[C++] OpenSSL 1.0.2 and above supported for C++, but in R OpenSSL 1.0 and 1.1 is desupported

[alexeyroytman]

When building Arrow, I see this messages:

-- Building without OpenSSL support. Minimum OpenSSL version 1.0.2 required.
...
-- Thrift: Found OpenSSL: /usr/lib64/libcrypto.so (found version "1.1.1k")  
...
-- Thrift:   Build with OpenSSL:                         OFF

But I have OpenSSL 3.x:

$ rpm -qf /usr/lib64/libcrypto.so
openssl-devel-1.1.1k-15.el8_6.x86_64
$ rpm -qf /usr/lib64/libcrypto.so.3
openssl3-libs-3.5.5-1.1.el8.x86_64

But the main topic of this discussion is that in PR #49331 (GH-49330) the OpenSSL 1.0 and 1.1 were removed from R. Why are they still in C++ ?

[alexeyroytman]

(Maybe, the not recognized version comes because of an old version of cmake 3.26.5 ...)

[pitrou]

cc @kou

[pitrou]

Perhaps you need openssl3-devel (or similar) installed? Dev headers for OpenSSL 1.1.1k will presumably not work with a OpenSSL 3.5.5 library install.

[alexeyroytman]

I have OpenSSL 3.x devel packages:

$ rpm -qf /usr/include/openssl/ssl.h
openssl-devel-1.1.1k-15.el8_6.x86_64
openssl-devel-1.1.1k-15.el8_6.i686
$ rpm -qf /usr/include/openssl3/openssl/ssl.h
openssl3-devel-3.5.5-1.1.el8.x86_64

[kou]

Could you share full CMake log?

[alexeyroytman]

    time cmake .. -DARROW_PARQUET=ON \
         -DARROW_WITH_BROTLI=ON -DARROW_WITH_BZ2=ON \
         -DARROW_WITH_LZ4=ON -DARROW_WITH_SNAPPY=ON \
         -DARROW_WITH_ZLIB=ON -DARROW_WITH_ZSTD=ON \
         -DCMAKE_BUILD_TYPE=Release \
         -DCMAKE_INSTALL_PREFIX=$arrow_inst \
         -DARROW_BUILD_UTILITIES=ON -DARROW_FILESYSTEM=ON \
         -DPARQUET_BUILD_EXECUTABLES=ON -DARROW_DATASET=ON \
         -DPARQUET_REQUIRE_ENCRYPTION=ON \
         -DARROW_JSON=ON

cmake_build_sslsimplej.txt

[alexeyroytman]

Thus, for my case, these are mandatory:

         -DOPENSSL_CRYPTO_LIBRARY=/usr/lib64/libcrypto.so.3 \
         -DOPENSSL_SSL_LIBRARY=/usr/lib64/libssl.so.3 \
         -DOPENSSL_INCLUDE_DIR=/usr/include/openssl3 \
         -DPARQUET_REQUIRE_ENCRYPTION=ON \
         -DARROW_JSON=ON

[alexeyroytman]

Can we close this discussion?

I still do not understand why for R we dropped support for OpenSSL 1.x, but generally for Arrow it's supported.

[raulcd]

Based on this issue:

• [R][CI] Remove OpenSSL 1.x builds #45449

I think we should bump the minimum OpenSSL version required on our CMake instead of asking why R dropped it as OpenSSL version < 3 is EOL and unsupported. I am unsure saying Arrow supporting OpenSSL 1.x at the moment is just coincidental as we might or might not be testing it on CI (as far as I know there's no specific OpenSSL CI validation) and this might just be a missed bump on our CMake.

[alexeyroytman]

Oh, now I agree with this direction. I'm closing the discussion.

[alexeyroytman]

Closing as a duplicate of issue #45449.

(Issue #50129 and PR #50130 about ARROW_JSON were filed today.)