[Cryptography-dev] Selecting alternative OpenSSL library

Jesus Cea jcea at jcea.es
Wed Oct 21 02:40:27 CEST 2015


My stock OpenSSL library is ancient so I installed an alternative
current OpenSSL release under "/usr/local/ssl". In order to compile
"cryptography" in this machine I must do:

$ LDFLAGS="-L/usr/local/ssl/lib" \
  CFLAGS="-I/usr/local/ssl/include" \
  python -m pip install -U cryptography

This is a Solaris machine, but I guess the same can be done in Linux,
and other unix-like OSs.

Please, add something about this in
<https://cryptography.io/en/latest/installation/>.

Thanks for "cryptography". It is an amazing product.

PS: How can I know what OpenSSL version is using "cryptography", beside
checking the loaded shared objects by hand? :):

"""
$ python3
Python 3.5.0 (dtrace-issue13405_3.5:a7da156226da, Sep 13 2015, 18:22:50)
[GCC 5.2.0] on sunos5
Type "help", "copyright", "credits" or "license" for more information.
>>> import cryptography
>>> from cryptography.hazmat.bindings.openssl.binding import Binding
>>> import os
>>> os.getpid()
22075
...
[In another terminal]
$ # pmap 22075 | grep -i ssl
FDF00000    1536K r-x--  /usr/local/ssl/lib/libcrypto.so.1.0.0
FE08F000      92K rwx--  /usr/local/ssl/lib/libcrypto.so.1.0.0
FE0A6000       8K rwx--  /usr/local/ssl/lib/libcrypto.so.1.0.0
FE0B0000     376K r-x--  /usr/local/ssl/lib/libssl.so.1.0.0
FE11D000      28K rwx--  /usr/local/ssl/lib/libssl.so.1.0.0
FE130000     552K r-x--
/usr/local/lib/python3.5/site-packages/cryptography/hazmat/bindings/_openssl.so
FE1C9000      60K rwx--
/usr/local/lib/python3.5/site-packages/cryptography/hazmat/bindings/_openssl.so
"""

-- 
Jesús Cea Avión                         _/_/      _/_/_/        _/_/_/
jcea at jcea.es - http://www.jcea.es/     _/_/    _/_/  _/_/    _/_/  _/_/
Twitter: @jcea                        _/_/    _/_/          _/_/_/_/_/
jabber / xmpp:jcea at jabber.org  _/_/  _/_/    _/_/          _/_/  _/_/
"Things are not so easy"      _/_/  _/_/    _/_/  _/_/    _/_/  _/_/
"My name is Dump, Core Dump"   _/_/_/        _/_/_/      _/_/  _/_/
"El amor es poner tu felicidad en la felicidad de otro" - Leibniz

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://mail.python.org/pipermail/cryptography-dev/attachments/20151021/9bd934f1/attachment.sig>


More information about the Cryptography-dev mailing list