Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 675808

Summary: net-vpn/openconnect-8.02 : openssl-dtls.c:481:12: error: implicit declaration of function SSL_CIPHER_find
Product: Gentoo Linux Reporter: Toralf Förster <toralf>
Component: Current packagesAssignee: Mike Gilbert <floppym>
Status: RESOLVED OBSOLETE    
Severity: normal CC: steils, williamh
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---
Bug Depends on:    
Bug Blocks: 561854, 675722    
Attachments: emerge-info.txt
emerge-history.txt
environment
etc.portage.tbz2
logs.tbz2
net-vpn:openconnect-8.02:20190118-192947.log
temp.tbz2

Description Toralf Förster gentoo-dev 2019-01-18 20:22:44 UTC
libtool: compile:  x86_64-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -DLOCALEDIR=\"/usr/share/locale\" -Wall -Wextra -Wno-missing-field-initializers -Wno-sign-compare -Wno-unused-parameter -Werror=pointer-to-int-cast -Wdeclaration-after-statement -Werror-implicit-function-declaration -Wformat-nonliteral -Wformat-security -Winit-self -Wmissing-declarations -Wmissing-include-dirs -Wnested-externs -Wpointer-arith -Wwrite-strings -I/usr/include/libxml2 -O2 -pipe -march=native -c openssl-dtls.c  -fPIC -DPIC -o .libs/libopenconnect_la-openssl-dtls.o
openssl-dtls.c: In function ‘start_dtls_handshake’:
openssl-dtls.c:481:12: error: implicit declaration of function ‘SSL_CIPHER_find’; did you mean ‘sk_SSL_CIPHER_find’? [-Werror=implicit-function-declaration]
            SSL_CIPHER_find(dtls_ssl, cs),
            ^~~~~~~~~~~~~~~
            sk_SSL_CIPHER_find

  -------------------------------------------------------------------

  This is an unstable amd64 chroot image at a tinderbox (==build bot)
  name: 17.0_libressl_20190113-072420

  -------------------------------------------------------------------

gcc-config -l:
 [1] x86_64-pc-linux-gnu-7.3.1
 [2] x86_64-pc-linux-gnu-8.2.0 *

Available Python interpreters, in order of preference:
  [1]   python3.7
  [2]   python3.6
  [3]   python2.7 (fallback)
Available Ruby profiles:
  [1]   ruby24 (with Rubygems) *
  [2]   ruby25 (with Rubygems)
  [3]   ruby26 (with Rubygems)
Available Rust versions:
  [1]   rust-1.32.0
  [2]   rust-bin-1.32.0 *
java-config:
The following VMs are available for generation-2:


emerge -qpvO net-vpn/openconnect
[ebuild     U ] net-vpn/openconnect-8.02 [7.08-r1] USE="libressl nls -doc -gnutls -gssapi -libproxy -lz4 -smartcard -static-libs -stoken (-java%)"
Comment 1 Toralf Förster gentoo-dev 2019-01-18 20:22:47 UTC
Created attachment 562056 [details]
emerge-info.txt
Comment 2 Toralf Förster gentoo-dev 2019-01-18 20:22:50 UTC
Created attachment 562058 [details]
emerge-history.txt
Comment 3 Toralf Förster gentoo-dev 2019-01-18 20:22:53 UTC
Created attachment 562060 [details]
environment
Comment 4 Toralf Förster gentoo-dev 2019-01-18 20:22:56 UTC
Created attachment 562062 [details]
etc.portage.tbz2
Comment 5 Toralf Förster gentoo-dev 2019-01-18 20:22:58 UTC
Created attachment 562064 [details]
logs.tbz2
Comment 6 Toralf Förster gentoo-dev 2019-01-18 20:23:01 UTC
Created attachment 562066 [details]
net-vpn:openconnect-8.02:20190118-192947.log
Comment 7 Toralf Förster gentoo-dev 2019-01-18 20:23:04 UTC
Created attachment 562068 [details]
temp.tbz2
Comment 8 pagorman 2019-03-04 07:06:53 UTC
builds fine with gcc-8.3.0 and libressl-2.8.3
Comment 9 Stefan Strogin gentoo-dev 2019-03-05 14:51:12 UTC
It does not with USE="-gnutls libressl".

openssl-esp.c:40:25: error: static declaration of ‘HMAC_CTX_new’ follows non-static declaration
 static inline HMAC_CTX *HMAC_CTX_new(void)
                         ^~~~~~~~~~~~
In file included from /usr/include/openssl/ssl.h:149,
                 from openconnect-internal.h:45,
                 from openssl-esp.c:25:
/usr/include/openssl/hmac.h:86:11: note: previous declaration of ‘HMAC_CTX_new’ was here
 HMAC_CTX *HMAC_CTX_new(void);
           ^~~~~~~~~~~~
make[1]: *** [Makefile:1100: libopenconnect_la-openssl-esp.lo] Error 

If you build it with USE="libressl" it nevertheless builds with "gnutls", because of "+gnutls".
Comment 10 Stefan Strogin gentoo-dev 2019-03-05 14:52:36 UTC
P.S. LibreSSL 2.8.3, openconnect 8.02.
Comment 11 Mike Gilbert gentoo-dev 2019-08-01 14:10:38 UTC
(In reply to Stefan Strogin from comment #10)

How about openconnect-8.03?
Comment 12 Philipp Ammann 2019-08-03 15:29:17 UTC
I sent a patch for this along with another fix for LibreSSL upstream:

https://lists.infradead.org/pipermail/openconnect-devel/2019-August/005394.html
https://lists.infradead.org/pipermail/openconnect-devel/2019-August/005395.html
Comment 13 Stefan Strogin gentoo-dev 2019-08-16 01:58:02 UTC
(In reply to Philipp Ammann from comment #12)
> I sent a patch for this along with another fix for LibreSSL upstream:
> 
> https://lists.infradead.org/pipermail/openconnect-devel/2019-August/005394.
> html
> https://lists.infradead.org/pipermail/openconnect-devel/2019-August/005395.
> html

Works with 8.03, thanks.

However if I try to build openconnect-8.04 (not bumped yet) it fails with

openssl-dtls.c: In function ‘start_dtls_handshake’:
openssl-dtls.c:337:13: error: ‘DTLS1_2_VERSION’ undeclared (first use in this function); did you mean ‘TLS1_2_VERSION’?
  337 |   dtlsver = DTLS1_2_VERSION;
      |             ^~~~~~~~~~~~~~~
      |             TLS1_2_VERSION
Comment 14 Stefan Strogin gentoo-dev 2019-08-16 02:32:30 UTC
Unfortunately LibreSSL does not support DTLS v1.2. autoconf tries to check DTLS v1.2 support, and enables it wrongly with LibreSSL.
Comment 15 Mike Gilbert gentoo-dev 2019-09-25 16:10:20 UTC
openconnect-8.02 will be removed soon.