We have been running a small awk program before installing the relinked libc.

Perform the same kind of test for relinked libcrypto, using an openssl
sequence (proposed by sthen)

diff --git a/etc/rc b/etc/rc
index cc8a200..1d6155b 100644 (file)
--- a/etc/rc
+++ b/etc/rc
@@ -1,4 +1,4 @@
-#      $OpenBSD: rc,v 1.499 2017/06/03 22:33:36 deraadt Exp $
+#      $OpenBSD: rc,v 1.500 2017/06/03 22:59:09 deraadt Exp $
 
 # System startup script run by init on autoboot or after single-user.
 # Output and error are redirected to console by init, and the console is the
@@ -199,6 +199,8 @@ reorder_libs() {
                        cc -shared -o $_lib $(ls *.so | sort -R) $(cat .ldadd)
                        [[ -s $_lib ]] && file $_lib | fgrep -q 'shared object'
                        LD_BIND_NOW=1 LD_LIBRARY_PATH=$_tmpdir awk 'BEGIN {exit 0}'
+                       LD_BIND_NOW=1 LD_LIBRARY_PATH=$_tmpdir openssl \
+                           x509 -in /etc/ssl/cert.pem -out /dev/null
                        install -F -S -o root -g bin -m 0444 $_lib /usr/lib/$_lib
                ) || { _error=true; break; }
        done