cURL / Mailing Lists / curl-library / Single Mail


RE: libcurl links to openssl libraries twice

From: Alona Rossen <>
Date: Thu, 12 Jun 2014 17:06:54 +0000

I have figured out that dependency on and was coming from ldap library.

The issue is solved by eliminating ldap from libcurl dependencies. How libcurl uses ldap? I want to make sure that functionality we are interested in is not affected.

Thank you,

From: Alona Rossen
Sent: June 12, 2014 11:56 AM
To: ''
Subject: libcurl links to openssl libraries twice


I rebuild libcurl with openssl1.0.0m in view of recent openssl security vulnerability announcement.

I linked dynamically and was surprised to see that libcurl links to two different versions of openssl: one that I specified, and another one found in the system:

/usr/local/curl72/lib> ldd => (0x00b43000) => /usr/lib/ (0x00a56000) => /usr/lib/ (0x003da000) => /lib/ (0x00394000)
=> => /usr/local/ssl/lib/ (0x00232000)
=> => /usr/local/ssl/lib/ (0x00414000) => /usr/lib/ (0x00602000) => /lib/ (0x00ec7000) => /lib/ (0x00817000) => /usr/lib/ (0x00a1f000) => /lib/ (0x00de9000) => /usr/lib/ (0x0039e000)
    => => /lib/ (0x00110000)
    => => /lib/ (0x00c59000) => /lib/ (0x00218000)
        /lib/ (0x007fb000) => /lib/ (0x00155000) => /usr/lib/ (0x00187000) => /usr/lib/ (0x00283000) => /lib/ (0x001c9000) => /usr/lib/ (0x001cc000) => /usr/lib/ (0x00655000) => /lib/ (0x00bda000) => /lib/ (0x00686000) => /lib/ (0x00316000)

Thank you,

List admin:
Received on 2014-06-12