On 07/02/2018 06:36, Bruce Dubbs wrote:
> Ken Moffat wrote:
>> On Tue, Feb 06, 2018 at 07:06:22PM -0500, Ryan Marsaw wrote:
>>> On Tue, 6 Feb 2018, hykw...@sina.com wrote:
>>>
>>>>> On Mon, 5 Feb 2018, hykw...@sina.com wrote:
>>>>>> I got the following message when I built the Linux kernel 4.15:
>>>>>>
>>>>>> fatal error: openssl/bio.h: No such file or directory
>> [...]
>>> OK. I believe I've figured this out.
>>>
>>> [...] Interesting and clever stuff
>> Thanks for the investigation - on one of my machines The first
>> kernel I built in chroot (before any of BLFS) was 4.15.0-rc4 on 22nd
>> December, so the dependency seems to have sneaked in after that (to fix
>> wireless regulatory problems, according to that link).
>>
>> Bad news for those of us with machines which do not have wireless
>> connections :-(
Nope. The faulty switch is not selected if "Wireless" is not selected (in
"Networking support" menu. That's why I haven't seen the dependency on openssl
although I have gone through a lot of LFS builds lately (for testing jhalfs),
with 4.15{,.1} kernels.
>>
>> I do build openssl before I boot, but adding it seems like a
>> sledgehammer to crack a kernel config problem.
>
> I agree. I read the link above and the patch was rejected, but I also found:
>
> https://cateee.net/lkddb/web-lkddb/CFG80211_CERTIFICATION_ONUS.html
>
> It says:
>
> "You should disable this option unless you are both capable and willing to
> ensure your system will remain regulatory compliant with the features
> available under this option. "
Hmm: I understand it says "don't change the defaults" that become visible if
that option is selected.
>
>
> I think it should be disabled for LFS users and it is disabled by default.
>
> The "option" CFG80211_REQUIRE_SIGNED_REGDB seems to the problem.
>
> Turning it off is difficult. It requires enabling CONFIG_EXPERT:
>
> General setup --->
> Configure standard kernel features (expert users)
>
> But that also says: "Only use this if you really know what you are doing."
>
> It also turns on a lot of options we do not want, e.g. Kernel debugging which
> we can't otherwise turn off.
>
> The only options I can see for us is to either:
>
> sed -e '/regdb signature/{N;s/y/CFG80211_CERTIFICATION_ONUS/}' \
> -i net/wireless/Kconfig
>
> before menuconfig OR
>
> sed -e '/REQUIRE_SIGNED_REGDB/s/y/n/' \
> -i .config
>
Or build openssl in LFS. I've done some testing with the new jhalfs-blfs
dependency engine: when you select almost any package with optional
dependencies (which as a rule brings in half of the BLFS packages), openssl
appears among the first ten built packages... To me, it means it is a
requirement for almost anything in BLFS.
And IIUC, if I had a wireless card on my system, I wouldn't like this option
being turned off, since it would allow regulatory databases to be loaded
without checking their authenticity...
Regards
Pierre
--
http://lists.linuxfromscratch.org/listinfo/lfs-dev
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page
