El Capitan OpenSSL

Question

El Capitan OpenSSL

MikeMcQuaid opened this issue 9 years ago · 12 comments

In El Capitan OpenSSL's libraries are still provided but headers have been removed from the OS X SDKs. As a result, you should no longer encourage the use of brew link openssl --force as clang's default link and library paths mean that you may end up using newer Homebrew OpenSSL headers but link against the older, system version.

For a reproduction example see https://gist.github.com/tdsmith/4b502c5cc6e7d358acdf

Answer 1 · 2015-09-21T22:21:36.000Z

Thanks for the heads up, @MikeMcQuaid. I will mention it in the El Cap guide which I'll write when the OS is released.

Answer 2 · 2015-09-30T22:39:57.000Z

Hey @drduh , not related to this issue but how compatible is this guide with El Capitan in general? Wish I've seen this repo when I was on Yosemite :(

Answer 3 · 2015-10-01T08:20:22.000Z

@mixania I've gone through this guide on El Capitan without any hitches.

Answer 4 · 2015-10-01T13:21:19.000Z

any revision for el capitan is planned ?

Answer 5 · 2015-10-01T20:40:44.000Z

@nickpellant thanks, nice to know

Answer 6 · 2015-10-02T06:51:38.000Z

http://www.techrepublic.com/resource-library/whitepapers/eliminate-blind-spots-in-ssl-encrypted-traffic
http://www.thoughtcrime.org/software/sslstrip/

Answer 7 · 2015-10-06T00:08:45.000Z

Hey @poulagah I am planning to clone this into an updated El Cap guide in the next week or so. Stay tuned!

Answer 8 · 2015-10-06T16:46:25.000Z

@drduh yeah you rocks !

Answer 9 · 2015-10-13T02:32:25.000Z

@drduh there were some issues with the SIP on el Cap, and also unloading some services causes CPU spikes. Not sure when you plan on releasing the guide, and I didn't want to open a seperate issue, but if you would consider starting a new repo with release info that would be awesome. Great guide BTW. Cheers.

Answer 10 · 2015-10-13T16:48:37.000Z

Thanks for letting me know, @SKGrimes. I will try and get a preliminary El Cap guide by the end of the week, time permitting.

Answer 11 · 2016-12-18T07:48:16.000Z

Is this still accurate for Sierra?

Answer 12 · 2016-12-18T07:54:09.000Z

FYI, ondoing brew install --force openssl Homebrew outputs:

...
Generally there are no consequences of this for you. If you build your
own software and it requires this formula, you'll need to add to your
build variables:

    LDFLAGS:  -L/usr/local/opt/openssl/lib
    CPPFLAGS: -I/usr/local/opt/openssl/include
...

So maybe that solves this issue for Sierra as well?