https://bugs.koozali.org/show_bug.cgi?id=13585
Bug ID: 13585
Summary: Unable to build Libreswan 4.x for SME v11
Classification: Contribs
Product: SME Contribs
Version: Futur
Hardware: ---
OS: ---
Status: CONFIRMED
Severity: normal
Priority: P3
Component: libreswan
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
Target Milestone: ---
Repo has 4.15 for SME v10 but it fails to build on v11.
Main repos have 4.12.x but running the latest versions would generally be
better.
I have asked on the Libre list about this.
https://koji.koozali.org/kojifiles/work/tasks/7908/27908/build.log
cc -pthread -std=gnu99 -g -Werror -Wno-error=address -Wno-missing-braces
-Wno-missing-field-initializers -Wall -Wextra -Wformat -Wformat-nonliteral
-Wformat-security -Wundef -Wmissing-declarations -Wredundant-decls
-Wnested-externs -O2 -g -pipe -Wall -Werror=format-security
-Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions
-fstack-protector-strong -grecord-gcc-switches
-specs=/usr/lib/rpm/redhat/redhat-hardened-cc1
-specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic
-fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection
-fstack-protector-all -fno-strict-aliasing -fPIE -DPIE -DNSS_IPSEC_PROFILE
-DUSE_IKEv1 -DKERNEL_XFRM -DUSE_XFRM_INTERFACE -DXFRM_LIFETIME_DEFAULT=30
-DFIPS_CHECK -DFIPSPRODUCTCHECK=\"/etc/system-fips\" -DHAVE_LABELED_IPSEC
-DUSE_SECCOMP -DLIBCURL -DUSE_LINUX_AUDIT -DUSE_SYSTEMD_WATCHDOG -DLIBLDAP
-DHAVE_NM -DUSE_PAM_AUTH -DUSE_3DES -DUSE_AES -DUSE_CAMELLIA -DUSE_CHACHA
-DUSE_DH31 -DUSE_MD5 -DUSE_SHA1 -DUSE_SHA2 -DUSE_PRF_AES_XCBC
-DDEFAULT_RUNDIR=\"/run/pluto\" -DIPSEC_CONF=\"/etc/ipsec.conf\"
-DIPSEC_CONFDDIR=\"/etc/ipsec.d\" -DIPSEC_NSSDIR=\"/etc/ipsec.d\"
-DIPSEC_CONFDIR=\"/etc\" -DIPSEC_EXECDIR=\"/usr/libexec/ipsec\"
-DIPSEC_SBINDIR=\"/usr/sbin\" -DIPSEC_VARDIR=\"/var\"
-DPOLICYGROUPSDIR=\"/etc/ipsec.d/policies\"
-DIPSEC_SECRETS_FILE=\"/etc/ipsec.secrets\" -DFORCE_PR_ASSERT -DHAVE_IPTABLES
-DUSE_FORK=1 -DUSE_VFORK=0 -DUSE_DAEMON=0 -DUSE_PTHREAD_SETSCHEDPRIO=1
-DGCC_LINT -DHAVE_LIBCAP_NG -DUSE_XFRM_INTERFACE_IFLA_HEADER \
-I../../OBJ.linux.x86_64.9c27134631f542cfbbd0c78d2a4a4d98/programs/pluto
-I../../include -I/usr/include/nss3 -I/usr/include/nspr4
-I/builddir/build/BUILD/libreswan-4.15/programs/pluto/linux-copy
-I/builddir/build/BUILD/libreswan-4.15/programs/pluto/linux-extra-if-link \
-DHERE_FILENAME=\"/programs/pluto/x509.c\" \
\
-MF
../../OBJ.linux.x86_64.9c27134631f542cfbbd0c78d2a4a4d98/programs/pluto/x509.d \
-MP -MMD -MT x509.o \
-o
../../OBJ.linux.x86_64.9c27134631f542cfbbd0c78d2a4a4d98/programs/pluto/x509.o \
-c /builddir/build/BUILD/libreswan-4.15/programs/pluto/x509.c
In file included from
/builddir/build/BUILD/libreswan-4.15/programs/pluto/kernel_xfrm_interface.c:62:
/builddir/build/BUILD/libreswan-4.15/programs/pluto/linux-extra-if-link/if_link_extra.h:7:2:
error: redeclaration of enumerator 'IFLA_XFRM_UNSPEC'
IFLA_XFRM_UNSPEC,
^~~~~~~~~~~~~~~~
In file included from /usr/include/linux/rtnetlink.h:7,
from
/builddir/build/BUILD/libreswan-4.15/programs/pluto/kernel_xfrm_interface.c:57:
/usr/include/linux/if_link.h:661:2: note: previous definition of
'IFLA_XFRM_UNSPEC' was here
IFLA_XFRM_UNSPEC,
^~~~~~~~~~~~~~~~
In file included from
/builddir/build/BUILD/libreswan-4.15/programs/pluto/kernel_xfrm_interface.c:62:
/builddir/build/BUILD/libreswan-4.15/programs/pluto/linux-extra-if-link/if_link_extra.h:8:2:
error: redeclaration of enumerator 'IFLA_XFRM_LINK'
IFLA_XFRM_LINK,
^~~~~~~~~~~~~~
In file included from /usr/include/linux/rtnetlink.h:7,
from
/builddir/build/BUILD/libreswan-4.15/programs/pluto/kernel_xfrm_interface.c:57:
/usr/include/linux/if_link.h:662:2: note: previous definition of
'IFLA_XFRM_LINK' was here
IFLA_XFRM_LINK,
^~~~~~~~~~~~~~
In file included from
/builddir/build/BUILD/libreswan-4.15/programs/pluto/kernel_xfrm_interface.c:62:
/builddir/build/BUILD/libreswan-4.15/programs/pluto/linux-extra-if-link/if_link_extra.h:9:2:
error: redeclaration of enumerator 'IFLA_XFRM_IF_ID'
IFLA_XFRM_IF_ID,
^~~~~~~~~~~~~~~
In file included from /usr/include/linux/rtnetlink.h:7,
from
/builddir/build/BUILD/libreswan-4.15/programs/pluto/kernel_xfrm_interface.c:57:
/usr/include/linux/if_link.h:663:2: note: previous definition of
'IFLA_XFRM_IF_ID' was here
IFLA_XFRM_IF_ID,
^~~~~~~~~~~~~~~
In file included from
/builddir/build/BUILD/libreswan-4.15/programs/pluto/kernel_xfrm_interface.c:62:
/builddir/build/BUILD/libreswan-4.15/programs/pluto/linux-extra-if-link/if_link_extra.h:10:2:
error: redeclaration of enumerator '__IFLA_XFRM_MAX'
__IFLA_XFRM_MAX
^~~~~~~~~~~~~~~
In file included from /usr/include/linux/rtnetlink.h:7,
from
/builddir/build/BUILD/libreswan-4.15/programs/pluto/kernel_xfrm_interface.c:57:
/usr/include/linux/if_link.h:664:2: note: previous definition of
'__IFLA_XFRM_MAX' was here
__IFLA_XFRM_MAX
^~~~~~~~~~~~~~~
make[3]: *** [../../mk/rules.mk:63: kernel_xfrm_interface.o] Error 1
====================
While testing I managed to build Libreswan 5.3.x latest on my rocky build box
but can't mockbuild it.
cc -pthread -std=gnu99 -g -Werror -Wall -Wextra -Wformat -Wformat-nonliteral
-Wformat-security -Wundef -Wmissing-declarations -Wredundant-decls
-Wnested-externs -O2 -g -pipe -Wall -Werror=format-security
-Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions
-fstack-protector-strong -grecord-gcc-switches
-specs=/usr/lib/rpm/redhat/redhat-hardened-cc1
-specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic
-fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection
-fstack-protector-all -fno-strict-aliasing -fPIE -DPIE
-DIPSEC_EXECDIR=\"/usr/libexec/ipsec\" -DIPSEC_SBINDIR=\"/usr/sbin\"
-DIPSEC_RUNDIR=\"/run/pluto\" -DIPSEC_CONF=\"/etc/ipsec.conf\"
-DIPSEC_SECRETS=\"/etc/ipsec.secrets\" -DIPSEC_CONFDDIR=\"/etc/ipsec.d\"
-DIPSEC_VARDIR=\"/var\" -DDEFAULT_LOGLEVEL=LOG_WARNING
-DLOGFILE='"/var/log/pluto.log"' -DIPSEC_NSSDIR=\"/etc/ipsec.d\"
-DNSS_BINDIR=\"/usr/bin\" -DUSE_IKEv1 -DKERNEL_XFRM -DUSE_XFRM_INTERFACE
-DXFRM_LIFETIME_DEFAULT=30 -DUSE_DNSSEC
-DDEFAULT_DNSSEC_ROOTKEY_FILE=\"/var/lib/unbound/root.key\"
-DHAVE_LABELED_IPSEC -DUSE_SECCOMP -DUSE_LIBCURL -DUSE_LINUX_AUDIT
-DUSE_SYSTEMD_WATCHDOG -DUSE_LDAP -DUSE_CAT -DUSE_NFLOG -DUSE_NFTABLES
-DUSE_PAM_AUTH -DUSE_3DES -DUSE_AES -DUSE_CAMELLIA -DUSE_CHACHA -DUSE_DH31
-DUSE_MD5 -DUSE_SHA1 -DUSE_SHA2 -DUSE_PRF_AES_XCBC -DUSE_NSS_KDF
-DIPSEC_SYSCONFDIR=\"/etc\" -DPOLICYGROUPSDIR=\"/etc/ipsec.d/policies\"
-DFORCE_PR_ASSERT -DUSE_FORK=1 -DUSE_VFORK=0 -DUSE_DAEMON=0
-DUSE_PTHREAD_SETSCHEDPRIO=1 -DGCC_LINT -DHAVE_LIBCAP_NG
-I../../OBJ.linux.x86_64/programs/pluto -I../../include -I/usr/include/nss3
-I/usr/include/nspr4
-I/builddir/build/BUILD/libreswan-5.3/programs/pluto/linux-copy \
-DHERE_FILENAME='"programs/pluto/ikev2_ipseckey_dnsr.c"' \
-MP -MMD -MT ikev2_ipseckey_dnsr.o -MF
../../OBJ.linux.x86_64/programs/pluto/ikev2_ipseckey_dnsr.d \
-o ../../OBJ.linux.x86_64/programs/pluto/ikev2_ipseckey_dnsr.o \
-c ikev2_ipseckey_dnsr.c
In file included from /usr/include/ldns/ldns.h:98,
from ikev2_ipseckey_dnsr.c:30:
/usr/include/ldns/dane.h:30:10: fatal error: openssl/ssl.h: No such file or
directory
#include <openssl/ssl.h>
^~~~~~~~~~~~~~~
compilation terminated.
On the build box:
repoquery /usr/include/openssl/ssl.h
openssl-devel-1:1.1.1k-14.el8_10.0.1.x86_64
rpm -qa |grep openssl-devel
openssl-devel-1.1.1k-14.el8_10.0.1.x86_64
It appears that openssl-dev is a buildrequires which I added to the spec, but
the mockbuild fails to pick up /usr/include/openssl/ssl.h
--
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug._______________________________________________
Mail for each SME Contribs bug report
To unsubscribe, e-mail [email protected]
Searchable archive at https://lists.contribs.org/mailman/public/contribteam/
