Bug 658508 – net-vpn/openconnect-7.08-r1 with dev-libs/libressl-2.7.4 - openssl-esp.c:40:25: error: static declaration of HMAC_CTX_new follows non-static declaration

• Status: RESOLVED UPSTREAM
• Product: Gentoo Linux

[Description Toralf Förster 2018-06-19 16:27:32 UTC]

libtool: compile:  x86_64-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -DLOCALEDIR=\"/usr/share/locale\" -Wall -Wextra -Wno-missing-field-initializers -Wno-sign-compare -Wno-unused-parameter -Werror=pointer-to-int-cast -Wdeclaration-after-statement -Werror-implicit-function-declaration -Wformat-nonliteral -Wformat-security -Winit-self -Wmissing-declarations -Wmissing-include-dirs -Wnested-externs -Wpointer-arith -Wwrite-strings -I/usr/include/libxml2 -O2 -pipe -march=native -c openssl-esp.c  -fPIC -DPIC -o .libs/libopenconnect_la-openssl-esp.o
openssl-esp.c:40:25: error: static declaration of ‘HMAC_CTX_new’ follows non-static declaration
 static inline HMAC_CTX *HMAC_CTX_new(void)
                         ^~~~~~~~~~~~
In file included from /usr/include/openssl/ssl.h:149:0,

  -------------------------------------------------------------------

  This is an unstable amd64 chroot image at a tinderbox (==build bot)
  name: 17.0-desktop-plasma-systemd_libressl_20180617-101057

  -------------------------------------------------------------------

gcc-config -l:
 [1] x86_64-pc-linux-gnu-7.3.0 *

Available Python interpreters, in order of preference:
  [1]   python3.5
  [2]   python2.7 (fallback)
Available Ruby profiles:
  [1]   ruby23 *
java-config:
The following VMs are available for generation-2:
*)	IcedTea JDK 3.8.0 [icedtea-bin-8]
Available Java Virtual Machines:
  [1]   icedtea-bin-8  system-vm

emerge -qpv net-vpn/openconnect
[ebuild  N    ] net-vpn/openconnect-7.08-r1  USE="libressl nls -doc -gnutls -gssapi -java -libproxy -lz4 -smartcard -static-libs -stoken"

[Comment 1 Toralf Förster 2018-06-19 16:27:35 UTC]

Created attachment 536416 [details]
emerge-info.txt

[Comment 2 Toralf Förster 2018-06-19 16:27:38 UTC]

Created attachment 536418 [details]
emerge-history.txt

[Comment 3 Toralf Förster 2018-06-19 16:27:41 UTC]

Created attachment 536420 [details]
environment

[Comment 4 Toralf Förster 2018-06-19 16:27:43 UTC]

Created attachment 536422 [details]
etc.portage.tbz2

[Comment 5 Toralf Förster 2018-06-19 16:27:46 UTC]

Created attachment 536424 [details]
logs.tbz2

[Comment 6 Toralf Förster 2018-06-19 16:27:50 UTC]

Created attachment 536426 [details]
net-vpn:openconnect-7.08-r1:20180619-103623.log

[Comment 7 Toralf Förster 2018-06-19 16:27:54 UTC]

Created attachment 536428 [details]
temp.tbz2

[Comment 8 Philipp Ammann 2018-10-24 14:21:51 UTC]

Created attachment 552694 [details, diff]
compile fix for libressl 2.8

I managed to compile openconnect with libressl 2.8 using this patch. Note that this is applied on top of openconnect-7.08-libressl251.patch.

I've used 0x2070000fL for LIBRESSL_VERSION_NUMBER (as #define'd in the 2.7.0 release). It may or may not work with libressl 2.7.

[Comment 9 Mike Gilbert 2019-01-18 17:24:33 UTC]

Is this fixed in openconnect-8.02?

[Comment 10 Philipp Ammann 2019-01-28 17:06:34 UTC]

(In reply to Mike Gilbert from comment #9)
> Is this fixed in openconnect-8.02?

Unfortunately no. My patch still works, though I'm running in #675808.

[Comment 11 Mike Gilbert 2019-01-28 18:25:54 UTC]

Please send patches upstream.

[Comment 12 pagorman 2019-04-26 00:38:38 UTC]

Compiles normally with LibreSSL-2.9.1 and the stated version of openconnect.

[Comment 13 Mike Gilbert 2019-04-26 02:40:49 UTC]

That seems unlikely. You probably have gnutls enabled.