Can't build ECH example on M1 Mac

[FrontMage]

Version

5.6.3

Description

Trying to make https://wolfssl.com/encrypted-client-hello-ech-now-supported-wolfssl/ this work, by compiling code from https://gist.github.com/jpbland1/ad46617fcc40934b252ce031c7aa5969 on M1 Mac.
After building the wolfssl lib by using

./configure --host=aarch64-apple-darwin
make
sudo make install

then ran

gcc ech_cloudflare.c

gave these errors:

ld: Undefined symbols:
  _wolfSSL_CTX_UseSNI, referenced from:
      _main in ech-f9216f.o
  _wolfSSL_CTX_free, referenced from:
      _main in ech-f9216f.o
  _wolfSSL_CTX_load_verify_locations, referenced from:
      _main in ech-f9216f.o
  _wolfSSL_CTX_new, referenced from:
      _main in ech-f9216f.o
  _wolfSSL_Cleanup, referenced from:
      _main in ech-f9216f.o
  _wolfSSL_GetEchConfigs, referenced from:
      _main in ech-f9216f.o
  _wolfSSL_Init, referenced from:
      _main in ech-f9216f.o
  _wolfSSL_SetEchConfigs, referenced from:
      _main in ech-f9216f.o
  _wolfSSL_connect, referenced from:
      _main in ech-f9216f.o
      _main in ech-f9216f.o
  _wolfSSL_free, referenced from:
      _main in ech-f9216f.o
      _main in ech-f9216f.o
  _wolfSSL_get_error, referenced from:
      _main in ech-f9216f.o
      _main in ech-f9216f.o
      _main in ech-f9216f.o
  _wolfSSL_new, referenced from:
      _main in ech-f9216f.o
      _main in ech-f9216f.o
  _wolfSSL_read, referenced from:
      _main in ech-f9216f.o
  _wolfSSL_set_fd, referenced from:
      _main in ech-f9216f.o
      _main in ech-f9216f.o
  _wolfSSL_write, referenced from:
      _main in ech-f9216f.o
  _wolfTLSv1_3_client_method, referenced from:
      _main in ech-f9216f.o
clang: error: linker command failed with exit code 1 (use -v to see invocation)

Are there any other steps to take before building this ECH example or the code from the gist need an update?
Thx for the help!

[anhu]

Hi @FrontMage ,

Thanks for reaching out. My name is Anthony Hu and I am a member of the wolfSSL team.

I see a few things that might need to change. You'll need to enable ECH in your configure command line. Please add --enable-ech . For your build of the ech_cloudflare.c example, you'll need to use -I to specify where the include directory is installed, -L to specify where the wolfSSL library is installed -lwolfssl to specify that the executable should be linked to the wolfSSL library.

@jpbland1 was the author of that gist, so I will assign this to him to see if he has any further suggestions.

Warm regards, Anthony

[FrontMage]

Hi, thx for the help!
I added --enable-ech to the configure then rebuilt and reinstalled wolfssl, then using gcc ech_cloudflare.c -L/usr/local/lib -I/usr/local/include outputs:

ld: Undefined symbols:
  _wolfSSL_CTX_UseSNI, referenced from:
      _main in ech-85ee66.o
  _wolfSSL_CTX_free, referenced from:
      _main in ech-85ee66.o
  _wolfSSL_CTX_load_verify_locations, referenced from:
      _main in ech-85ee66.o
  _wolfSSL_CTX_new, referenced from:
      _main in ech-85ee66.o
  _wolfSSL_Cleanup, referenced from:
      _main in ech-85ee66.o
  _wolfSSL_GetEchConfigs, referenced from:
      _main in ech-85ee66.o
  _wolfSSL_Init, referenced from:
      _main in ech-85ee66.o
  _wolfSSL_SetEchConfigs, referenced from:
      _main in ech-85ee66.o
  _wolfSSL_connect, referenced from:
      _main in ech-85ee66.o
      _main in ech-85ee66.o
  _wolfSSL_free, referenced from:
      _main in ech-85ee66.o
      _main in ech-85ee66.o
  _wolfSSL_get_error, referenced from:
      _main in ech-85ee66.o
      _main in ech-85ee66.o
      _main in ech-85ee66.o
  _wolfSSL_new, referenced from:
      _main in ech-85ee66.o
      _main in ech-85ee66.o
  _wolfSSL_read, referenced from:
      _main in ech-85ee66.o
  _wolfSSL_set_fd, referenced from:
      _main in ech-85ee66.o
      _main in ech-85ee66.o
  _wolfSSL_write, referenced from:
      _main in ech-85ee66.o
  _wolfTLSv1_3_client_method, referenced from:
      _main in ech-85ee66.o
clang: error: linker command failed with exit code 1 (use -v to see invocation)

and my installed path are

ls /usr/local/include                                                                                                                                  
wolfssl
ls /usr/local/lib                                                                                                                                        
 docker   libwolfssl.40.dylib   libwolfssl.dylib   libwolfssl.la   pkgconfig

[anhu]

Hi,

Thanks for your quick work and response. You might also need to run sudo ldconfig; its required on other POSIX systems; not sure about Mac. Also, you might have to set the DYLD_LIBRARY_PATH environment variable.

Can you please tell me a bit about yourself and your project? For example:

• What are your goals and what are you trying to accomplish?
• Is this for personal, professional or academic interest?
• Is this work associated with any organization or institution?

Any information would be helpful so that we can prioritize this issue.
Warm regards, Anthony

[FrontMage]

OK, mac does not have ldconfig and DYLD_LIBRARY_PATH=/usr/local/lib does not work, I'll try to redo this on a Linux machine.
My goal is to see if ECH works on wolfssl and to integrate it into our product, our company is routers and we would like our router manager login and other APIs are protected by ECH. To do this I need to make a version of curl that supports ECH, which then requires either a openssl or wolfssl that supports ECH.

[anhu]

Hi @FrontMage ,

Yes, please do try on Linux.

As this is a commercial project, might I suggest you reach out to us a support@wolfssl.com where we can provide free pre-sales support. If you choose to do so, please include a reference to this github issue. I will now close this ticket and await any further responses at support@wolfssl.com.

Warm regards, Anthony

[dgarske]

Hi @FrontMage ,

I still don't see where you are indicating use of libwolfssl in your gcc call: gcc ech_cloudflare.c. Can you try adding -lwolfssl?

The typical way to build an application with wolfSSL:

./autogen.sh
./configure [--enable-args]
make
sudo make installl
(sudo ldconfig) if Linux

gcc -lwolfssl myapp.c 

Make sure your my app.c includes wolfssl/options.h at the top then wolfssl/wolfcrypt/settings.h. See FAQ 1: https://www.wolfssl.com/docs/frequently-asked-questions-faq/#How_do_I_manage_the_build_configuration_for_wolfSSL?

Thanks,
David Garske, wolfSSL