Re: [opensc-devel] pam_pkcs11: more implicit and conflicting declaration fixes

[Robert Relyea]

Ludovic Rousseau wrote:

2008/10/24 Stanislav Brabec <[EMAIL PROTECTED]>:

Ludovic Rousseau wrote:

2008/10/17 Stanislav Brabec <[EMAIL PROTECTED]>:

http://www.opensc-project.org/pam_pkcs11/changeset/353

"Fixed" in revision 353.

Not yet completely. This seems to be critical:

Not really critical in fact :-)
The code compiles but two symbols are missing from ldap_mapper.so
undefined symbol: CERT_CompareCerts     (.libs/ldap_mapper.so)
undefined symbol: d2i_X509      (.libs/ldap_mapper.so)

So the library can't be used.

d2i_X509 is an OpenSSL function so I am not surprised it is not found
when linked with NSS.

CERT_CompareCerts() should be found but is not.

In [1] I found that CERT_CompareCerts() is not exported from NSS. Argh!
I have no easy solution.

Bob, you added support of NSS in pam_pkcs11. can you please work on a
solution to use NSS with ldap_mapper?

When identical certs are imported into NSS, they are given the same reference counted pointer, so the test is as easy as:

      cert1 == cert2

bob

Until a solution is found I think you should not compile ldap_mapper
if NSS is used.
Comments?


[1] http://curl.haxx.se/mail/lib-2008-06/0184.html

Bye

smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel