On Fri, Jul 14, 2023 at 11:01:16PM +0200, Marcel Menzel wrote: > Hello List, > > Trying to compile HAProxy version 2.8.1 with WolfSSL 5.6.3 results in > the following error: > > src/ssl_sock.c: In function ‘ssl_sock_load_ocsp’: > src/ssl_sock.c:1117:9: error: unknown type name ‘tlsextStatusCb’ > 1117 | tlsextStatusCb callback; > | ^~~~~~~~~~~~~~ > make: *** [Makefile:998: src/ssl_sock.o] Error 1 > make: *** Waiting for unfinished jobs.... > > In my makefile / Arch Linux PKGBUILD I have the following: > > unset CFLAGS > unset CXXFLAGS > unset LDFLAGS > > export CFLAGS="$CFLAGS -fwrapv" > > make \ > CFLAGS="$CFLAGS" \ > LDFLAGS="$LDFLAGS" \ > CPU=generic \ > TARGET=linux-glibc \ > USE_GETADDRINFO=1 \ > USE_LUA=1 \ > USE_OPENSSL_WOLFSSL=1 \ > USE_PCRE2=1 USE_PCRE2_JIT=1 \ > USE_PROMEX=1 \ > USE_SYSTEMD=1 \ > USE_ZLIB=1 > > Using Kernel 6.1.38-hardened1 if of interest. Am I missing something here? > > > - Marcel
Hello, WolfSSL 5.6.3 and HAProxy 2.8.1 are compatible with each other, however you need to compile wolfssl and haproxy the right way. You should probably try building haproxy without reseting "LDFLAGS" and "CFLAGS" first, and then add "SSL_LIB" and "SSL_INC" with the right wolfssl path. Please follow the build instruction in the INSTALL file, there are also instructions regarding how to build WolfSSL with haproxy compatibility. Regards, -- William Lallemand

