sslwrap-2.0.6 fails with the following error messsage when compiling: s_server.c: In function 'main': s_server.c:467: error: 'SSL_OP_NON_EXPORT_FIRST' undeclared (first use in this function) s_server.c:467: error: (Each undeclared identifier is reported only once s_server.c:467: error: for each function it appears in.) s_server.c:469: warning: assignment from incompatible pointer type make: *** [all] Error 1 !!! ERROR: net-misc/sslwrap-2.0.6 failed. Call stack: ebuild.sh, line 1539: Called dyn_compile ebuild.sh, line 939: Called src_compile ebuild.sh, line 609: Called die # emerge --info Portage 2.1-r2 (default-linux/x86/2006.0, gcc-4.1.1, glibc-2.4-r3, 2.6.17-gentoo-r7 i686) ================================================================= System uname: 2.6.17-gentoo-r7 i686 Pentium III (Coppermine) Gentoo Base System version 1.12.4 ccache version 2.2 [disabled] app-admin/eselect-compiler: [Not Present] dev-lang/python: 2.3.5-r2, 2.4.3-r1 dev-python/pycrypto: 2.0.1-r5 dev-util/ccache: 2.2 dev-util/confcache: [Not Present] sys-apps/sandbox: 1.2.17 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2 sys-devel/binutils: 2.16.1-r3 sys-devel/gcc-config: 1.3.13-r3 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.11-r5 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=pentium3 -O3 -pipe" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/NX/etc /usr/NX/home /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/lib/mozilla/defaults/pref /usr/share/X11/xkb /usr/share/config /var/bind" CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/revdep-rebuild /etc/terminfo" CXXFLAGS="-march=pentium3 -O3 -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig distlocks metadata-transfer sandbox sfperms strict" GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo" LINGUAS="en_US" PKGDIR="/usr/portage/packages" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" SYNC="rsync://rsync.namerica.gentoo.org/gentoo-portage" USE="x86 7zip X a52 aac aalib acl acpi activefilter aim applet asf audiofile bash-completion bindist bitmap-fonts bittorrent bonobo bzip2 cairo calendar cdda cddb cdf cdio cdparanoia cdr cdrom chipcard chipcard2 chroot commercial cpudetection crypt cscope css cups curl curlwrappers cvs dbi dbus dcraw devmap dga dhcp dillo dio disablexmb dmi dpms dri dts dv dvb dvd dvdr dvdread dynamic ecc edl eds emoticon encode epson erandom escreen ethereal evo evolution exif exo extensions extrafilters fam fame fat ffmpeg firefox flac flash flatfile fmod font-server foomaticdb fpx ftp gaim gatos gcj gd ggi gif gimp gimpprint gkrellm glade glibc-compat20 glibc-omitfp gmp gnokii gnome gnome-print gnomedb gnustep gnutls gphoto2 gpm grammar gs gtk gtk2 gtkhtml guile hal hbci hdf hdf5 hpn httpd hyperwave-api i8x0 iconv icq icu id3 idea idn ieee1394 ifp imagemagick imap imlib imlib2 immqt-bc innodb jabber java javascript jbig jcs jfs jpeg jpeg2k kde kdeenablefinal kdepim lcms lesstif libcaca libgda libsexy linuxthreads-tls live logrotate logwatch lpr ltsp lzo lzw mad maildir matroska mbox mcal mcve md5sum mdb memlimit mew mhash mime mimencode ming mixer mjpeg mmx mmxext mng mono mozcalendar mozilla moznocompose moznoirc moznomail mozsvg mp3 mp4 mp4live mpeg mpeg2 mpi mppe-mppc msession msn multiuser musepack musicbrainz na_dd nautilus ncurses network new-login nfs noaudio nptl nptlonly nsplugin ntlm nxclient objc offensive office ofx ogg oggvorbis openal opendoc opengl openssl opensslcrypt opera oscar pam panel-plugin parse-clocks passfile pcntl pda pdf perl physfs pic png ppds prelude print ps pvm python qemu-fast qt qt-static qt3 qt4 quicktime quotes rar rc5 rdesktop readline real reiser4 reiserfs rss rtc rtsp samba sametime savedconfig scanner server sftp sftplogging sguil shared sharedmem silc silverxp skey slang slp smime sms sndfile soap sockets sox speedo spell sse sse2 ssl stream subp subtitles subversion svg svga symlink sysfs syslog sysvipc tcltk tcpd tga theora thesaurus threads thumbnail thunar-vfs tiff tk tokenizer transcode truetype truetype-fonts type1 udev unicode unzip upnp usb uudeview v4l v4l2 vcd vcdimager vfat vhosts vidix vim vim-pager vim-with-x vlm vnc vorbis webdav widescreen win32codecs wmf wordperfect wxwindows xanim xbase xcomposite xfs xft xine xinetd xml xml2 xmlreader xmlrpc xorg xpm xprint xscreensaver xv xvid xvmc yahoo yv12 zip zlib elibc_glibc input_devices_keyboard input_devices_mouse input_devices_vmmouse kernel_linux linguas_en_US userland_GNU video_cards_vmware video_cards_via video_cards_apm video_cards_savage video_cards_fbdev video_cards_glint video_cards_vesa video_cards_v4l" Unset: CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, MAKEOPTS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY
Compile failures are not security bugs.
SSL_OP_NON_EXPORT_FIRST is broken according to changelog from www.openssl.org: *) New option SSL_OP_CIPHER_SERVER_PREFERENCE allows the server to override the clients preferred ciphersuites and rather use its own preferences. Should help to work around M$ SGC (Server Gated Cryptography) bug in Internet Explorer by ensuring unchanged hash method during stepup (Also replaces the broken/deactivated SSL_OP_NON_EXPORT_FIRST option.) [Lutz Jaenicke] So SSL_OP_NON_EXPORT_FIRST in s_server.c should be replaced with SSL_OP_CIPHER_SERVER_PREFERENCE .Adding something like this add the end of src_unpack would do: " sed -i \ -e "s/SSL_OP_NON_EXPORT_FIRST/SSL_OP_CIPHER_SERVER_PREFERENCE/g" \ s_server.c"
Thanks, fixed in CVS. Track keywording requests on bug #169464
