Bug 97471 – net-analyzer/tcpdump-3.8.3-r3 compiled without crypto support

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Henryk Plötz 2005-06-30 03:29:06 UTC]

Even when the ssl use flag is set, tcpdump-3.8.3-r3 is compiled without crypto
support. (Although looking through the ebuild looks as though it should have been.)

Reproducible: Always
Steps to Reproduce:
1. USE=ssl emerge =net-analyzer/tcpdump-3.8.3-r3
2. tcpdump -E 'des-cbc:BARBAZ42'

Actual Results:  
tcpdump: WARNING: crypto code not compiled in


Expected Results:  
No warning and incoming ESP packets should have been decoded.

On Debian stable this works.

Portage 2.0.51.19 (default-linux/x86/2005.0, gcc-3.3.5-20050130,
glibc-2.2.5-r2,glibc-2.3.4.20041102-r1, 2.6.8.1 i686)
=================================================================
System uname: 2.6.8.1 i686 Intel(R) Pentium(R) 4 Mobile CPU 1.80GHz
Gentoo Base System version 1.6.12
Python:              dev-lang/python-2.2.3-r5,dev-lang/python-2.3.5 [2.3.5 (#1,
May  2 2005, 14:15:23)]
distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
dev-lang/python:     2.2.3-r5, 2.3.5
sys-apps/sandbox:    [Not Present]
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.5, 1.6.3, 1.9.5, 1.8.5-r3, 1.4_p6, 1.7.9
sys-devel/binutils:  2.15.92.0.2-r10
sys-devel/libtool:   1.5.16
virtual/os-headers:  2.6.10
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CFLAGS="-march=pentium4 -O2 -pipe -fomit-frame-pointer -fstack-protector"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.1/share/config
/usr/kde/3.2/share/config /usr/kde/3.3/env /usr/kde/3.3/share/config
/usr/kde/3.3/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/lib/fax
/usr/lib/mozilla/defaults/pref /usr/share/config
/usr/share/texmf/dvipdfm/config/ /usr/share/texmf/dvips/config/
/usr/share/texmf/tex/generic/config/ /usr/share/texmf/tex/platex/config/
/usr/share/texmf/xdvi/ /var/qmail/control /var/spool/fax/etc"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-march=pentium4 -O2 -pipe -fomit-frame-pointer -fstack-protector"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs autoconfig buildpkg candy ccache distlocks sandbox sfperms
strict userpriv usersandbox"
GENTOO_MIRRORS="http://ftp6.uni-erlangen.de/pub/mirrors/gentoo
ftp://ftp6.uni-erlangen.de/pub/mirrors/gentoo
ftp://ftp6.uni-muenster.de/pub/linux/distributions/gentoo
ftp://ftp.ipv6.uni-muenster.de/pub/linux/distributions/gentoo"
LINGUAS="de en fr"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/opt/ebuilds"
SYNC="rsync://rsync.de.gentoo.org/gentoo-portage"
USE="x86 X aac aalib acl activefilter adns alsa apm arts avi bash-completion
bcmath berkdb bitmap-fonts bl bluetooth bonobo cdparanoia cdr chipcard chroot
crypt cscope css cups curl dbus dga diet dio directfb divx4linux dvd dvdread eds
emboss encode esd evo faad fam fbcon ffmpeg flac flash foomaticdb fortran gb gd
gdbm ggi gif gimpprint gnome gpgme gpm gstreamer gtk gtk2 gtkhtml guile hbci
hostap-noplx howl icc icq idled imagemagick imap imlib ipv6 jack java jpeg
jpeg2k junit kde ldap libcaca libg++ libwww lirc live lzo mad maildir mikmod
motif mozaccess-builtin mozcalendar mozdevelop mozilla mozirc mozsvg mozxmlterm
mp3 mpeg mysql nas ncurses nls noplugin oav ofx ogg oggvorbis opengl oss pam
pcmcia pdflib perl php plotutils png pnp postgres povray ppds python qt
quicktime radeon rdesktop readline rtc samba sasl sdl session skey slang slp
smartcard snmp sockets speex spell sqlite sse sse2 ssl stroke svg svga svgz
tcltk tcpd tetex tga theora tiff truetype truetype-fonts type1-fonts usb v4l
vim-with-x visualization vorbis wifi win32codecs xanim xface xine xml xml2 xmms
xosd xpm xprint xrandr xv zeroconf zlib video_cards_radeon linguas_de linguas_en
linguas_fr userland_GNU kernel_linux elibc_glibc"
Unset:  ASFLAGS, CBUILD, CTARGET, LANG, LC_ALL, LDFLAGS

[Comment 1 Henryk Plötz 2005-06-30 04:29:52 UTC]

Ok, here's a fix based on the solution mentioned in the debian changelog (Romain
Francoise <[e-mail]> Fri, 14 May 2004 22:14:08 +0200). Insert

        if use ssl; then                                                       
                                                                               
                                     
            sed -i -e 's/des_cbc_encrypt/DES_cbc_encrypt/' configure           
                                                                               
                                     
        fi                                                                     
                                                                               
                                     

in tcpdump-3.8.3-r3.ebuild just before the call to econf in src_compile().

[Comment 2 Aaron Walker (RETIRED) 2005-06-30 07:13:59 UTC]

In CVS.  Thanks for the bug.