Created attachment 429468 [details] build.log Build fails without USE="ssl". Previous hostapd versions were building just fine. [ebuild U ] net-wireless/hostapd-2.5 [2.4-r2] USE="-crda -ipv6 -logwatch -netlink -sqlite -ssl -wps" -------- i686-pc-linux-gnu-gcc -Wl,-O1 -Wl,--as-needed -o hostapd_cli hostapd_cli.o ../src/common/wpa_ctrl.o ../src/utils/os_unix.o ../src/utils/eloop.o ../src/utils/common.o ../src/utils/wpa_debug.o ../src/utils/edit_simple.o -lrt ../src/eap_server/eap_server_pwd.o: In function `eap_pwd_process': eap_server_pwd.c:(.text+0x1ba6): undefined reference to `hash_nt_password_hash' collect2: error: ld returned 1 exit status Makefile:985: recipe for target 'hostapd' failed make: *** [hostapd] Error 1 --------
Created attachment 429470 [details] emerge --info
Here the same: # emerge --info Portage 2.2.26 (python 3.4.3-final-0, default/linux/x86/13.0, gcc-4.9.3, glibc-2.21-r2, 4.1.15-gentoo-r1 i686) ================================================================= System uname: Linux-4.1.15-gentoo-r1-i686-AMD_Duron-tm-_Processor-with-gentoo-2.2 KiB Mem: 900316 total, 481920 free KiB Swap: 262140 total, 262140 free Timestamp of repository gentoo: Thu, 07 Apr 2016 12:30:01 +0000 sh bash 4.3_p42-r1 ld GNU ld (Gentoo 2.25.1 p1.1) 2.25.1 distcc 3.2rc1 i686-pc-linux-gnu [disabled] app-shells/bash: 4.3_p42-r1::gentoo dev-lang/perl: 5.20.2::gentoo dev-lang/python: 2.7.10-r1::gentoo, 3.4.3-r1::gentoo dev-util/pkgconfig: 0.28-r2::gentoo sys-apps/baselayout: 2.2::gentoo sys-apps/openrc: 0.19.1::gentoo sys-apps/sandbox: 2.10-r1::gentoo sys-devel/autoconf: 2.69::gentoo sys-devel/automake: 1.14.1::gentoo, 1.15::gentoo sys-devel/binutils: 2.25.1-r1::gentoo sys-devel/gcc: 4.9.3::gentoo sys-devel/gcc-config: 1.7.3::gentoo sys-devel/libtool: 2.4.6::gentoo sys-devel/make: 4.1-r1::gentoo sys-kernel/linux-headers: 4.3::gentoo (virtual/os-headers) sys-libs/glibc: 2.21-r2::gentoo Repositories: gentoo location: /usr/portage sync-type: rsync sync-uri: rsync://rsync.gentoo.org/gentoo-portage priority: -1000 ACCEPT_KEYWORDS="x86" ACCEPT_LICENSE="* -@EULA" CBUILD="i686-pc-linux-gnu" CFLAGS="-O2 -march=i686 -pipe" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo" CXXFLAGS="-O2 -march=i686 -pipe" DISTDIR="/usr/portage/distfiles" FCFLAGS="-O2 -march=i686 -pipe" FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-O2 -march=i686 -pipe" GENTOO_MIRRORS="http://mirror.leaseweb.com/gentoo http://distfiles.gentoo.org http://www.ibiblio.org/pub/Linux/distributions/gentoo" LDFLAGS="-Wl,-O1 -Wl,--as-needed" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" USE="aac aacplus acl alsa berkdb bzip2 cli cracklib crypt cxx dri faad flac fortran gdbm gpm iconv icu modules mp3 nat-pmp ncurses nptl ogg openmp pam pcre readline seccomp session sqlite ssl tcpd threads transparent-proxy udev unicode upnp vorbis wavpack x86 xattr zlib" ABI_X86="32" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_4" RUBY_TARGETS="ruby20 ruby21" USERLAND="GNU" VIDEO_CARDS="fbdev glint intel mach64 mga nouveau nv r128 radeon savage sis tdfx trident vesa via vmware dummy v4l" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CC, CPPFLAGS, CTARGET, CXX, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, MAKEOPTS, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON
I can reproduce it on my own machine, but I have no idea on how to fix it. Just wondering, why do you wan't to disable SSL? (I'm thinking about making SSL mandatory, since you really should be using encryption on your access points anyway).
(In reply to Bjarke Istrup Pedersen from comment #3) > I can reproduce it on my own machine, but I have no idea on how to fix it. > > Just wondering, why do you wan't to disable SSL? (I'm thinking about making > SSL mandatory, since you really should be using encryption on your access > points anyway). Presumably this is blocking many from running an openssl-free system. hostapd already supports libressl and gnutls (see bug 567262 and bug 544046), but Gentoo only offers those on the wpa_supplicant side of the codebase for some reason.
It's a bug. It causes a build failure, it is as simple as that. If USE="-ssl" doesn't work, why have the USE flag in the first place?
Will look into the ticket soon. Have not read it yet.
"ssl" USE flag will be removed, while a choice between openssl, libressl and gnutls will be provided. I am working on this now, stay tuned.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3695b0a4d4b752e3401f679ecebfc6490aa2109b commit 3695b0a4d4b752e3401f679ecebfc6490aa2109b Author: Andrey Utkin <andrey_utkin@gentoo.org> AuthorDate: 2018-04-28 13:45:34 +0000 Commit: Andrey Utkin <andrey_utkin@gentoo.org> CommitDate: 2018-05-02 10:09:10 +0000 net-wireless/hostapd: drop defunct "ssl" USE flag, add "internal-tls" Since hostapd-2.5, USE=-ssl fails to build. Appears USE=-ssl was used to avoid openssl. Since libressl support was added in 2.6-r3 ebuild, there is an alternative way to avoid openssl now. This commit adds another alternative, to use internal TLSv1 implementation instead of openssl/libressl. It doesn't allow to build hostapd with all the features which are enabled with openssl, though. I don't anticipate user need for USE=-ssl to have a build which does not support any encryption at all. Of course I am open to such users' requests, but at last they have "savedconfig" option to help themselves. Acked-by: zerochaos@gentoo.org Bug: https://bugs.gentoo.org/578798 Package-Manager: Portage-2.3.31, Repoman-2.3.9 net-wireless/hostapd/hostapd-2.6-r4.ebuild | 31 ++++++++++++++++++++++-------- net-wireless/hostapd/metadata.xml | 1 + 2 files changed, 24 insertions(+), 8 deletions(-)
