Even when the ssl use flag is set, tcpdump-3.8.3-r3 is compiled without crypto support. (Although looking through the ebuild looks as though it should have been.) Reproducible: Always Steps to Reproduce: 1. USE=ssl emerge =net-analyzer/tcpdump-3.8.3-r3 2. tcpdump -E 'des-cbc:BARBAZ42' Actual Results: tcpdump: WARNING: crypto code not compiled in Expected Results: No warning and incoming ESP packets should have been decoded. On Debian stable this works. Portage 2.0.51.19 (default-linux/x86/2005.0, gcc-3.3.5-20050130, glibc-2.2.5-r2,glibc-2.3.4.20041102-r1, 2.6.8.1 i686) ================================================================= System uname: 2.6.8.1 i686 Intel(R) Pentium(R) 4 Mobile CPU 1.80GHz Gentoo Base System version 1.6.12 Python: dev-lang/python-2.2.3-r5,dev-lang/python-2.3.5 [2.3.5 (#1, May 2 2005, 14:15:23)] distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled] dev-lang/python: 2.2.3-r5, 2.3.5 sys-apps/sandbox: [Not Present] sys-devel/autoconf: 2.13, 2.59-r6 sys-devel/automake: 1.5, 1.6.3, 1.9.5, 1.8.5-r3, 1.4_p6, 1.7.9 sys-devel/binutils: 2.15.92.0.2-r10 sys-devel/libtool: 1.5.16 virtual/os-headers: 2.6.10 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CFLAGS="-march=pentium4 -O2 -pipe -fomit-frame-pointer -fstack-protector" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.1/share/config /usr/kde/3.2/share/config /usr/kde/3.3/env /usr/kde/3.3/share/config /usr/kde/3.3/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/lib/fax /usr/lib/mozilla/defaults/pref /usr/share/config /usr/share/texmf/dvipdfm/config/ /usr/share/texmf/dvips/config/ /usr/share/texmf/tex/generic/config/ /usr/share/texmf/tex/platex/config/ /usr/share/texmf/xdvi/ /var/qmail/control /var/spool/fax/etc" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d" CXXFLAGS="-march=pentium4 -O2 -pipe -fomit-frame-pointer -fstack-protector" DISTDIR="/usr/portage/distfiles" FEATURES="autoaddcvs autoconfig buildpkg candy ccache distlocks sandbox sfperms strict userpriv usersandbox" GENTOO_MIRRORS="http://ftp6.uni-erlangen.de/pub/mirrors/gentoo ftp://ftp6.uni-erlangen.de/pub/mirrors/gentoo ftp://ftp6.uni-muenster.de/pub/linux/distributions/gentoo ftp://ftp.ipv6.uni-muenster.de/pub/linux/distributions/gentoo" LINGUAS="de en fr" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/opt/ebuilds" SYNC="rsync://rsync.de.gentoo.org/gentoo-portage" USE="x86 X aac aalib acl activefilter adns alsa apm arts avi bash-completion bcmath berkdb bitmap-fonts bl bluetooth bonobo cdparanoia cdr chipcard chroot crypt cscope css cups curl dbus dga diet dio directfb divx4linux dvd dvdread eds emboss encode esd evo faad fam fbcon ffmpeg flac flash foomaticdb fortran gb gd gdbm ggi gif gimpprint gnome gpgme gpm gstreamer gtk gtk2 gtkhtml guile hbci hostap-noplx howl icc icq idled imagemagick imap imlib ipv6 jack java jpeg jpeg2k junit kde ldap libcaca libg++ libwww lirc live lzo mad maildir mikmod motif mozaccess-builtin mozcalendar mozdevelop mozilla mozirc mozsvg mozxmlterm mp3 mpeg mysql nas ncurses nls noplugin oav ofx ogg oggvorbis opengl oss pam pcmcia pdflib perl php plotutils png pnp postgres povray ppds python qt quicktime radeon rdesktop readline rtc samba sasl sdl session skey slang slp smartcard snmp sockets speex spell sqlite sse sse2 ssl stroke svg svga svgz tcltk tcpd tetex tga theora tiff truetype truetype-fonts type1-fonts usb v4l vim-with-x visualization vorbis wifi win32codecs xanim xface xine xml xml2 xmms xosd xpm xprint xrandr xv zeroconf zlib video_cards_radeon linguas_de linguas_en linguas_fr userland_GNU kernel_linux elibc_glibc" Unset: ASFLAGS, CBUILD, CTARGET, LANG, LC_ALL, LDFLAGS
Ok, here's a fix based on the solution mentioned in the debian changelog (Romain Francoise <rfrancoise@debian.org> Fri, 14 May 2004 22:14:08 +0200). Insert if use ssl; then sed -i -e 's/des_cbc_encrypt/DES_cbc_encrypt/' configure fi in tcpdump-3.8.3-r3.ebuild just before the call to econf in src_compile().
In CVS. Thanks for the bug.
