Re: Small problems compiling tomcat native

[Christopher Schultz]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Rainer,

On 4/25/16 8:57 AM, Rainer Jung wrote:
> Am 25.04.2016 um 14:31 schrieb Stefan Frei:
>> very sorry just solved it.
>> 
>> 
>> overlooked a line in configure
>> 
>> /root/tomcat-native-1.1.34-src/jni/native/build/get-version.sh: 
>> Permission denied
> 
> OK, no problem. If extracted from a source tarball, the file should
> have been executable by default though. It might be it is not if
> you picked a zip file source download.
> 
> Another comment: OpenSSL 1.0.1k is pretty old.

Debian has "stable" versions plus patches. So for example, my Debian
system currently reports OpenSSL 1.0.1e which is (by version number)
before Heartbleed was fixed. But if I ask Debian what the version of
the package is, it tells me:

1.0.1e-2+deb7u20

So there have been something like 20 patches against their stable
version, but they still maintain the version that was initially
released. So, even though "openssl version" reports:

$ openssl version
OpenSSL 1.0.1e 11 Feb 2013

It actually contains all of the "important" patches that have been
released since then (for whatever definition the Debian security team
has for "important").

> 1.0.1s is current for 1.0.1 and even better would be 1.0.2g but it
> might be, that you won't find such a packet for your OS version.

The nice thing about Debian is that it's super stable, in every sense
of the word. The bad thing about Debian is that it's super stable, in
every sense of the word.

> You could compile 1.0.2g yourself though and install in a separate
> directory. Using 1.0.2 you could switch to tcnative 1.2.x (which
> needs OpenSSL 1.0.2).

This is entirely possible, and it's how I perform my own testing for
tcnative releases (since they currently require 1.0.2).

Hope that helps,
- -chris
-BEGIN PGP SIGNATURE-
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlcfkUcACgkQ9CaO5/Lv0PC/8ACgi9siQitWZ5I2bU4ReOBH7K2N
mywAnj5oj9Pxu69j++1CRCn9oMd8Qyfw
=N/WQ
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Small problems compiling tomcat native

[Stefan Frei]

ok thx for the hint. dunno why debian still provides 1.0.1.

anyway i plan to migrate the production to ubuntu, im almost sure they
have a more recent openssl.

i only took the 1.1 release because of the old ssl.

Regards

Stefan

2016-04-25 14:57 GMT+02:00 Rainer Jung :
> Am 25.04.2016 um 14:31 schrieb Stefan Frei:
>>
>> very sorry just solved it.
>>
>>
>> overlooked a line in configure
>>
>> /root/tomcat-native-1.1.34-src/jni/native/build/get-version.sh:
>> Permission denied
>
>
> OK, no problem. If extracted from a source tarball, the file should have
> been executable by default though. It might be it is not if you picked a zip
> file source download.
>
> Another comment: OpenSSL 1.0.1k is pretty old. 1.0.1s is current for 1.0.1
> and even better would be 1.0.2g but it might be, that you won't find such a
> packet for your OS version. You could compile 1.0.2g yourself though and
> install in a separate directory. Using 1.0.2 you could switch to tcnative
> 1.2.x (which needs OpenSSL 1.0.2). The current tcnative 1.2.x is 1.2.5, but
> a 1.2.6 will likely be released during the next few days.
>
> There are currently no plans for another tcnative 1.1.x release.
>
> Regards,
>
> Rainer
>
>
>> 2016-04-25 14:04 GMT+02:00 Rainer Jung :
>>>
>>> Can you provide the full configure command you use and the configure and
>>> make output as well as config.log? Do you have environment variables set,
>>> that influence the build (CC, CFLAGS, LDFLAGS or similar)?
>>>
>>> The "-Wl,-z,relro" should not directly come from our own tcnative scripts
>>> but using the make output (and configure output) we can double check.
>>>
>>> It could be, that those flags come from and APR or OpenSSL pkgconfig or
>>> .la
>>> file or similar, which we inspect when building tcnative to learn about
>>> the
>>> correct flags to link against OpenSSL and APR.
>>>
>>> You might run
>>>
>>> find PATH -exec grep relro \{\} \; -ls
>>>
>>> with PATH replaced by the tcnative build directory and APR and OpenSSL
>>> install directories respectively. There are indications that debian adds
>>> the
>>> relro flag when building the system openssl.
>>>
>>> Does you linker understand "-z relro"? You can check "man ld" and "ld
>>> --help".
>>>
>>> Regards,
>>>
>>> Rainer
>>>
>>>
>>> Am 25.04.2016 um 13:16 schrieb Stefan Frei:


 libapr1:amd64  1.5.1-3
 openssl1.0.1k-3+deb8u4

 2016-04-25 12:35 GMT+02:00 Mark Thomas :
>
>
> On 25/04/2016 10:31, Stefan Frei wrote:
>>
>>
>> Hello
>>
>> tomcat 8.0.33
>> tomcat-native-1.1.34-src
>> SMP Debian 3.16.7-ckt25-2
>> 1.8.0_77
>>
>> i am unable to compile the native libs, here is the error messages
>> from the make command:
>>
>> libtool: link: CURRENT `-Wl,-z,relro' must be a nonnegative integer
>> libtool: link: `-Wl,-z,relro' is not valid version information
>> make[1]: *** [libtcnative-.la] Error 1
>> make: *** [all-recursive] Error 1
>>
>> I followed the instructions described here:
>> https://tomcat.apache.org/native-doc/
>>
>> how can i debug this?
>
>
>
> What versions of APR and OpenSSL are you compiling against?
>
> Mark
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Small problems compiling tomcat native

[Rainer Jung]

Am 25.04.2016 um 14:31 schrieb Stefan Frei:

very sorry just solved it.


overlooked a line in configure

/root/tomcat-native-1.1.34-src/jni/native/build/get-version.sh:
Permission denied


OK, no problem. If extracted from a source tarball, the file should have 
been executable by default though. It might be it is not if you picked a 
zip file source download.


Another comment: OpenSSL 1.0.1k is pretty old. 1.0.1s is current for 
1.0.1 and even better would be 1.0.2g but it might be, that you won't 
find such a packet for your OS version. You could compile 1.0.2g 
yourself though and install in a separate directory. Using 1.0.2 you 
could switch to tcnative 1.2.x (which needs OpenSSL 1.0.2). The current 
tcnative 1.2.x is 1.2.5, but a 1.2.6 will likely be released during the 
next few days.


There are currently no plans for another tcnative 1.1.x release.

Regards,

Rainer


2016-04-25 14:04 GMT+02:00 Rainer Jung :

Can you provide the full configure command you use and the configure and
make output as well as config.log? Do you have environment variables set,
that influence the build (CC, CFLAGS, LDFLAGS or similar)?

The "-Wl,-z,relro" should not directly come from our own tcnative scripts
but using the make output (and configure output) we can double check.

It could be, that those flags come from and APR or OpenSSL pkgconfig or .la
file or similar, which we inspect when building tcnative to learn about the
correct flags to link against OpenSSL and APR.

You might run

find PATH -exec grep relro \{\} \; -ls

with PATH replaced by the tcnative build directory and APR and OpenSSL
install directories respectively. There are indications that debian adds the
relro flag when building the system openssl.

Does you linker understand "-z relro"? You can check "man ld" and "ld
--help".

Regards,

Rainer


Am 25.04.2016 um 13:16 schrieb Stefan Frei:


libapr1:amd64  1.5.1-3
openssl1.0.1k-3+deb8u4

2016-04-25 12:35 GMT+02:00 Mark Thomas :


On 25/04/2016 10:31, Stefan Frei wrote:


Hello

tomcat 8.0.33
tomcat-native-1.1.34-src
SMP Debian 3.16.7-ckt25-2
1.8.0_77

i am unable to compile the native libs, here is the error messages
from the make command:

libtool: link: CURRENT `-Wl,-z,relro' must be a nonnegative integer
libtool: link: `-Wl,-z,relro' is not valid version information
make[1]: *** [libtcnative-.la] Error 1
make: *** [all-recursive] Error 1

I followed the instructions described here:
https://tomcat.apache.org/native-doc/

how can i debug this?



What versions of APR and OpenSSL are you compiling against?

Mark


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Small problems compiling tomcat native

[Stefan Frei]

very sorry just solved it.


overlooked a line in configure

/root/tomcat-native-1.1.34-src/jni/native/build/get-version.sh:
Permission denied

Regards Stefan

2016-04-25 14:04 GMT+02:00 Rainer Jung :
> Can you provide the full configure command you use and the configure and
> make output as well as config.log? Do you have environment variables set,
> that influence the build (CC, CFLAGS, LDFLAGS or similar)?
>
> The "-Wl,-z,relro" should not directly come from our own tcnative scripts
> but using the make output (and configure output) we can double check.
>
> It could be, that those flags come from and APR or OpenSSL pkgconfig or .la
> file or similar, which we inspect when building tcnative to learn about the
> correct flags to link against OpenSSL and APR.
>
> You might run
>
> find PATH -exec grep relro \{\} \; -ls
>
> with PATH replaced by the tcnative build directory and APR and OpenSSL
> install directories respectively. There are indications that debian adds the
> relro flag when building the system openssl.
>
> Does you linker understand "-z relro"? You can check "man ld" and "ld
> --help".
>
> Regards,
>
> Rainer
>
>
> Am 25.04.2016 um 13:16 schrieb Stefan Frei:
>>
>> libapr1:amd64  1.5.1-3
>> openssl1.0.1k-3+deb8u4
>>
>> 2016-04-25 12:35 GMT+02:00 Mark Thomas :
>>>
>>> On 25/04/2016 10:31, Stefan Frei wrote:

 Hello

 tomcat 8.0.33
 tomcat-native-1.1.34-src
 SMP Debian 3.16.7-ckt25-2
 1.8.0_77

 i am unable to compile the native libs, here is the error messages
 from the make command:

 libtool: link: CURRENT `-Wl,-z,relro' must be a nonnegative integer
 libtool: link: `-Wl,-z,relro' is not valid version information
 make[1]: *** [libtcnative-.la] Error 1
 make: *** [all-recursive] Error 1

 I followed the instructions described here:
 https://tomcat.apache.org/native-doc/

 how can i debug this?
>>>
>>>
>>> What versions of APR and OpenSSL are you compiling against?
>>>
>>> Mark
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Small problems compiling tomcat native

[Rainer Jung]

Can you provide the full configure command you use and the configure and 
make output as well as config.log? Do you have environment variables 
set, that influence the build (CC, CFLAGS, LDFLAGS or similar)?


The "-Wl,-z,relro" should not directly come from our own tcnative 
scripts but using the make output (and configure output) we can double 
check.


It could be, that those flags come from and APR or OpenSSL pkgconfig or 
.la file or similar, which we inspect when building tcnative to learn 
about the correct flags to link against OpenSSL and APR.


You might run

find PATH -exec grep relro \{\} \; -ls

with PATH replaced by the tcnative build directory and APR and OpenSSL 
install directories respectively. There are indications that debian adds 
the relro flag when building the system openssl.


Does you linker understand "-z relro"? You can check "man ld" and "ld 
--help".


Regards,

Rainer

Am 25.04.2016 um 13:16 schrieb Stefan Frei:

libapr1:amd64  1.5.1-3
openssl1.0.1k-3+deb8u4

2016-04-25 12:35 GMT+02:00 Mark Thomas :

On 25/04/2016 10:31, Stefan Frei wrote:

Hello

tomcat 8.0.33
tomcat-native-1.1.34-src
SMP Debian 3.16.7-ckt25-2
1.8.0_77

i am unable to compile the native libs, here is the error messages
from the make command:

libtool: link: CURRENT `-Wl,-z,relro' must be a nonnegative integer
libtool: link: `-Wl,-z,relro' is not valid version information
make[1]: *** [libtcnative-.la] Error 1
make: *** [all-recursive] Error 1

I followed the instructions described here:
https://tomcat.apache.org/native-doc/

how can i debug this?


What versions of APR and OpenSSL are you compiling against?

Mark


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Small problems compiling tomcat native

[Stefan Frei]

libapr1:amd64  1.5.1-3
openssl1.0.1k-3+deb8u4

2016-04-25 12:35 GMT+02:00 Mark Thomas :
> On 25/04/2016 10:31, Stefan Frei wrote:
>> Hello
>>
>> tomcat 8.0.33
>> tomcat-native-1.1.34-src
>> SMP Debian 3.16.7-ckt25-2
>> 1.8.0_77
>>
>> i am unable to compile the native libs, here is the error messages
>> from the make command:
>>
>> libtool: link: CURRENT `-Wl,-z,relro' must be a nonnegative integer
>> libtool: link: `-Wl,-z,relro' is not valid version information
>> make[1]: *** [libtcnative-.la] Error 1
>> make: *** [all-recursive] Error 1
>>
>> I followed the instructions described here:
>> https://tomcat.apache.org/native-doc/
>>
>> how can i debug this?
>
> What versions of APR and OpenSSL are you compiling against?
>
> Mark
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Small problems compiling tomcat native

[Mark Thomas]

On 25/04/2016 10:31, Stefan Frei wrote:
> Hello
> 
> tomcat 8.0.33
> tomcat-native-1.1.34-src
> SMP Debian 3.16.7-ckt25-2
> 1.8.0_77
> 
> i am unable to compile the native libs, here is the error messages
> from the make command:
> 
> libtool: link: CURRENT `-Wl,-z,relro' must be a nonnegative integer
> libtool: link: `-Wl,-z,relro' is not valid version information
> make[1]: *** [libtcnative-.la] Error 1
> make: *** [all-recursive] Error 1
> 
> I followed the instructions described here:
> https://tomcat.apache.org/native-doc/
> 
> how can i debug this?

What versions of APR and OpenSSL are you compiling against?

Mark


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Small problems compiling tomcat native

[Stefan Frei]

Hello

tomcat 8.0.33
tomcat-native-1.1.34-src
SMP Debian 3.16.7-ckt25-2
1.8.0_77



i am unable to compile the native libs, here is the error messages
from the make command:

libtool: link: CURRENT `-Wl,-z,relro' must be a nonnegative integer
libtool: link: `-Wl,-z,relro' is not valid version information
make[1]: *** [libtcnative-.la] Error 1
make: *** [all-recursive] Error 1


I followed the instructions described here:
https://tomcat.apache.org/native-doc/



how can i debug this?


Best regards

Stefan

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org