DH_set0_pqg(dh, | ^~ In file included from /usr/include/openssl/dsa.h:51, from /usr/include/openssl/x509.h:37, from /usr/include/openssl/ssl.h:31, from ssl.h:35, from ssl.c:29: /usr/include/openssl/dh.h:255:27: note: declared here 255 | OSSL_DEPRECATEDIN_3_0 int DH_set0_pqg(DH dh, BIGNUM p, BIGNUM q, BIGNUM g); | ^~~ssl.c:750:17: warning: ‘DH_set0_pqg’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 750 | rv = DH_set0_pqg(dh, | ^~ In file included from /usr/include/openssl/dsa.h:51, from /usr/include/openssl/x509.h:37, from /usr/include/openssl/ssl.h:31, from ssl.h:35, from ssl.c:29: /usr/include/openssl/dh.h:255:27: note: declared here 255 | OSSL_DEPRECATEDIN_3_0 int DH_set0_pqg(DH dh, BIGNUM p, BIGNUM q, BIGNUM g); | ^~~ssl.c:756:17: warning: ‘DH_set0_pqg’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 756 | rv = DH_set0_pqg(dh, | ^~ In file included from /usr/include/openssl/dsa.h:51, from /usr/include/openssl/x509.h:37, from /usr/include/openssl/ssl.h:31, from ssl.h:35, from ssl.c:29: /usr/include/openssl/dh.h:255:27: note: declared here 255 | OSSL_DEPRECATEDIN_3_0 int DH_set0_pqg(DH dh, BIGNUM p, BIGNUM q, BIGNUM g); | ^~~ssl.c:762:17: warning: ‘DH_set0_pqg’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 762 | rv = DH_set0_pqg(dh, | ^~ In file included from /usr/include/openssl/dsa.h:51, from /usr/include/openssl/x509.h:37, from /usr/include/openssl/ssl.h:31, from ssl.h:35, from ssl.c:29: /usr/include/openssl/dh.h:255:27: note: declared here 255 | OSSL_DEPRECATEDIN_3_0 int DH_set0_pqg(DH dh, BIGNUM p, BIGNUM q, BIGNUM g); | ^~~ssl.c:771:17: warning: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 771 | DH_free(dh); | ^~~ In file included from /usr/include/openssl/dsa.h:51, from /usr/include/openssl/x509.h:37, from /usr/include/openssl/ssl.h:31, from ssl.h:35, from ssl.c:29: /usr/include/openssl/dh.h:200:28: note: declared here 200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH dh); | ^~~ ssl.c:776:17: warning: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 776 | DH_free(dh); | ^~~ In file included from /usr/include/openssl/dsa.h:51, from /usr/include/openssl/x509.h:37, from /usr/include/openssl/ssl.h:31, from ssl.h:35, from ssl.c:29: /usr/include/openssl/dh.h:200:28: note: declared here 200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH dh); | ^~~ ssl.c: In function ‘ssl_dh_load’: ssl.c:798:9: warning: ‘PEM_read_DHparams’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 798 | dh = PEM_read_DHparams(fh, NULL, NULL, NULL); | ^~ In file included from /usr/include/openssl/ssl.h:36, from ssl.h:35, from ssl.c:29: /usr/include/openssl/pem.h:469:1: note: declared here 469 | DECLARE_PEM_rw_attr(OSSL_DEPRECATEDIN_3_0, DHparams, DH) | ^~~~~~~ ssl.c: In function ‘ssl_ec_by_name’: ssl.c:820:9: warning: ‘EC_KEY_new_by_curve_name’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 820 | return EC_KEY_new_by_curve_name(nid); | ^~In file included from /usr/include/openssl/x509.h:33, from /usr/include/openssl/ssl.h:31, from ssl.h:35, from ssl.c:29: /usr/include/openssl/ec.h:998:31: note: declared here 998 | OSSL_DEPRECATEDIN_3_0 EC_KEY EC_KEY_new_by_curve_name(int nid); | ^~~~~~~~ ssl.c: In function ‘ssl_key_genrsa’: ssl.c:1370:9: warning: ‘RSA_new’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 1370 | rsa = RSA_new(); | ^~~ In file included from /usr/include/openssl/x509.h:36, from /usr/include/openssl/ssl.h:31, from ssl.h:35, from ssl.c:29: /usr/include/openssl/rsa.h:201:28: note: declared here 201 | OSSL_DEPRECATEDIN_3_0 RSA RSA_new(void); | ^~~ ssl.c:1373:9: warning: ‘RSA_generate_key_ex’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 1373 | rv = RSA_generate_key_ex(rsa, keysize, bn, NULL); | ^~ In file included from /usr/include/openssl/x509.h:36, from /usr/include/openssl/ssl.h:31, from ssl.h:35, from ssl.c:29: /usr/include/openssl/rsa.h:260:27: note: declared here 260 | OSSL_DEPRECATEDIN_3_0 int RSA_generate_key_ex(RSA rsa, int bits, BIGNUM e, | ^~~~~~~ ssl.c:1376:17: warning: ‘RSA_free’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 1376 | RSA_free(rsa); | ^~~~ In file included from /usr/include/openssl/x509.h:36, from /usr/include/openssl/ssl.h:31, from ssl.h:35, from ssl.c:29: /usr/include/openssl/rsa.h:293:28: note: declared here 293 | OSSL_DEPRECATEDIN_3_0 void RSA_free(RSA r); | ^~~~ ssl.c:1385:9: warning: ‘EVP_PKEY_assign’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 1385 | EVP_PKEY_assign_RSA(pkey, rsa); / does not increment refcount / | ^~~~~~~ In file included from /usr/include/openssl/x509.h:29, from /usr/include/openssl/ssl.h:31, from ssl.h:35, from ssl.c:29: /usr/include/openssl/evp.h:1328:5: note: declared here 1328 | int EVP_PKEY_assign(EVP_PKEY pkey, int type, void key); | ^~~~~~~ ssl.c: In function ‘ssl_dh_refcount_inc’: ssl.c:1506:9: warning: ‘DH_up_ref’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations] 1506 | DH_up_ref(dh); | ^~~~~ In file included from /usr/include/openssl/dsa.h:51, from /usr/include/openssl/x509.h:37, from /usr/include/openssl/ssl.h:31, from ssl.h:35, from ssl.c:29: /usr/include/openssl/dh.h:201:27: note: declared here 201 | OSSL_DEPRECATEDIN_3_0 int DH_up_ref(DH dh); | ^~~~~ cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o thrqueue.o thrqueue.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o url.o url.c cc -c -isystem/usr/include -D_GNU_SOURCE -D"PKGLABEL=\"SSLsplit\"" -DHAVE_NETFILTER -static -g -std=c99 -Wall -Wextra -pedantic -D_FORTIFY_SOURCE=2 -fstack-protector-all -pthread -O -o util.o util.c sed -e 's,/usr/local/etc/sslsplit,/usr/local/etc/sslsplit,' -e 's,@@VERSION@@,0.5.5-38-gb2128fc,' -e 's,@@DATE@@,2023-07-07,'dlfcn_globallookup': (.text+0x17): warning: Using 'dlopen' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libdbus-1.a(libdbus_1_la-dbus-sysdeps-unix.o): in function
fill_user_info': (.text+0x2cf): warning: Using 'getgrouplist' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: sys.o: in functionsys_privdrop': /home/User1457/Compile_Drop/sslsplit/sys.c:105: warning: Using 'initgroups' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /home/User1457/Compile_Drop/sslsplit/sys.c:86: warning: Using 'getgrnam' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /home/User1457/Compile_Drop/sslsplit/sys.c:150: warning: Using 'endgrent' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: sys.o: in function
sys_group_str': /home/User1457/Compile_Drop/sslsplit/sys.c:385: warning: Using 'getgrgid_r' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: sys.o: in functionsys_privdrop': /home/User1457/Compile_Drop/sslsplit/sys.c:95: warning: Using 'getpwnam' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /home/User1457/Compile_Drop/sslsplit/sys.c:147: warning: Using 'endpwent' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libdbus-1.a(libdbus_1_la-dbus-sysdeps-unix.o): in function
fill_user_info': (.text+0x1d0): warning: Using 'getpwnam_r' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: sys.o: in functionsys_user_str': /home/User1457/Compile_Drop/sslsplit/sys.c:332: warning: Using 'getpwuid_r' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libcrypto.a(libcrypto-lib-bio_addr.o): in function
BIO_lookup_ex': (.text+0xd7f): warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libnet.a(libnet_resolve.o): in functionlibnet_addr2name4': (.text+0xd4): warning: Using 'gethostbyaddr' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libnet.a(libnet_resolve.o): in function
libnet_name2addr4': (.text+0x340): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libnet.a(libnet_resolve.o): in functionlibnet_name2addr6': (.text+0x549): warning: Using 'gethostbyname2' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libpcap.a(nametoaddr.o): in function
pcap_nametonetaddr': (.text+0x101): warning: Using 'getnetbyname_r' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libevent.a(evutil.o): in functionevutil_getaddrinfo_common_': (.text+0x1c44): warning: Using 'getprotobynumber' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libpcap.a(nametoaddr.o): in function
pcap_nametoproto': (.text+0x583): warning: Using 'getprotobyname_r' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libevent.a(evutil.o): in functionevutil_getaddrinfo_common_': (.text+0x1baf): warning: Using 'getservbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/11/../../../x86_64-linux-gnu/libdbus-1.a(libdbus_1_la-dbus-sysdeps-unix.o): in function
_dbus_listen_systemd_sockets': (.text+0x200e): undefined reference tosd_listen_fds' /usr/bin/ld: (.text+0x204f): undefined reference to
sd_is_socket' collect2: error: ld returned 1 exit status make: *** [GNUmakefile:481: sslsplit] Error 1I know it was possible to compile it as a statically linked binary as evident by issue #82 However perhaps a library has broken this or changes to the code maybe ?
Kind regards