Hello,
libgwenhywfar (latest release, 4.14.0) fails to build from source
against GnuTLS 3.4.x:
-----------------------
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../gwenhywfar4
-I../../src/base -I../../src/parser -D_FORTIFY_SOURCE=2 -fvisibility=hidden
-DBUILDING_GWENHYWFAR -g -O2 -fstack-protector-strong -Wformat
-Werror=format-security -Wall -Wdeclaration-after-statement -Wall
-Wdeclaration-after-statement -c syncio_tls.c -fPIC -DPIC -o .libs/syncio_tls.o
syncio_tls.c: In function 'GWEN_SyncIo_Tls_Prepare':
syncio_tls.c:367:5: warning: implicit declaration of function
'gnutls_protocol_set_priority' [-Wimplicit-function-declaration]
rv=gnutls_protocol_set_priority(xio->session, proto_prio);
[...]
libtool: link: ( cd ".libs" && rm -f "libgwenhywfar.la" && ln -s
"../libgwenhywfar.la" "libgwenhywfar.la" )
gcc -DHAVE_CONFIG_H -DBUILDING_GWENHYWFAR -DGWEN_PREFIX_DIR=\"/usr\"
-DGWEN_SYSCONF_DIR=\"/etc\" -DLOCALEDIR=\"/usr/share/locale\"
-DLIBDIR=\"/usr/lib\" -DGWENHYWFAR_SO_EFFECTIVE_STR=\"60\"
-DGWEN_DATADIR=\"/usr/share/gwenhywfar\" -DGWEN_SYSDATADIR=\"/usr/share\"
-DPLUGINDIR=\"/usr/lib/gwenhywfar/plugins/60\" -I. -I.. -I../gwenhywfar4
-I../src/base -I../src/crypt -I../src/os -I../src/net2 -I../src/html
-I../src/parser -D_FORTIFY_SOURCE=2 -fvisibility=hidden -g -O2
-fstack-protector-strong -Wformat -Werror=format-security -Wall
-Wdeclaration-after-statement -Wall -Wdeclaration-after-statement -c -o
testlib.o testlib.c
/bin/bash ../libtool --tag=CC --mode=link gcc -fvisibility=hidden -g -O2
-fstack-protector-strong -Wformat -Werror=format-security -Wall
-Wdeclaration-after-statement -Wall -Wdeclaration-after-statement -Wl,-z,relro
-o testlib testlib.o libgwenhywfar.la
libtool: link: gcc -fvisibility=hidden -g -O2 -fstack-protector-strong -Wformat
-Werror=format-security -Wall -Wdeclaration-after-statement -Wall
-Wdeclaration-after-statement -Wl,-z -Wl,relro -o .libs/testlib testlib.o
./.libs/libgwenhywfar.so -pthread
./.libs/libgwenhywfar.so: undefined reference to `gnutls_protocol_set_priority'
collect2: error: ld returned 1 exit status
Makefile:844: recipe for target 'testlib' failed
-----------------------
The respective code
DBG_INFO(GWEN_LOGDOMAIN, "Forcing SSL v3");
rv=gnutls_protocol_set_priority(xio->session, proto_prio);
could be replaced easily with something like
rv=gnutls_priority_set_direct(xio->session,
"NORMAL:-VERS-TLS-ALL:+VERS-SSL3.0", NULL);
however, I wonder whether that is the right thing to do, shouldn't the
SSLv3 setting simply be dropped?
cu Andreas
--
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
