feat cmake: add OpenSSL to CPM

Tests: протестировано CI

Pull Request resolved: #1012
commit_hash:9686c21e20ad02d00034f1a1acb7257e55b1d4cf

Author: segoon

.mapping.json

@@ -517,6 +517,7 @@
   "cmake/SetupLTO.cmake":"taxi/uservices/userver/cmake/SetupLTO.cmake",
   "cmake/SetupLinker.cmake":"taxi/uservices/userver/cmake/SetupLinker.cmake",
   "cmake/SetupMongoDeps.cmake":"taxi/uservices/userver/cmake/SetupMongoDeps.cmake",
+  "cmake/SetupOpenssl.cmake":"taxi/uservices/userver/cmake/SetupOpenssl.cmake",
   "cmake/SetupOpentelemetryProto.cmake":"taxi/uservices/userver/cmake/SetupOpentelemetryProto.cmake",
   "cmake/SetupPGO.cmake":"taxi/uservices/userver/cmake/SetupPGO.cmake",
   "cmake/SetupPostgresqlDeps.cmake":"taxi/uservices/userver/cmake/SetupPostgresqlDeps.cmake",

CMakeLists.txt

@@ -194,6 +194,9 @@ include(UserverGenerateDynamicConfigsDocs)
 include(CheckCompileFlags)
 include(CMakePackageConfigHelpers)
 
+_userver_macos_set_default_dir(OPENSSL_ROOT_DIR "brew;--prefix;openssl")
+include(SetupOpenssl)
+
 set(USERVER_THIRD_PARTY_DIRS
     ${USERVER_ROOT_DIR}/third_party
     CACHE INTERNAL ""

cmake/SetupCURL.cmake

@@ -61,6 +61,8 @@ cpmaddpackage(
     "BUILD_CURL_EXE OFF"
     "BUILD_SHARED_LIBS OFF"
     "CURL_DISABLE_TESTS ON"
+    "CURL_DISABLE_LDAP ON"
+    "HAVE_DLOPEN TRUE"
     ${CURL_LTO_OPTION}
 )
 

cmake/SetupOpenssl.cmake

@@ -0,0 +1,72 @@
+include_guard(GLOBAL)
+
+option(USERVER_DOWNLOAD_PACKAGE_OPENSSL "Download and setup OpenSSL if no library of matching version was found"
+       ${USERVER_DOWNLOAD_PACKAGES}
+)
+option(USERVER_FORCE_DOWNLOAD_OPENSSL "Download OpenSSL even if there is an installed system package"
+       ${USERVER_FORCE_DOWNLOAD_PACKAGES}
+)
+
+if(NOT USERVER_FORCE_DOWNLOAD_OPENSSL AND NOT OpenSSL_CPM)
+    if(USERVER_DOWNLOAD_PACKAGE_OPENSSL)
+        find_package(OpenSSL)
+    else()
+        find_package(OpenSSL REQUIRED)
+    endif()
+
+    if(OpenSSL_FOUND)
+        return()
+    endif()
+endif()
+set(OpenSSL_CPM TRUE CACHE BOOL "")
+ 
+include(DownloadUsingCPM)
+
+set(OPENSSL_INSTALL_DIR ${CMAKE_BINARY_DIR}/openssl)
+execute_process(COMMAND mkdir -p ${OPENSSL_INSTALL_DIR}/usr/local/include)
+
+# Flags are copied from Ubuntu's debian/rules
+set(CONFIGURE_FLAGS no-idea no-mdc2 no-rc5 no-zlib no-ssl3 enable-unit-test no-ssl3-method enable-rfc3779 enable-cms no-capieng)
+set(OPENSSL_VERSION 3.5.2)
+
+cpmaddpackage(
+     NAME OpenSSL
+     URL https://github.com/openssl/openssl/releases/download/openssl-${OPENSSL_VERSION}/openssl-${OPENSSL_VERSION}.tar.gz
+     URL_HASH SHA512=db2c7a88bea432f96d867a98af15f850f371d4136c657338de93cb88a39a3578c025b5df7310e195a02fc715ad5a2422a319a44f0247c6a7e2ba8b36aad77651
+)
+
+# We use custom target to be able to set build dependency
+# for *external* libcurl from CPM
+add_custom_target(
+    OpenSSL
+        test -e ${OPENSSL_INSTALL_DIR}/.installed || CFLAGS=${CMAKE_C_FLAGS} ./config --libdir=/usr/local/lib ${CONFIGURE_FLAGS}
+    COMMAND
+        test -e ${OPENSSL_INSTALL_DIR}/.installed || make -j8
+    COMMAND
+        test -e ${OPENSSL_INSTALL_DIR}/.installed || make DESTDIR=${OPENSSL_INSTALL_DIR} install_sw
+    COMMAND
+        touch ${OPENSSL_INSTALL_DIR}/.installed
+    WORKING_DIRECTORY ${OpenSSL_SOURCE_DIR}
+    COMMENT "Compiling OpenSSL library"
+)
+
+
+add_library(Crypto STATIC IMPORTED GLOBAL)
+add_dependencies(Crypto OpenSSL)
+set_property(TARGET Crypto PROPERTY IMPORTED_LOCATION ${OPENSSL_INSTALL_DIR}/usr/local/lib/libcrypto.a)
+target_include_directories(Crypto INTERFACE ${OPENSSL_INSTALL_DIR}/usr/local/include)
+
+
+add_library(SSL STATIC IMPORTED GLOBAL)
+add_dependencies(SSL OpenSSL)
+set_property(TARGET SSL PROPERTY IMPORTED_LOCATION ${OPENSSL_INSTALL_DIR}/usr/local/lib/libssl.a)
+target_include_directories(SSL INTERFACE ${OPENSSL_INSTALL_DIR}/usr/local/include)
+
+add_library(OpenSSL::Crypto ALIAS Crypto)
+add_library(OpenSSL::SSL ALIAS SSL)
+
+# Light emulation of find_package(OpenSSL) for libcurl
+set(OpenSSL_FOUND TRUE CACHE BOOL "" FORCE)
+set(OPENSSL_FOUND TRUE CACHE BOOL "" FORCE)
+set(OPENSSL_CRYPTO_LIBRARY OpenSSL::Crypto CACHE STRING "" FORCE)
+set(OPENSSL_INCLUDE_DIR ${OPENSSL_INSTALL_DIR}/usr/local/include CACHE FILEPATH "" FORCE)

core/CMakeLists.txt

@@ -42,8 +42,6 @@ find_package_required(ZLIB "zlib1g-dev")
 
 find_package(Iconv REQUIRED)
 
-_userver_macos_set_default_dir(OPENSSL_ROOT_DIR "brew;--prefix;openssl")
-find_package_required(OpenSSL "libssl-dev")
 
 find_package(libev REQUIRED)
 find_package(libnghttp2 REQUIRED)
@@ -98,14 +96,18 @@ endif()
 
 target_link_libraries(
     ${PROJECT_NAME}
-    PUBLIC userver-universal Boost::locale CURL::libcurl
-    PRIVATE Boost::filesystem
-            Boost::program_options
-            Boost::iostreams
-            Iconv::Iconv
-            OpenSSL::Crypto
-            OpenSSL::SSL
-            ZLIB::ZLIB
+    PUBLIC
+	userver-universal
+	Boost::locale
+	CURL::libcurl
+    PRIVATE
+	Boost::filesystem
+	Boost::program_options
+	Boost::iostreams
+	Iconv::Iconv
+	OpenSSL::SSL
+	OpenSSL::Crypto
+	ZLIB::ZLIB
 )
 
 add_subdirectory(${USERVER_THIRD_PARTY_DIRS}/llhttp llhttp)

scripts/docs/en/deps/ubuntu-24.04/universal

@@ -21,7 +21,6 @@ libpugixml-dev
 libsnappy-dev
 libre2-dev
 libsnappy-dev
-libssh2-1-dev
 libxxhash-dev
 libyaml-cpp-dev
 libyaml-cpp0.8

universal/CMakeLists.txt

@@ -45,8 +45,6 @@ if(CMAKE_CXX_COMPILER_ID MATCHES "Clang")
     endif()
 endif()
 
-find_package_required(OpenSSL "libssl-dev")
-
 find_package(yaml-cpp REQUIRED)
 find_package(zstd REQUIRED)
 
@@ -240,7 +238,11 @@ endif()
 target_link_libraries(
     ${PROJECT_NAME}
     PUBLIC Threads::Threads userver-internal-sanitize-options userver-internal-compile-options
-    PRIVATE Boost::filesystem Boost::program_options OpenSSL::Crypto OpenSSL::SSL
+    PRIVATE
+        Boost::filesystem
+        Boost::program_options
+        OpenSSL::SSL
+        OpenSSL::Crypto
 )
 
 if(USERVER_CONAN)