Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 525640 - net-analyzer/openvas-libraries-7-r1 seems to have issues with recent gnutls
Summary: net-analyzer/openvas-libraries-7-r1 seems to have issues with recent gnutls
Status: RESOLVED UPSTREAM
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Justin Lecher (RETIRED)
URL:
Whiteboard:
Keywords:
: 526230 526884 (view as bug list)
Depends on:
Blocks:
 
Reported: 2014-10-17 08:48 UTC by Ferry
Modified: 2015-02-14 14:20 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
my modified ebuild (openvas-libraries-8.0_beta3.ebuild,1.27 KB, text/plain)
2014-10-26 09:32 UTC, Silvio
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Ferry 2014-10-17 08:48:24 UTC
Emerge of openvas completed successfully. After that you need to update a lot of definition files and this is where I got stuck.

www ~ # openvasmd --rebuild -v --progress
Rebuilding NVT cache... failed.

www ~ # tail /var/log/openvas/openvasmd.log 
md   main:CRITICAL:2014-10-17 08h42.19 utc:29328: main: database must be initialised (with --update or --rebuild)
md   main:   INFO:2014-10-17 08h42.32 utc:29340:    OpenVAS Manager
md   main:   INFO:2014-10-17 08h42.35 utc:29341:    Set to connect to address 127.0.0.1 port 9391
md   main:   INFO:2014-10-17 08h42.35 utc:29341:    Updating NVT cache.
lib  serv:WARNING:2014-10-17 08h42.35 utc:29341: Failed to shake hands with peer: The TLS connection was non-properly terminated.
md   main:CRITICAL:2014-10-17 08h42.35 utc:29341: update_or_rebuild_nvt_cache: failed to connect to scanner
lib  serv:WARNING:2014-10-17 08h42.35 utc:29341:    Failed to gnutls_bye: GnuTLS internal error.


Reproducible: Always

Steps to Reproduce:
1. Install OpenVAS
2. Run through mandatory steps after that (openvas-check-setup and emerge info after building can both point out this process)
3. Notice failure of updating database


Expected Results:  
Database should update.

Couldn't find much on it except for http://comments.gmane.org/gmane.comp.security.openvas.users/6208

This thread ends with:

Abelardo Ricart | 26 Jun 12:15 2014
Re: Trouble connecting to scanner

I figured it out. OpenVAS doesn't like gnuTLS versions greater that 2.x

This should probably be documented.
Comment 1 Justin Lecher (RETIRED) gentoo-dev 2014-10-17 09:07:21 UTC
That's right. No solution yet.

Could you please report this upstream?
Comment 2 Justin Lecher (RETIRED) gentoo-dev 2014-10-17 09:12:02 UTC
+  17 Oct 2014; Justin Lecher <jlec@gentoo.org> openvas-libraries-4.0.5.ebuild,
+  openvas-libraries-6.0.0.ebuild, openvas-libraries-6.0.1.ebuild,
+  openvas-libraries-7.0.2.ebuild, openvas-libraries-7.0.4.ebuild,
+  openvas-libraries-7.0.4-r1.ebuild, openvas-libraries-8.0_beta2.ebuild:
+  Restrict gnutls version, so far no fix from upstream available, #525640
+
Comment 3 Massimo Balestra 2014-10-20 21:12:04 UTC
I saw that, probably for this problem, openvas has a restriction on gnutls-2*.

I also had this problem. The same shown in the description. And I solved masking the new versions of gnutls. But I did not need to go so far back. I went back to gnutls-3.0 and openvas worked.

I tell you this because now my emerge is stuck:

!!! Multiple package instances within a single package slot have been pulled
!!! into the dependency graph, resulting in a slot conflict:

net-libs/gnutls:0

  (net-libs/gnutls-3.3.9:0/0::gentoo, installed) pulled in by
    >=net-libs/gnutls-3.0.20:0 required by (media-video/vlc-2.1.5:0/5-7::gentoo, installed)
    ^^                ^^^^^^^^                                                                                                                                  

  (net-libs/gnutls-2.12.23-r6:0/0::gentoo, ebuild scheduled for merge) pulled in by
    =net-libs/gnutls-2* required by (net-analyzer/openvas-libraries-7.0.4-r1:0/0::gentoo, installed)
    ^                ^^                                                         

Is there a way to solve this upgrade problem?
Should I opne another bug for the installation of gnutls?
Thanks

here is my emerge --info.
Portage 2.2.14_rc1 (python 2.7.8-final-0, default/linux/amd64/13.0/desktop/kde, gcc-4.7.4, glibc-2.19-r1, 3.17.1-gentoo x86_64)
=================================================================
System uname: Linux-3.17.1-gentoo-x86_64-Intel-R-_Core-TM-_i7-4770_CPU_@_3.40GHz-with-gentoo-2.2
KiB Mem:     2050228 total,   1010600 free
KiB Swap:    4193276 total,   4193276 free
Timestamp of tree: Fri, 17 Oct 2014 13:30:01 +0000
ld ld di GNU (Gentoo 2.24 p1.4) 2.24
app-shells/bash:          4.2_p53
dev-java/java-config:     2.2.0
dev-lang/perl:            5.20.1-r1
dev-lang/python:          2.7.8, 3.3.5-r1, 3.4.2
dev-util/cmake:           3.0.2
dev-util/pkgconfig:       0.28-r2
sys-apps/baselayout:      2.2
sys-apps/openrc:          0.13.1
sys-apps/sandbox:         2.6-r1
sys-devel/autoconf:       2.69
sys-devel/automake:       1.13.4, 1.14.1
sys-devel/binutils:       2.24-r3
sys-devel/gcc:            4.7.4, 4.8.3
sys-devel/gcc-config:     1.8
sys-devel/libtool:        2.4.2-r1
sys-devel/make:           4.1
sys-kernel/linux-headers: 3.16 (virtual/os-headers)
sys-libs/glibc:           2.19-r1
Repositories: gentoo
ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="*"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O3 -pipe -mtune=native "
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-O3 -pipe -mtune=native "
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS="--autounmask=n --quiet-build=y"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms strict test-fail-continue unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://gentoo.llarian.net/ http://mirror.usu.edu/mirrors/gentoo/ ftp://gentoo.llarian.net/pub/gentoo http://gentoo.gossamerhost.com http://gentoo.osuosl.org/ http://mirror.iawnet.sandia.gov/gentoo/ ftp://mirror.iawnet.sandia.gov/pub/gentoo/ http://ftp.ucsb.edu/pub/mirrors/linux/gentoo/ http://gentoo.arcticnetwork.ca/ http://gentoo.mirrors.tera-byte.com/"
LANG="it_IT"
LC_ALL="it_IT.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY=""
USE="X a52 aac accessibility acl acpi alsa amd64 apache2 apm apng audacious audiofile auto-hinter bash-completion bashlogger big-tables branding bzip2 cairo cdda cdr chromedriver cleartype cli clucene clutter consolekit cracklib crypt css cups cxx dbus dconf declarative device-mapper dot dts dv dvd dvdr emboss enca encode evo exif extras faac fam ffmpeg firefox flac fluidsynth fontconfig fortran fpm ftp gd gdbm gdu gif gimp glamor glx gnome gnutls gpm graphviz gstreamer gtk gtk3 gtkstyle guile gzip handbook hardened hddtemp httpd hunspell iconv icu id3tag ieee1394 ipod ipv6 ithreads jadetex java joystick jpeg jpeg2k json kde kdrive kipi lcms libkms libnotify libwww live lm_sensors lua mad melt messages midi minizip mmx mng modules mozdom mp3 mp4 mpeg mplayer msn multilib mysql ncurses networking nls nptl offlinehelp ogg openal openexr opengl openmp optimization opus oss pam pango pcre pdf pdfimport perl phonon php pic pie plasma png policykit ppds pthreads pulseaudio python qt3support qt4 quicktime rar readline real rpc rtmp rtsp samba sasl scanner script scripts sdl semantic-desktop sensord server session sip smbsharemodes smtp sndfile snmp sockets spell sql sqlite sse sse2 ssl startup-notification strong-optimization subversion suid svg tcpd templates theora threads tiff timidity tk tls tools truetype tty-helpers udev udisks unicode unrar unzip upcall upnp upower usb useland_GNU utils v4l v4l2 vala vba video vim-syntax vnc voice vorbis vpx wav weather webm wifi win32codecs winbind wxwidgets wxwindows x264 xbase xcb xcomposite xfce xfcr4 xfwm4 xine xinerama xml xmlreader xmlwriter xorg xscreensaver xv xvfb xvid yahoo yv12 zip zlib" ABI_X86="64" ALSA_CARDS="intel8x0" APACHE2_MODULES="authn_core authz_core authz_host socache_shmcb slotmem_shm unixd dav auth_basic autoindex cgi cgid dir filter deflate mime mime_magic rewrite setenvif speling userdir usertrack version actions alias lbmethod_byrequests proxy_balancer proxy log_config logio" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="virtualbox evdev keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="it en_US en" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_3" RUBY_TARGETS="ruby19 ruby20 ruby21" USERLAND="GNU" VIDEO_CARDS="virtualbox" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
USE_PYTHON="2.7 3.3"
Unset:  CPPFLAGS, CTARGET, INSTALL_MASK, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, SYNC
Comment 4 Justin Lecher (RETIRED) gentoo-dev 2014-10-21 06:50:24 UTC
(In reply to Massimo Balestra from comment #3)
> I saw that, probably for this problem, openvas has a restriction on
> gnutls-2*.
> 
> I also had this problem. The same shown in the description. And I solved
> masking the new versions of gnutls. But I did not need to go so far back. I
> went back to gnutls-3.0 and openvas worked.
> 
> I tell you this because now my emerge is stuck:
> 
> !!! Multiple package instances within a single package slot have been pulled
> !!! into the dependency graph, resulting in a slot conflict:
> 
> net-libs/gnutls:0
> 
>   (net-libs/gnutls-3.3.9:0/0::gentoo, installed) pulled in by
>     >=net-libs/gnutls-3.0.20:0 required by
> (media-video/vlc-2.1.5:0/5-7::gentoo, installed)
>     ^^                ^^^^^^^^                                              
> 
> 
>   (net-libs/gnutls-2.12.23-r6:0/0::gentoo, ebuild scheduled for merge)
> pulled in by
>     =net-libs/gnutls-2* required by
> (net-analyzer/openvas-libraries-7.0.4-r1:0/0::gentoo, installed)
>     ^                ^^                                                     
> 
> 
> Is there a way to solve this upgrade problem?
> Should I opne another bug for the installation of gnutls?
> Thanks

we cannot do anything here except that Openvas upstream fixes this issue. I tested with earliest gnutls-3* version in the tree which is 3.2*, but it didn't work. The latest which works is 2.12*, so we need to stick with that.

In summary, it means you cannot have openvas and gnutls on one system.
Comment 5 Jeroen Roovers (RETIRED) gentoo-dev 2014-10-21 17:04:55 UTC
*** Bug 526230 has been marked as a duplicate of this bug. ***
Comment 6 Massimo Balestra 2014-10-22 01:47:51 UTC
Yes, with gnutls 3.2 it does not work but it works with gnutls 3.0.
I tried it, no problems.
It worked for me before you introduced the restiction to have gnutls 2*. I simply masked gnutls 3.3 3.2 and (probably, I don't remember exactly) 3.1.
We cannot have openvas and vlc in the same system but I tried to uninstall and asked to uninstall a lot of other packages and then others and then it wanted to uninstall some basic packages that I cannot remove.
Comment 7 Massimo Balestra 2014-10-22 01:51:52 UTC
Well, sorry for the prevous messages.
I had only to set "-gnutls" un the make.conf
I don't know why I set it before.
Thank you.
Comment 8 Justin Lecher (RETIRED) gentoo-dev 2014-10-25 07:11:48 UTC
Could anybody test openvas-8 with newer gnutls?
Comment 9 Silvio 2014-10-25 08:07:45 UTC
I've tried one week ago deleting the DEPEND of gnutls on the openvas-libraries ebuild and it failed.

Is there a new ebuild of today?
Comment 10 Justin Lecher (RETIRED) gentoo-dev 2014-10-25 08:13:00 UTC
(In reply to Silvio from comment #9)
> Is there a new ebuild of today?

I bumped to beta3 last week. Is that what you tested?
Comment 11 Silvio 2014-10-25 08:17:13 UTC
Yes, but modified by me. I've took off the limit on gnutls, in the beta abuild was there yet.
Comment 12 Silvio 2014-10-25 08:20:00 UTC
even now it is impossible to test without modifing your ebuild

=net-libs/gnutls-2*

this line has to be deleted to test, obviously.

However it didn't compile.
Comment 13 Justin Lecher (RETIRED) gentoo-dev 2014-10-25 17:49:09 UTC
(In reply to Silvio from comment #12)
> even now it is impossible to test without modifing your ebuild
> 
> =net-libs/gnutls-2*

I still only know that this version works, so if you like ot help, please modify the ebuild and tell us if it works

> 
> this line has to be deleted to test, obviously.
> 
> However it didn't compile.

Please file a bug with the problem.
Comment 14 Silvio 2014-10-26 09:30:46 UTC
(In reply to Justin Lecher from comment #13)
> (In reply to Silvio from comment #12)
> > even now it is impossible to test without modifing your ebuild
> > 
> > =net-libs/gnutls-2*
> 
> I still only know that this version works,

What do you mean with "it works"?
1) It works with gnutls-2*, I didn't try. I assume it works, but the problem is that many other packages (as filezilla) ask for gnutls-3*
2) It works with gnutls-3*. If so, why there is yet the limit?

> so if you like ot help, please
> modify the ebuild and tell us if it works

As I said, I've already done it last week.
However I did it also today.
It exits with the error I pasted below

> 
> > 
> > this line has to be deleted to test, obviously.
> > 
> > However it didn't compile.
> 
> Please file a bug with the problem.

ok, I'll do immediatly.




[ 97%] Building C object nasl/CMakeFiles/openvas_nasl_shared.dir/time.c.o
cd /var/tmp/portage/net-analyzer/openvas-libraries-8.0_beta3/work/openvas-libraries-8.0_beta3_build/nasl && /usr/lib64/ccache/bin/x86_64-pc-linux-gnu-gcc  -DHAVE_LIBKSBA -Dopenvas_nasl_shared_EXPORTS  -DNDEBUG -march=native -O2 -pipe -fomit-frame-pointer  -Wformat -Wformat-security -O2 -D_FORTIFY_SOURCE=2 -fstack-protector -Wl,-z,relro -Wl,-z,now -Wall -D_FILE_OFFSET_BITS=64 -DLARGEFILE_SOURCE=1 -fno-strict-aliasing -fPIC -I/var/tmp/portage/net-analyzer/openvas-libraries-8.0_beta3/work/openvas-libraries-8.0+beta3/nasl/../base -I/var/tmp/portage/net-analyzer/openvas-libraries-8.0_beta3/work/openvas-libraries-8.0+beta3/nasl/../misc -I/var/tmp/portage/net-analyzer/openvas-libraries-8.0_beta3/work/openvas-libraries-8.0+beta3/nasl/../include    -DOPENVAS_STATE_DIR=\"/var/lib/openvas\" -DOPENVASLIB_VERSION=\"8.0+beta3\" -DOPENVAS_SYSCONF_DIR=\"/etc/openvas\" -I/usr/include/glib-2.0 -I/usr/lib64/glib-2.0/include   -I/usr/include/gpgme   -I/usr/include -o CMakeFiles/openvas_nasl_shared.dir/time.c.o -c /var/tmp/portage/net-analyzer/openvas-libraries-8.0_beta3/work/openvas-libraries-8.0+beta3/nasl/time.c
<command-line>:0:0: warning: "_FORTIFY_SOURCE" redefined [enabled by default]
<built-in>:0:0: note: this is the location of the previous definition
<command-line>:0:0: warning: "_FORTIFY_SOURCE" redefined [enabled by default]
<built-in>:0:0: note: this is the location of the previous definition
<command-line>:0:0: warning: "_FORTIFY_SOURCE" redefined [enabled by default]
<built-in>:0:0: note: this is the location of the previous definition
<command-line>:0:0: warning: "_FORTIFY_SOURCE" redefined [enabled by default]
<built-in>:0:0: note: this is the location of the previous definition
<command-line>:0:0: warning: "_FORTIFY_SOURCE" redefined [enabled by default]
<built-in>:0:0: note: this is the location of the previous definition
<command-line>:0:0: warning: "_FORTIFY_SOURCE" redefined [enabled by default]
<built-in>:0:0: note: this is the location of the previous definition
Linking C shared library libopenvas_nasl.so
cd /var/tmp/portage/net-analyzer/openvas-libraries-8.0_beta3/work/openvas-libraries-8.0_beta3_build/nasl && /usr/bin/cmake -E cmake_link_script CMakeFiles/openvas_nasl_shared.dir/link.txt --verbose=1
/usr/lib64/ccache/bin/x86_64-pc-linux-gnu-gcc  -fPIC -march=native -O2 -pipe -fomit-frame-pointer  -Wformat -Wformat-security -O2 -D_FORTIFY_SOURCE=2 -fstack-protector -Wl,-z,relro -Wl,-z,now -Wall -D_FILE_OFFSET_BITS=64 -DLARGEFILE_SOURCE=1 -fno-strict-aliasing  -Wl,-O1 -Wl,--as-needed -shared -Wl,-soname,libopenvas_nasl.so.8 -o libopenvas_nasl.so.8.0+beta3 CMakeFiles/openvas_nasl_shared.dir/smb_interface_stub.c.o CMakeFiles/openvas_nasl_shared.dir/wmi_interface_stub.c.o CMakeFiles/openvas_nasl_shared.dir/arc4.c.o CMakeFiles/openvas_nasl_shared.dir/capture_packet.c.o CMakeFiles/openvas_nasl_shared.dir/charcnv.c.o CMakeFiles/openvas_nasl_shared.dir/exec.c.o CMakeFiles/openvas_nasl_shared.dir/genrand.c.o CMakeFiles/openvas_nasl_shared.dir/hmacmd5.c.o CMakeFiles/openvas_nasl_shared.dir/iconv.c.o CMakeFiles/openvas_nasl_shared.dir/lint.c.o CMakeFiles/openvas_nasl_shared.dir/md4.c.o CMakeFiles/openvas_nasl_shared.dir/md5.c.o CMakeFiles/openvas_nasl_shared.dir/nasl.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_builtin_find_service.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_builtin_openvas_tcp_scanner.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_builtin_synscan.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_builtin_nmap.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_cmd_exec.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_crypto2.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_ssh.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_cert.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_crypto.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_debug.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_func.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_grammar.tab.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_host.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_http.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_init.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_lex_ctxt.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_misc_funcs.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_scanner_glue.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_packet_forgery.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_packet_forgery_v6.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_signature.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_smb.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_socket.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_text_utils.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_tree.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_var.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_wmi.c.o CMakeFiles/openvas_nasl_shared.dir/nasl_isotime.c.o CMakeFiles/openvas_nasl_shared.dir/ntlmssp.c.o CMakeFiles/openvas_nasl_shared.dir/strutils.c.o CMakeFiles/openvas_nasl_shared.dir/smb_crypt.c.o CMakeFiles/openvas_nasl_shared.dir/smb_crypt2.c.o CMakeFiles/openvas_nasl_shared.dir/smb_signing.c.o CMakeFiles/openvas_nasl_shared.dir/time.c.o  -L../base  -L../misc ../base/libopenvas_base.so.8.0+beta3 ../misc/libopenvas_misc.so.8.0+beta3 ../omp/libopenvas_omp.so.8.0+beta3 -lglib-2.0 -L/usr/lib64 -lgpgme -lassuan -lgpg-error -lgnutls -L/usr/lib64 -Wl,-rpath,/usr/lib64 -lpcap -lm -lssh -L/usr/lib64 -lksba -lgpg-error ../misc/libopenvas_misc.so.8.0+beta3 ../base/libopenvas_base.so.8.0+beta3 -L/usr/lib64 -lgpgme -lassuan -lgpg-error -lgio-2.0 -lgobject-2.0 -lglib-2.0 -lz -L/usr/lib64 -Wl,-rpath,/usr/lib64 -lpcap -luuid -lgnutls -lgcrypt -lgpg-error -lldap -llber -lhiredis -lglib-2.0 -lssh -Wl,-rpath,../base:../misc:/var/tmp/portage/net-analyzer/openvas-libraries-8.0_beta3/work/openvas-libraries-8.0_beta3_build/base:/var/tmp/portage/net-analyzer/openvas-libraries-8.0_beta3/work/openvas-libraries-8.0_beta3_build/misc:/var/tmp/portage/net-analyzer/openvas-libraries-8.0_beta3/work/openvas-libraries-8.0_beta3_build/omp: 
cd /var/tmp/portage/net-analyzer/openvas-libraries-8.0_beta3/work/openvas-libraries-8.0_beta3_build/nasl && /usr/bin/cmake -E cmake_symlink_library libopenvas_nasl.so.8.0+beta3 libopenvas_nasl.so.8 libopenvas_nasl.so
make[2]: Leaving directory '/var/tmp/portage/net-analyzer/openvas-libraries-8.0_beta3/work/openvas-libraries-8.0_beta3_build'
/usr/bin/cmake -E cmake_progress_report /var/tmp/portage/net-analyzer/openvas-libraries-8.0_beta3/work/openvas-libraries-8.0_beta3_build/CMakeFiles  39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80
[ 97%] Built target openvas_nasl_shared
make[1]: Leaving directory '/var/tmp/portage/net-analyzer/openvas-libraries-8.0_beta3/work/openvas-libraries-8.0_beta3_build'
Makefile:147: recipe for target 'all' failed
make: *** [all] Error 2
 * ERROR: net-analyzer/openvas-libraries-8.0_beta3::manual failed (compile phase):
 *   emake failed
 * 
 * If you need support, post the output of `emerge --info '=net-analyzer/openvas-libraries-8.0_beta3::manual'`,
 * the complete build log and the output of `emerge -pqv '=net-analyzer/openvas-libraries-8.0_beta3::manual'`.
 * The complete build log is located at '/var/tmp/portage/net-analyzer/openvas-libraries-8.0_beta3/temp/build.log'.
 * The ebuild environment file is located at '/var/tmp/portage/net-analyzer/openvas-libraries-8.0_beta3/temp/environment'.
 * Working directory: '/var/tmp/portage/net-analyzer/openvas-libraries-8.0_beta3/work/openvas-libraries-8.0_beta3_build'
 * S: '/var/tmp/portage/net-analyzer/openvas-libraries-8.0_beta3/work/openvas-libraries-8.0+beta3'
Comment 15 Silvio 2014-10-26 09:32:12 UTC
Created attachment 387424 [details]
my modified ebuild
Comment 16 Silvio 2014-10-26 09:37:27 UTC
Opened new bug as you asked:

#526884
Comment 17 Silvio 2014-10-26 09:37:49 UTC
bug #526884
Comment 18 Alon Bar-Lev (RETIRED) gentoo-dev 2014-11-23 23:33:56 UTC
I would like to stabilize gnutls-3.3, any chance upstream has a solution?
Comment 19 Justin Lecher (RETIRED) gentoo-dev 2014-11-24 07:37:26 UTC
(In reply to Alon Bar-Lev from comment #18)
> I would like to stabilize gnutls-3.3, any chance upstream has a solution?

So far not. Anybody needs to report this to upstream properly.
Comment 20 Ferry 2014-12-01 13:14:25 UTC
There is an upstream bug:

http://wald.intevation.org/tracker/index.php?func=detail&aid=6572&group_id=29&atid=220

Unfortunately I don't think I'm the first to report it and they don't seem to really use the bug tracker. From what I got it sends a message to their mailing list and they will not actually update the bug tracker.

I've seen what look like related complaints on gnutls version from May this year or something. My guess is they're aware of this for quite some time.
Comment 21 Ferry 2014-12-01 13:17:46 UTC
Mailing list message shows in the archives:
http://lists.wald.intevation.org/pipermail/openvas-devel/2014-October/thread.html

0 responses so far.
Comment 22 Nick Bowler 2014-12-02 02:51:39 UTC
(In reply to Alon Bar-Lev from comment #18)
> I would like to stabilize gnutls-3.3, any chance upstream has a solution?

Since openvas has no stable versions, this should not block gnutls stabilization.
Comment 23 Silvio 2014-12-02 06:45:06 UTC
Is it possibile to slot gnutls?
Comment 24 Alon Bar-Lev (RETIRED) gentoo-dev 2014-12-02 07:34:51 UTC
(In reply to Silvio from comment #23)
> Is it possibile to slot gnutls?

there should not be such need, as all packages with tree are working with newer gnutls and it should be drop in replacement. we may depend on explicit version of gnutls for this package.
Comment 25 Justin Lecher (RETIRED) gentoo-dev 2015-02-14 14:18:23 UTC
We fixed the gnutls version to 2. Closing for now. Upstream is informed.
Comment 26 Justin Lecher (RETIRED) gentoo-dev 2015-02-14 14:20:08 UTC
*** Bug 526884 has been marked as a duplicate of this bug. ***