choctaw hog fails to run on macOS 12.1 due to incorrect path for libssl.1.1.dylib

[sammcj]

Description

choctaw hog fails to run on macOS 12.1 due to an incorrect / missing path for libssl.1.1.dylib

Steps to Reproduce

1. Start with a macOS 12.1 machine.
2. Download the Darwin binary for choctaw hog.
3. Run the binary
4. Receive error:

darwin_releases/choctaw_hog

dyld[35939]: Library not loaded: /usr/local/opt/[email protected]/lib/libssl.1.1.dylib
  Referenced from: /Users/<username>/Downloads/darwin_releases/choctaw_hog
  Reason: tried: '/usr/local/opt/[email protected]/lib/libssl.1.1.dylib' (no such file), '/usr/local/lib/libssl.1.1.dylib' (no such file), '/usr/lib/libssl.1.1.dylib' (no such file)

[1]    35939 abort      ~/Downloads/darwin_releases/choctaw_hog

The correct path for libssl.1.1.dylib assuming you have it installed from homebrew is:

/opt/homebrew/Cellar/[email protected]/1.1.1l_1/lib/libssl.1.1.dylib

Expected Behaviour

For the application to either find the existing library from /opt/homebrew/Cellar/openssl@//lib/libssl..dylib or for the library to be provided with the download.

Your Environment

HOMEBREW_VERSION: 3.3.9
ORIGIN: https://github.com/Homebrew/brew
HEAD: 96137bc19e68398ebbb7033379df288cd8b9a3f9
Last commit: 6 days ago
Core tap ORIGIN: https://github.com/Homebrew/homebrew-core
Core tap HEAD: 3e08bfbbaa36488a38e10e1a8263d65bb83d62e4
Core tap last commit: 24 hours ago
Core tap branch: master
HOMEBREW_PREFIX: /opt/homebrew
HOMEBREW_CASK_OPTS: []
HOMEBREW_CORE_GIT_REMOTE: https://github.com/Homebrew/homebrew-core
HOMEBREW_GITHUB_API_TOKEN: set
HOMEBREW_MAKE_JOBS: 10
HOMEBREW_NO_ANALYTICS: set
Homebrew Ruby: 2.6.8 => /System/Library/Frameworks/Ruby.framework/Versions/2.6/usr/bin/ruby
CPU: 10-core 64-bit arm_firestorm_icestorm
Clang: 13.0.0 build 1300
Git: 2.34.1 => /opt/homebrew/bin/git
Curl: 7.77.0 => /usr/bin/curl
macOS: 12.1-arm64
CLT: 13.2.0.0.1.1638488800
Xcode: N/A
Rosetta 2: false

[cutler-scott-newrelic]

I see your environment says ARM, I believe this darwin build is only for x86. I recently traded my intel mac for an M1 mac (since I don't own a mac personally). I think what I really need to do is get some sort of universal build solution in place. Until then you will need to use Rust to compile the program manually.

[sammcj]

It's definitely an ARM build using qemu-system-aarch64 (universal).

You can install an x86 (emulated) build optionally, but that's not the default.

colima version
colima version 0.3.4
git commit: 5a4a70481ca8d1e794677f22524e3c1b79a9b4ae

runtime: docker
arch: aarch64
client: v20.10.14
server: v20.10.11

Client: Docker Engine - Community
 Version:           20.10.14
 API version:       1.41
 Go version:        go1.18
 Git commit:        a224086349
 Built:             Fri Mar  4 17:18:07 2022
 OS/Arch:           darwin/arm64
 Context:           default
 Experimental:      true

Server:
 Engine:
  Version:          20.10.11
  API version:      1.41 (minimum version 1.12)
  Go version:       go1.16.4
  Git commit:       847da184ad5048b27f5bdf9d53d070f731b43180
  Built:            Fri Nov 19 03:41:34 2021
  OS/Arch:          linux/arm64
  Experimental:     false
 containerd:
  Version:          v1.5.8
  GitCommit:        1e5ef943eb76627a6d3b6de8cd1ef6537f393a71
 runc:
  Version:          1.0.0-rc95
  GitCommit:        b9ee9c6314599f1b4a7f497e1f1f856fe433d3b7
 docker-init:
  Version:          0.19.0
  GitCommit:

[tonnyhideyori]

I am facing the same problem with sane settings as above user
dyld[93686]: Library not loaded: /usr/local/opt/[email protected]/lib/libssl.1.1.dylib Referenced from: /Users/e8834/Desktop/security/rusty-hog/darwin_releases/gottingen_hog Reason: tried: '/usr/local/opt/[email protected]/lib/libssl.1.1.dylib' (no such file), '/usr/local/lib/libssl.1.1.dylib' (no such file), '/usr/lib/libssl.1.1.dylib' (no such file) zsh: abort darwin_releases/gottingen_hog -h

[cutler-scott-newrelic]

Until this is handed off to the security automation team, and/or we have a better CI/CD system like Github actions, I'm going to abandon the pre-built binaries. I just don't have the time to manage 5+ build environments, and New Relic took my x86 mac laptop back so I no longer have access to that. I'll keep this open in the hopes that we can pick pre-built binaries back up next year.