Skip to content

[GLUTEN-8232][VL] Followup to update doc for VCPKG dynamic openssl feature#12178

Open
zhouyuan wants to merge 3 commits into
apache:mainfrom
zhouyuan:wip_vcpkg_dynamicopenssl_doc
Open

[GLUTEN-8232][VL] Followup to update doc for VCPKG dynamic openssl feature#12178
zhouyuan wants to merge 3 commits into
apache:mainfrom
zhouyuan:wip_vcpkg_dynamicopenssl_doc

Conversation

@zhouyuan
Copy link
Copy Markdown
Member

@zhouyuan zhouyuan commented May 28, 2026

What changes are proposed in this pull request?

follow up on #11444 to update doc

How was this patch tested?

Was this patch authored or co-authored using generative AI tooling?

Related issue: #8232

@github-actions github-actions Bot added the DOCS label May 28, 2026
Signed-off-by: Yuan <yuanzhou@apache.org>
@zhouyuan zhouyuan force-pushed the wip_vcpkg_dynamicopenssl_doc branch from 3d6c3b2 to bf668b9 Compare May 28, 2026 20:30
zhouyuan added 2 commits May 28, 2026 21:47
Signed-off-by: Yuan <yuanzhou@apache.org>
@zhouyuan zhouyuan requested review from FelixYBW and philo-he May 29, 2026 06:21
Copy link
Copy Markdown
Member

@philo-he philo-he left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good overall. One minor comment. Thanks.

1. **vcpkg Configuration**: The `dynamic-openssl` feature is enabled in `vcpkg.json`, which includes OpenSSL with FIPS support
2. **Triplet Override**: Custom vcpkg triplets (`x64-linux-avx.cmake` and `arm64-linux-neon.cmake`) detect the environment variable and switch OpenSSL from static to dynamic linkage
3. **Build Process**: The `init.sh` script adds the `--x-feature=dynamic-openssl` flag to vcpkg install
4. **Library Packaging**: OpenSSL shared libraries are excluded from static linking but must be available at runtime
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we add the following explicit clarification for users?

  • At runtime, LD_LIBRARY_PATH should point to the OS-provided OpenSSL package, which includes libssl.so, libcrypto.so, and the FIPS-certified fips.so, so that these libraries are loaded instead of the ones built at compile time by vcpkg.

  • Users should ensure compatibility between the OpenSSL libraries (libssl.so and libcrypto.so) used at link time and those available at runtime. We recommend using the same major version to avoid potential compatibility issues.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@zhouyuan can you also add the openssl version in vcpkg here?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants