[tor-bugs] #16901 [Tor]: tor 0.2.7 configures OS X system OpenSSL, even though it's too old to work

[Tor Bug Tracker & Wiki]

#16901: tor 0.2.7 configures OS X system OpenSSL, even though it's too old to work
--------------------------+---------------------------------------------
     Reporter:  teor      |      Owner:
         Type:  defect    |     Status:  needs_review
     Priority:  critical  |  Milestone:  Tor: 0.2.7.x-final
    Component:  Tor       |    Version:  Tor: 0.2.7.2-alpha
   Resolution:            |   Keywords:  TorCoreTeam201509 Post027Freeze
Actual Points:            |  Parent ID:
       Points:            |
--------------------------+---------------------------------------------

Comment (by teor):

 The branch works as expected. Let's get it merged!

 A new user on OS X can follow a typical build workflow and get a working
 tor install by responding to ./configure error messages:
 1. git clone https://git.torproject.org/tor/tor.git
 2. ./configure
 {{{
 checking for libevent directory... configure: WARNING: Could not find a
 linkable libevent.  If you have it installed somewhere unusual, you can
 specify an explicit path using --with-libevent-dir
 configure: error: Missing libraries; unable to proceed.
 }}}
 3. port install libevent (which also installs openssl)
 4. ./configure --with-libevent-dir=/opt/local
 {{{
 checking whether we need extra options to link openssl... (none)
 configure: error: OpenSSL is too old. We require 1.0.0 or later. You can
 specify a path to a newer one with --with-openssl-dir.
 }}}
 5. ./configure --with-libevent-dir=/opt/local --with-openssl-
 dir=/opt/local
 6. make
 7. make test

 Notes on other configurations:

 HomeBrew is an alternative OS X package manager. It shouldn't suffer from
 this issue due to its cask system, which places every package in its own
 directory.

 Users on any platform may also install OpenSSL and libevent themselves. If
 they are installed in the in the same parent directory (e.g.
 /usr/local/{include,lib}), this issue could occur. This patch will fix the
 issue in this configuration, too.

 OpenBSD users have complained of similar issues since tor 0.2.7.2-alpha.
 Although it shouldn't happen on the default configuration (as their distro
 has libevent), this patch should avoid similar issues if a newer OpenSSL
 and libevent are installed together.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16901#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online