openca / libpki Goto Github PK
View Code? Open in Web Editor NEWEasy-to-use high-level library for PKI-enabled applications
License: Other
libpki's People
Contributors
Stargazers
Watchers
Forkers
a157634 brenhilt vtsingaras gema-arta dago xsls digiverse vexofp connlan ty1970s whycoding126 crisvp akhmatov-s sighttviewliu hajikhorasani bikram990 mrbaseman bartzjegr opencrypto roboauto crynsane mattbodholdt harveymei kmosolov mjwaxios ndruba edwardt shea690901 maxi322 ddcclibpki's Issues
Add support for OQS 0.8.0
Provide support for the new version of OQS:
- Update the set of OIDs for Falcon512, Falcon1024
- Update the set of OIDs for Explicit Composite
- Validate changes in the OQS PMETH/AMETH for updates
libpki wrong library installation folder on Debian-based
Configuring libpki on a 14.04 64bit machine results in selecting /usr/lib64/ as the lib install directory, instead of the more appropriate /usr/lib/x86_64-linux-gnu (at least on Debian and Ubuntu).
poi-tool does not select the configured slot
It seems that poi-tool ignores the slot number that is configured in the passed hsm configuration file.
libpki 0.9.2: Building rpm fails on RHEL 9
Building rpm fails on RHEL 9.
Like:
$ ./configure
$ make rpm
...
In file included from ../libpki/openssl/data_st.h:24,
from ../libpki/crypto.h:12,
from ../libpki/pki.h:311,
from asn1_req.c:9:
asn1_req.c:81:29: error: conflicting types for 'CERT_IDENTIFIER_dup'; have 'CERT_IDENTIFIER *(const CERT_IDENTIFIER *)' {aka 'struct CertIdentifier_st *(const struct CertIdentifier_st *)'}
81 | IMPLEMENT_ASN1_DUP_FUNCTION(CERT_IDENTIFIER)
| ^~~~~~~~~~~~~~~
compilation terminated due to -Wfatal-errors.
Add Support for Public-Key Encryption Functions
Add support for encrypting data under a public key. This functionality is available only on schemes that support encryption, such as RSA.
Introp C#.Net
Greetings,
Can you please advice if I can get C# Introp wrapper for this library?
Many thanks
library naming
After building on the server from sources I have libraries
$ ls -1 /usr/lib64/libpki*
/usr/lib64/libpki.a
/usr/lib64/libpki.la
/usr/lib64/libpki.so
/usr/lib64/libpki.so.89
/usr/lib64/libpki.so.89.89.1
.so.89.89.1 - naming error in installation code?
libpki 0.9.2 fails to build with OpenSSL 3.0.1
libpki 0.9.2 fails to build with OpenSSL 3.0.1 on RHEL 9.
make says:
openssl_hsm_pkey.c: In function ‘_pki_rsakey_new’:
openssl_hsm_pkey.c:78:5: error: ‘RSA_new’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
78 | if ((rsa = RSA_new()) == NULL) {
| ^~
compilation terminated due to -Wfatal-errors.
see https://www.openssl.org/docs/man3.0/man7/migration_guide.html#Deprecated-low-level-object-creation
sys/socket.h is not included on FreeBSD
Hello. I'm trying to run libpki and ocspd on FreeBSD (and adding the software to portstree)
Build fails with errors:
../../libpki/net/sock.h:41:25: error: use of undeclared identifier 'SOCK_STREAM'
PKI_NET_SOCK_STREAM = SOCK_STREAM,
The cause is <sys/socket.h> is not included from src/libpki/net/sock.h
I can't understand the logic behind this code:
#ifdef HAVE_SYS_SOCKET_H
# include <sys/select.h>
#else
# include <sys/types.h>
# include <sys/socket.h>
#endif
Why aren't we including <sys/socket.h> when HAVE_SYS_SOCKET_H is defined?
It works on Linux because <sys/socket.h> is included in <netinet/in.h>. On FreeBSD it should be included explicitly.
The build works for me when I move # include <sys/socket.h> above "else", but I'm not sure if it's the right way to make it work on all platforms.
Could someone give some insight on the problem?
memory allocation error - tcp close wait - running out of filedescriptors
Hi,
On CentOS 7 with libpki 0.89 and openca-ocspd version: 3.1.2.
For every CRL refresh I get these. I suspect it's related to https sources of CRL.
ocspd[13743]: [ssl.c:112] Memory Allocation Error
This in turn probably gives a lot of these which eventually means that ocspd runs out of file descriptors:
ocspd 13743 nobody 832u IPv4 90332499 0t0 TCP x.x.x.x:60574->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 834u IPv4 90341221 0t0 TCP x.x.x.x:60598->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 836u IPv4 90349575 0t0 TCP x.x.x.x:60622->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 838u IPv4 90357809 0t0 TCP x.x.x.x:60646->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 840u IPv4 90366127 0t0 TCP x.x.x.x:60670->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 842u IPv4 90374342 0t0 TCP x.x.x.x:60694->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 844u IPv4 90383929 0t0 TCP x.x.x.x:60718->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 846u IPv4 90392219 0t0 TCP x.x.x.x:60742->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 848u IPv4 90400606 0t0 TCP x.x.x.x:60766->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 850u IPv4 90408839 0t0 TCP x.x.x.x:60790->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 852u IPv4 90417266 0t0 TCP x.x.x.x:60814->y.y.y.y:8140 (CLOSE_WAIT)
remove finger from contrib/libpki.spec.orig
Recent OSes (such as RHEL 9) don't have finger command.
Please remove finger command from contrib/libpki.spec.orig.
Feature request. Define dighest algorithm at the Virtual Host level
Hello.
At the moment it is possible to configure dighest algorithm in the ocspd.xml. But this value is applied globally.
But in case if I want to have a mixture of sha1 and sha2 ocsp servers, I should have 2 separate instances.
My proposal is to configure dighest algorithm per virtual host.
Best regards.
Fix Includes Issues
The current include structure does not work.
Add Support for Post-Quantum Algorithms
Add support for post-quantum algorithms in LibPKI by leveraging the OQS library.
Add support for Composite Cryptography
Composite cryptography allows for using multiple keys together for both authentication (PubKey Sigs) and encryption (KEMs).
Port LibPKI to OpenSSL 3.x
Add support for the OpenSSL 3.x branch.
Issue compiling in Ubuntu Docker container
Issue compiling in Docker container
See this automated build log: https://hub.docker.com/r/mattbodholdt/openca-ocspd/builds/byd5yjuczumcddx82j86eql
Installs successfully using this commit: 320e805
Failure is:
Making all in openssl
make[3]: Entering directory '/libpki-master/src/drivers/openssl'
/bin/bash ../../../libtool --tag=CC --mode=compile gcc -I. -I../../../src/libpki -I../.. -I/usr/include -D__LIB_BUILD__ -I/usr/include -g -O2 -fstack-check -maccumulate-outgoing-args -Werror -Wfatal-errors -Wunused-variable -I/usr/include/libxml2 -DLINUX -g -O2 -fstack-check -maccumulate-outgoing-args -Werror -Wfatal-errors -MT libpki_token_openssl_la-openssl_hsm.lo -MD -MP -MF .deps/libpki_token_openssl_la-openssl_hsm.Tpo -c -o libpki_token_openssl_la-openssl_hsm.lo `test -f 'openssl_hsm.c' || echo './'`openssl_hsm.c
libtool: compile: gcc -I. -I../../../src/libpki -I../.. -I/usr/include -D__LIB_BUILD__ -I/usr/include -g -O2 -fstack-check -maccumulate-outgoing-args -Werror -Wfatal-errors -Wunused-variable -I/usr/include/libxml2 -DLINUX -g -O2 -fstack-check -maccumulate-outgoing-args -Werror -Wfatal-errors -MT libpki_token_openssl_la-openssl_hsm.lo -MD -MP -MF .deps/libpki_token_openssl_la-openssl_hsm.Tpo -c openssl_hsm.c -fPIC -DPIC -o .libs/libpki_token_openssl_la-openssl_hsm.o
�[91mIn file included from ../../libpki/pki.h:322:0,
from openssl_hsm.c:4:
../../libpki/pki_keyparams.h:18:29: error: unknown type name 'PKI_EC_KEY_FORM'
PKI_EC_KEY_FORM curveForm,
^
compilation terminated due to -Wfatal-errors.
�[0m
Makefile:504: recipe for target 'libpki_token_openssl_la-openssl_hsm.lo' failed
make[3]: Leaving directory '/libpki-master/src/drivers/openssl'`
Build with database backends fails on CentOS 7
Building libpki 0.9.0 on current CentOS 7.6 with mariadb-devel-5.5.60 and postgresql-devel-9.2.24 installed fails with exactly the same error as reported in issue #21: passing argument 1 ... discards qualifiers.
A little digging reveals that several function signatures in the MySQL and PostgreSQL code are missing const qualifiers. Here is a patch that makes the library compile for me:
Please make LibPKI free software again
Licensing changes started with 2d29a8f made LibPKI nonfree and not even open source, which it claims to be in COPYING. For rationale please read "Why programs must not limit the freedom to run them."
Latest version from git build fail
DEBUG: make[3]: Leaving directory '/builddir/build/BUILD/libpki-290e4975c4519ba2dec39d36755f38e816d01530/src/drivers/openssl'
DEBUG: openssl_hsm.c: In function 'HSM_OPENSSL_sign':
DEBUG: openssl_hsm.c:313:58: error: dereferencing type-punned pointer will break strict-aliasing rules [-Werror=strict-aliasing]
DEBUG: 313 | if (!EVP_SignFinal(ctx, out_mem->data, (unsigned int *) &ossl_ret, pkey))
DEBUG: | ^~~~~~~~~
DEBUG: compilation terminated due to -Wfatal-errors.
DEBUG: cc1: all warnings being treated as errors
Build fail on gentoo
Build fails on gentoo -
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../src/libpki -I../src -D__LIB_BUILD__ -I/usr/include -O2 -march=native -pipe -fstack-check -maccumulate-outgoing-args -Werror -Wfatal-errors -Wunused-variable -DENABLE_ECDSA=1 -I/usr/include/libxml2 -I/usr/include/mysql -DLINUX -DLINUX -O2 -march=native -pipe -fstack-check -maccumulate-outgoing-args -Werror -Wfatal-errors -MT libpki_la-pki_config.lo -MD -MP -MF .deps/libpki_la-pki_config.Tpo -c pki_config.c -fPIC -DPIC -o .libs/libpki_la-pki_config.o
In file included from /usr/include/string.h:519,
from ./libpki/net/sock.h:32,
from ./libpki/pki.h:312,
from pki_config.c:3:
In function ‘strncpy’,
inlined from ‘_xml_search_namespace_add’ at pki_config.c:86:2,
inlined from ‘PKI_CONFIG_get_element_stack’ at pki_config.c:472:14:
/usr/include/bits/string_fortified.h:91:10: error: ‘__builtin_strncpy’ specified bound depends on the length of the source argument [-Werror=stringop-overflow=]
91 | return __builtin___strncpy_chk (__dest, __src, __len, __bos (__dest));
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Use of SSLv3 prevents use on many systems
The use of SSLv3 prevents the use & compilation of libpki on many systems with newer openssl, or openssl configured to disable SSLv3
Can not create new key material [pki-tool]
Hi @opencrypto ,
Could you please help me with my issue.
I built libpki from src using this repo.
pki-tool genreq -config /usr/etc/ocspd/pki -outkey /tmp/key.pem -newkey -bits 2048 -subject 'CN=OCSP Server, O=OpenCA, C=US' -out /tmp/req.pem -batch -debug -verbose Loading Token .. Ok. Generating KeyPair /tmp/key.pem ...Sep 22 14:44:41 2017 GMT [20638] INFO: [pki-tool.c:214] [DEBUG] Output URL: /tmp/key.pem Generating new KeyPair ... Sep 22 14:44:42 2017 GMT [20638] ERROR: [openssl_hsm_pkey.c:87] Can not create new key material Error. ERROR, can not create keypair!
Additional info:
cat /etc/redhat-release CentOS Linux release 7.4.1708 (Core)
openssl version OpenSSL 1.0.2k-fips 26 Jan 2017
If you need more details please live comment.
Regards,
Serhii
Building on Ubuntu Server 16.04.3
Versions:
Ubuntu Server 16.04.3
libpki 0.8.8
libssl-dev 1.0.2g-1ubuntu4.10
Steps to reproduce:
./configure; make; make install
Problem:
ERROR: no shared openssl libs found!
Add support for K-of-N Composite Crypto
Add support for optional key parameter to allow for signature validation process to only require K-of-N to validate (backward compatibility).
pki-tool genreq fails with: REQ::ERROR signing the Request [error:00000000:lib(0):func(0):reason(0)]
Attempting to generate a CSR results in:
# pki-tool genreq -config /opt/ocspd/etc/ocspd/pki -outkey /opt/ocspd/etc/ocspd/private/key.pem -newkey -bits 2048 -subject 'CN=OCSP Server, O=OpenCA, C=US' -algor RSA-SHA256 -out /opt/ocspd/etc/ocspd/req.pem -batch -debug
May 29 20:00:37 2017 GMT [1213] INFO: [token.c:2570] [DEBUG] ERROR, can not load directory /root/.libpki/profile.d!
May 29 20:00:37 2017 GMT [1213] INFO: [token.c:842] [DEBUG] Can not load profiles (/root/.libpki/profile.d)
May 29 20:00:37 2017 GMT [1213] INFO: [pki-tool.c:214] [DEBUG] Output URL: /opt/ocspd/etc/ocspd/private/key.pem
May 29 20:00:37 2017 GMT [1213] INFO: [pki_algor.c:108] [DEBUG] GETTING ALGORITHM: RSA-SHA256
May 29 20:00:37 2017 GMT [1213] INFO: [pki_algor.c:117] [DEBUG] GOT ALGORITHM ID: 668
May 29 20:00:39 2017 GMT [1213] INFO: [pki_algor.c:108] [DEBUG] GETTING ALGORITHM: RSA-SHA256
May 29 20:00:39 2017 GMT [1213] INFO: [pki_algor.c:117] [DEBUG] GOT ALGORITHM ID: 668
May 29 20:00:39 2017 GMT [1213] INFO: [pki_x509_req.c:48] [DEBUG] Digest Algorithm: SHA256
May 29 20:00:39 2017 GMT [1213] INFO: [pki_x509_name.c:123] [DEBUG] ADDING KEY (mrdn=0) -> CN
May 29 20:00:39 2017 GMT [1213] INFO: [pki_x509_name.c:123] [DEBUG] ADDING KEY (mrdn=0) -> O
May 29 20:00:39 2017 GMT [1213] INFO: [pki_x509_name.c:123] [DEBUG] ADDING KEY (mrdn=0) -> C
May 29 20:00:39 2017 GMT [1213] INFO: [pki_x509_req.c:207] [DEBUG] REQ::ERROR signing the Request [error:00000000:lib(0):func(0):reason(0)]
ERROR, can not generate a new Request!
libpki 0319d1e, built with ./configure --prefix=/opt/ocspd && make
Ubuntu 17.04, OpenSSL v1.0.2g
libpki 0.8.9 fails to build on CentOS 8
I'm trying to build the libpki library on CentOS 8 but part-way into the make, it stops with the error below. My guess is that it has something to do with openssl (1.1.1f), but not sure.
It builds fine on CentOS 7
make[3]: Entering directory '/root/libpki/src/drivers'
/bin/sh ../../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I../../src/libpki -I.. -D__LIB_BUILD__ -I/usr/include -g -O2 -fstack-check -maccumulate-outgoing-args -Werror -Wfatal-errors -Wunused-variable -DENABLE_ECDSA=1 -I/usr/include/libxml2 -DLINUX -g -O2 -fstack-check -maccumulate-outgoing-args -Werror -Wfatal-errors -MT libpki_token_la-hsm_main.lo -MD -MP -MF .deps/libpki_token_la-hsm_main.Tpo -c -o libpki_token_la-hsm_main.lo `test -f 'hsm_main.c' || echo './'`hsm_main.c
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../../src/libpki -I.. -D__LIB_BUILD__ -I/usr/include -g -O2 -fstack-check -maccumulate-outgoing-args -Werror -Wfatal-errors -Wunused-variable -DENABLE_ECDSA=1 -I/usr/include/libxml2 -DLINUX -g -O2 -fstack-check -maccumulate-outgoing-args -Werror -Wfatal-errors -MT libpki_token_la-hsm_main.lo -MD -MP -MF .deps/libpki_token_la-hsm_main.Tpo -c hsm_main.c -fPIC -DPIC -o .libs/libpki_token_la-hsm_main.o
hsm_main.c: In function ‘PKI_verify_signature’:
hsm_main.c:1016:2: error: implicit declaration of function ‘EVP_MD_CTX_cleanup’; did you mean ‘EVP_MD_CTX_create’? [-Werror=implicit-function-declaration]
EVP_MD_CTX_cleanup(ctx);
^~~~~~~~~~~~~~~~~~
Add ARM support
Please add support for 32 bit ARM targets. This can be achieved with the following patch:
diff --git a/configure.ac b/configure.ac
index 1b90e25..096afe7 100644
--- a/configure.ac
+++ b/configure.ac
@@ -40,6 +40,9 @@ case "$my_arch" in
mybits="64"
mybits_install="64"
;;
+ *arm)
+ mybits="32"
+ ;;
*aarch64)
mybits="64"
mybits_install="64"
Additionally, change *aarch64 to *aarch64|*arm64 to support ARM64 on FreeBSD.
Investigate double PKCS#11 initialization
This issue was reported on the OCSPD mailing list. It seems that the library performs HSM_init() twice and this prevents to get a valid session handle.
Nov 14 01:25:25 ocspd ocspd[1181]: OpenCA OCSPD v3.1.0 - starting.
Nov 14 01:25:25 ocspd ocspd[1181]: [token.c:2562] [DEBUG] ERROR, can not load directory /root/.libpki/profile.d!
Nov 14 01:25:25 ocspd ocspd[1181]: [token.c:834] [DEBUG] Can not load profiles (/root/.libpki/profile.d)
Nov 14 01:25:25 ocspd ocspd[1181]: [pki_config.c:1020] [DEBUG] Skipping file .
Nov 14 01:25:25 ocspd ocspd[1181]: [pki_config.c:1030] [DEBUG] Loading file /opt/openca/etc/ocspd/ca.d/tech_ca.xml
Nov 14 01:25:25 ocspd ocspd[1181]: [pki_config.c:1046] [DEBUG] Loaded /opt/openca/etc/ocspd/ca.d/tech_ca.xml file
Nov 14 01:25:25 ocspd ocspd[1181]: [pki_config.c:1020] [DEBUG] Skipping file ..
Nov 14 01:25:25 ocspd ocspd[1181]: [config.c:277] [DEBUG] Selected response digest algorithm: SHA1
Nov 14 01:25:25 ocspd ocspd[1181]: [config.c:298] [DEBUG] Selected signature digest algorithm: SHA1
Nov 14 01:25:25 ocspd ocspd[1181]: [config.c:382] [DEBUG] Building CA List
Nov 14 01:25:25 ocspd ocspd[1181]: [config.c:517] [DEBUG] Got CRL Url -> file:///opt/openca/etc/ocspd/crls/tech_ca.crl
Nov 14 01:25:25 ocspd ocspd[1181]: [crl.c:166] [DEBUG] CRL signature is verified!
Nov 14 01:25:25 ocspd ocspd[1181]: CRL matching CA cert ok [ 1 ]
Nov 14 01:25:25 ocspd ocspd[1181]: [crl.c:243] [DEBUG] CRL::Verify 1 [OK=1]
Nov 14 01:25:25 ocspd ocspd[1181]: INFO::CRL::3 Entries [ Technical CA ]
Nov 14 01:25:25 ocspd ocspd[1181]: [token.c:2562] [DEBUG] ERROR, can not load directory /root/.libpki/profile.d!
Nov 14 01:25:25 ocspd ocspd[1181]: [token.c:834] [DEBUG] Can not load profiles (/root/.libpki/profile.d)
Nov 14 01:25:25 ocspd ocspd[1181]: Configuration loaded and parsed
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:940] [DEBUG] GOT SEARCH PATHS => 1
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:953] [DEBUG] SEARCHING FOR Tech CA Token in dir /opt/openca/etc/ocspd/pki/token.d
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:850] [DEBUG] Processing file [.]
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:854] [DEBUG] Skipping .
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:850] [DEBUG] Processing file [tech_ca.xml.engine]
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:854] [DEBUG] Skipping tech_ca.xml.engine
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:850] [DEBUG] Processing file [tech_ca.xml.software]
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:854] [DEBUG] Skipping tech_ca.xml.software
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:850] [DEBUG] Processing file [tech_ca.xml]
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:868] [DEBUG] Opening File /opt/openca/etc/ocspd/pki/token.d/tech_ca.xmlNov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:880] [DEBUG] Getting Name Param...
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:886] [DEBUG] Got Name::Tech CA Token
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:894] [DEBUG] File successfully loaded /opt/openca/etc/ocspd/pki/token.d/tech_ca.xml
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:957] [DEBUG] FOUND => Tech CA Token [/opt/openca/etc/ocspd/pki/token.d]
Nov 14 01:25:25 ocspd ocspd[1182]: [token.c:576] [DEBUG] TK: Hardware Token: Name is cs-pkcs11
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:940] [DEBUG] GOT SEARCH PATHS => 1
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:953] [DEBUG] SEARCHING FOR cs-pkcs11 in dir /opt/openca/etc/ocspd/pki/hsm.d
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:850] [DEBUG] Processing file [.]
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:854] [DEBUG] Skipping .
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:850] [DEBUG] Processing file [cs-pkcs11.xml]
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:868] [DEBUG] Opening File /opt/openca/etc/ocspd/pki/hsm.d/cs-pkcs11.xml
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:880] [DEBUG] Getting Name Param...
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:886] [DEBUG] Got Name::cs-pkcs11
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:894] [DEBUG] File successfully loaded /opt/openca/etc/ocspd/pki/hsm.d/cs-pkcs11.xml
Nov 14 01:25:25 ocspd ocspd[1182]: [pki_config.c:957] [DEBUG] FOUND => cs-pkcs11 [/opt/openca/etc/ocspd/pki/hsm.d]
Nov 14 01:25:25 ocspd ocspd[1182]: [pkcs11_hsm.c:325] [DEBUG] HSM_PKCS11_init()::Start
Nov 14 01:25:25 ocspd ocspd[1182]: [pkcs11_hsm.c:408] [DEBUG] HSM INFO::Manufacturer Utimaco Safeware AG (v2.20)
Nov 14 01:25:25 ocspd ocspd[1182]: [pkcs11_hsm.c:413] [DEBUG] HSM INFO::Library CryptoServer PKCS#11 Library R2 (v2.18)
Nov 14 01:25:25 ocspd ocspd[1182]: [pkcs11_hsm.c:325] [DEBUG] HSM_PKCS11_init()::Start
Nov 14 01:25:25 ocspd ocspd[1182]: [pkcs11_hsm.c:408] [DEBUG] HSM INFO::Manufacturer Utimaco Safeware AG (v2.20)
Nov 14 01:25:25 ocspd ocspd[1182]: [pkcs11_hsm.c:413] [DEBUG] HSM INFO::Library CryptoServer PKCS#11 Library R2 (v2.18)
Nov 14 01:25:25 ocspd ocspd[1182]: [hsm_main.c:197] [DEBUG] HSM created in non-FIPS mode
Nov 14 01:25:25 ocspd ocspd[1182]: [utils/pkcs11_init.c:585] [DEBUG] HSM_PKCS11_session new ()::Failed opening a new session 0x4 with the token (0) [0x00000003]
Nov 14 01:25:25 ocspd ocspd[1182]: [pkcs11_hsm.c:909] [DEBUG] HSM_PKCS11_SLOT_select()::Can not initiate a new session
Nov 14 01:25:25 ocspd ocspd[1182]: [token.c:677] Error while setting HSM slot to use
Nov 14 01:25:25 ocspd ocspd[1182]: [token.c:842] Can not load Token's Profile => Tech CA Token
Nov 14 01:25:25 ocspd ocspd[1182]: [core.c:42] [ERROR] Can not load default token (/opt/openca/etc/ocspd/ocspd.xml/Tech CA Token)
Nov 14 01:25:25 ocspd ocspd[1182]: Exiting, Glad to serve you, Master!
I also activated the trace in the PKCS11 library:
14.11.2014 01:25:25 | P11Config | I: PKCS11 version 2.18 [Linux-x86_64](Feb 14 2014)
14.11.2014 01:25:25 | P11Config | I: Configfile: /opt/openca/etc/pkcs11/cs_pkcs11_R2.cfg
14.11.2014 01:25:25 | C_GetInfo | T: enter...
14.11.2014 01:25:25 | C_Initialize | E: Error CKR_CRYPTOKI_ALREADY_INITIALIZED occured.
14.11.2014 01:25:25 | C_GetInfo | T: enter...
14.11.2014 01:25:25 | C_GetSessionInfo | T: enter...
14.11.2014 01:25:25 | operator[] | E: No entry with key 0x00000000 available.
14.11.2014 01:25:25 | C_GetSessionInfo | E: Error CKR_SESSION_HANDLE_INVALID occured.
14.11.2014 01:25:25 | C_OpenSession | T: enter...
14.11.2014 01:25:25 | operator[] | E: No entry with key 0x00000000 available.
14.11.2014 01:25:25 | C_OpenSession | E: Error CKR_SLOT_ID_INVALID occured.
Here are the things I don’t understand:
Why is the daemon performing a C_Initialize twice (HSM_PKCS11_init)?
Why do I get a CKR_SLOT_ID_INVALID error on the C_OpenSession (HSM_PKCS11_session new)?
I wrote some C code using the same PKCS11 library and configuration file, but can’t reproduce the problem:
./cs_openssession
Slot Info:
slot desc. : [email protected] - SLOT_0000
manufacturerID : Utimaco Safeware AG
flags : 0x00000005
hardwareVersion : 3.0
firmwareVersion : 2.1
Session Info:
slotID: 0
state : 0x00
flags : 0x04
Can't compile on Centos7
Steps to reproduce.
./configure
make
And after that I receive following error:
mv -f .deps/libpki_openssl_la-pki_x509_crl.Tpo .deps/libpki_openssl_la-pki_x509_crl.Plo
/bin/sh ../../libtool --tag=CC --mode=compile gcc -I. -I../../src/libpki -I.. -DENABLE_ECDSA=1 -D__LIB_BUILD__ -I/usr/include -g -O2 -fstack-check -maccumulate-outgoing-args -Werror -Wfatal-errors -DENABLE_ECDSA=1 -I/usr/include/libxml2 -DLINUX -g -O2 -fstack-check -maccumulate-outgoing-args -Werror -MT libpki_openssl_la-pki_x509_req.lo -MD -MP -MF .deps/libpki_openssl_la-pki_x509_req.Tpo -c -o libpki_openssl_la-pki_x509_req.lo `test -f 'pki_x509_req.c' || echo './'`pki_x509_req.c
libtool: compile: gcc -I. -I../../src/libpki -I.. -DENABLE_ECDSA=1 -D__LIB_BUILD__ -I/usr/include -g -O2 -fstack-check -maccumulate-outgoing-args -Werror -Wfatal-errors -DENABLE_ECDSA=1 -I/usr/include/libxml2 -DLINUX -g -O2 -fstack-check -maccumulate-outgoing-args -Werror -MT libpki_openssl_la-pki_x509_req.lo -MD -MP -MF .deps/libpki_openssl_la-pki_x509_req.Tpo -c pki_x509_req.c -fPIC -DPIC -o .libs/libpki_openssl_la-pki_x509_req.o
pki_x509_req.c: In function 'PKI_X509_REQ_get_attribute':
pki_x509_req.c:700:34: error: 'X509_REQ' has no member named 'req_info_attributes'
if (val->req_info != NULL && val->req_info_attributes != NULL) {
^
compilation terminated due to -Wfatal-errors.
make[2]: *** [libpki_openssl_la-pki_x509_req.lo] Error 1
make[2]: Leaving directory `/usr/local/src/libpki/src/openssl'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/local/src/libpki/src'
make: *** [all-recursive] Error 1
Some additional info:
OpenSSL Configuration:
----------------------
Library ..............: OpenSSL
Prefix ...............: /usr
Compiler Flags .......: -DENABLE_ECDSA=1
Linker Flags .........:
libs .................: -lssl -lcrypto
Support for ECDSA ....: yes
Configuration for libpki 0.9.0 :
--------------------------------
Architecture .........: linux (64 bits)
Host System Type .....: x86_64-unknown-linux-gnu
Supported URLs .......: file http https ldap dns
Library Version ......: v = 90, r = 90, a = 10
Install lib path .....: /usr/lib64
Install path .........: /usr
Compiler Flags .......: -I/usr/include -g -O2 -fstack-check -maccumulate-outgoing-args -Werror -Wfatal-errors -DENABLE_ECDSA=1 -I/usr/include/libxml2
Linker Flags .........: -L/usr/lib64 -L/usr/lib64 -Wl,-rpath -Wl,"/usr/lib64"
Libs .................: -lpthread -ldl -lrt -lldap_r -lssl -lcrypto -lxml2 -lz -lm -ldl -lresolv
Package configured for: \S (x86_64)
Update test infrastructure
Building on CentOS 8
Hello, can you help me with the build ?
config.status: error: in /root/rpmbuild/BUILD/libpki-0.9.2': config.status: error: Something went wrong bootstrapping makefile fragments for automatic dependency tracking. If GNU make was not used, consider re-running the configure script with MAKE="gmake" (or whatever is necessary). You can also try re-running configure with the '--disable-dependency-tracking' option to at least be able to build the package (albeit without support for automatic dependency tracking). See config.log' for more details
error: Bad exit status from /var/tmp/rpm-tmp.OkMkUh (%build)
RPM build errors:
Bad exit status from /var/tmp/rpm-tmp.OkMkUh (%build)
SPEC:
Name: libpki
Version: 0.9.2
Release: 1%{?dist}
Summary: OpenCA PKI development library
Group: Security/PKI
License: OpenCA License (BSD Style)
URL: http://www.openca.org/projects/libpki
Source0: libpki-0.9.2.tar.gz
BuildRequires: openssl-devel
BuildRequires: libxml2-devel
BuildRequires: openldap-devel
Requires: libpki-0.9.2.rpm
%description
Includes and documentation for developing applications by using LibPKI.
%prep
%setup -q
%build
./configure
%install
[ -n "$RPM_BUILD_ROOT" -a "$RPM_BUILD_ROOT" != / ] && rm -rf $RPM_BUILD_ROOT
make DESTDIR="$RPM_BUILD_ROOT" prefix="%{prefix}" mandir="$RPM_BUILD_ROOT%{mand}" install
%clean
[ -n "$RPM_BUILD_ROOT" -a "$RPM_BUILD_ROOT" != / ] && rm -rf $RPM_BUILD_ROOT
%files
%defattr(-, root, root)
%changelog
Deadlock in PKI_RWLOCK_write_lock
PKI_RWLOCK_write_lock() creates two locks on the variable lock_mutex, but only one lock is released. Also the n_writers variable is modified incorrectly. This patch should fix this issue:
diff -ur libpki-0.8.7/src/pki_threads_vars.c libpki-0.8.7_patched/src/pki_threads_vars.c
--- libpki-0.8.7/src/pki_threads_vars.c 2014-08-05 19:55:39.000000000 +0200
+++ libpki-0.8.7_patched/src/pki_threads_vars.c 2014-08-14 22:05:40.505266425 +0200
@@ -124,9 +124,9 @@
pthread_mutex_unlock(&l->lock_mutex);
pthread_mutex_lock(&l->data_mutex);
- pthread_mutex_lock(&l->lock_mutex);
- //pthread_mutex_lock(&l->lock_mutex);
l->n_writers_waiting--; - l->n_writers--;
- l->n_writers++;
pthread_mutex_unlock(&l->lock_mutex);
endif /* HAVE_PTHREAD_RWLOCK */
error: 'strncpy' specified bound depends on the length of the source argument [-Werror=stringop-overflow=]
make crashes:
In function '_xml_search_namespace_add',
inlined from 'PKI_CONFIG_get_element_stack' at pki_config.c:472:14:
pki_config.c:86:2: error: 'strncpy' specified bound depends on the length of the source argument [-Werror=stringop-overflow=]
86 | strncpy( ret, my_search, strlen(my_search) );
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
compilation terminated due to -Wfatal-errors.
cc1: all warnings being treated as errors
make[2]: *** [Makefile:864: libpki_la-pki_config.lo] Error 1
make[2]: Leaving directory '/home/klaus/libpki-master/src'
make[1]: *** [Makefile:949: all-recursive] Error 1
make[1]: Leaving directory '/home/klaus/libpki-master/src'
make: *** [Makefile:859: all-recursive] Error 1
Examples don't compile or have missing files
The applications in the example directory don't compiler, or files are missing.
PKI_X509_ALGOR_VALUE_new_digest undeclared
The ocspd in master now fails to build because PKI_X509_ALGOR_VALUE_new_digest was removed (commented out) with commit .
Unable to compile on !debian stretch
Hi folks,
Disclaimer: this may be tied to the fact that I use mariadb instead of mysql.
Packages installed for both:
ii libmariadb-dev 2.3.2-2 amd64 MariaDB Connector/C, development files
ii libmariadb2:amd64 2.3.2-2 amd64 MariaDB Connector/C
ii libmariadbclient-dev 10.1.26-0+deb9u1 amd64 MariaDB database development files
ii libmariadbclient-dev-compat:amd64 10.1.26-0+deb9u1 amd64 MariaDB database development files (libmysqlclient compatibility)
ii libmariadbd-dev:amd64 10.1.26-0+deb9u1 amd64 MariaDB embedded database, development files
ii libmariadbd18:amd64 10.1.26-0+deb9u1 amd64 MariaDB embedded database, shared library
ii mariadb-common 10.1.26-0+deb9u1 all MariaDB common metapackage
.
ii default-libmysqlclient-dev:amd64 1.0.2 amd64 MySQL database development files (metapackage)
ii libmysql++-dev 3.2.2+pristine-2 amd64 MySQL C++ library bindings (development)
ii libmysql++3v5 3.2.2+pristine-2 amd64 MySQL C++ library bindings (runtime)
ii mysql-common 5.8+1.0.2 all MySQL database common files, e.g. /etc/mysql/my.cnf
Compilation fails with:
[…]
Making all in net
make[2]: Entering directory '/tmp/libpki/src/net'
/bin/bash ../../libtool --tag=CC --mode=compile gcc -I. -I../../src/libpki -I.. -DENABLE_ECDSA=1 -D__LIB_BUILD__ -I/usr/include -g -O2 -fstack-check -maccumulate-outgoing-args -Werror -Wfatal-errors -Wunused-variable -DENABLE_ECDSA=1 -I/usr/include/libxml2 -I/usr/include/mysql -I/usr/include/postgresql -DLINUX -g -O2 -fstack-check -maccumulate-outgoing-args -Werror -Wfatal-errors -MT libpki_net_la-url.lo -MD -MP -MF .deps/libpki_net_la-url.Tpo -c -o libpki_net_la-url.lo `test -f 'url.c' || echo './'`url.c
libtool: compile: gcc -I. -I../../src/libpki -I.. -DENABLE_ECDSA=1 -D__LIB_BUILD__ -I/usr/include -g -O2 -fstack-check -maccumulate-outgoing-args -Werror -Wfatal-errors -Wunused-variable -DENABLE_ECDSA=1 -I/usr/include/libxml2 -I/usr/include/mysql -I/usr/include/postgresql -DLINUX -g -O2 -fstack-check -maccumulate-outgoing-args -Werror -Wfatal-errors -MT libpki_net_la-url.lo -MD -MP -MF .deps/libpki_net_la-url.Tpo -c url.c -fPIC -DPIC -o .libs/libpki_net_la-url.o
url.c: In function ‘URL_get_data_url’:
url.c:305:34: error: passing argument 1 of ‘URL_get_data_mysql_url’ discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers]
ret = URL_get_data_mysql_url( url, size );
^~~
compilation terminated due to -Wfatal-errors.
cc1: all warnings being treated as errors
Makefile:577: recipe for target 'libpki_net_la-url.lo' failed
make[2]: *** [libpki_net_la-url.lo] Error 1
make[2]: Leaving directory '/tmp/libpki/src/net'
Makefile:897: recipe for target 'all-recursive' failed
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory '/tmp/libpki/src'
Makefile:839: recipe for target 'all-recursive' failed
make: *** [all-recursive] Error 1
Is there a fix about that, or shall I remove mariadb dev packages to replace them with the mysql ones, or is there missing packages, or is it a bug ?
LibPKI issue on Debian 12.5.0
Bonjour,
I am compiling LibPKI with Openssl 3 it gives me error:
_openssl_la-openssl_hsm_pkey.o
openssl_hsm_pkey.c: In function ‘_pki_rsakey_new’:
openssl_hsm_pkey.c:78:5: error: ‘RSA_new’ is deprecated: Since OpenSSL 3.0 [-Wer ror=deprecated-declarations]
78 | if ((rsa = RSA_new()) == NULL) {
| ^~
compilation terminated due to -Wfatal-errors.
cc1: all warnings being treated as errors
make[3]: *** [Makefile:538: libpki_token_openssl_la-openssl_hsm_pkey.lo] Error 1
PKCS12 in (software) token configuration
Is it possible to use p12 file as key/cert storage in token xml configuration?
I was try putting pki:p12 and pki:password in xml, but without success. In log I found this lines:
...
ocspd[14943]: [token.c:192] [ERROR] Possible PrivKey/Certificate Mismatch (-2)
ocspd[14943]: [core.c:59] Can not load Token Key
ocspd[14943]: [core.c:60] Can not load Token certificate
ocspd[14943]: [core.c:61] Can not load Token CA certificate
ocspd[14943]: [core.c:63] [ERROR] Token Configuration Fatal Error (56)
...
Token xml I tried with:
<?xml version="1.0" ?>
<pki:tokenConfig xmlns:pki="http://www.openca.org/openca/pki/1/0/0">
<pki:name>ocspServerToken</pki:name>
<pki:type>software</pki:type>
<pki:p12>file:///usr/etc/ocspd/private/ocsp.p12</pki:p12>
<pki:password>S0mePa55wo4d</pki:password>
<!-- <pki:keypair></pki:keypair> -->
<!-- <pki:cert></pki:cert> -->
<!-- <pki:cacert></pki:cacert> -->
</pki:tokenConfig>
Do I have (and how) to provide reference to pki:keypair, pki:cert and pki:cacert?
Can't compile for Centos7
Steps to reproduce:
yum update
yum install git
yum groupinstall "Development Tools"
cd /usr/local/src
git clone https://github.com/openca/libpki.git
./configure
make
Unfortunately i receive the following error:"
Making all in src
make[1]: Entering directory /usr/local/src/libpki/src' Making all in drivers make[2]: Entering directory/usr/local/src/libpki/src/drivers'
Making all in openssl
make[3]: Entering directory /usr/local/src/libpki/src/drivers/openssl' /bin/sh ../../../libtool --tag=CC --mode=compile gcc -I. -I../../../src/libpki -I../.. -DENABLE_ECDSA=1 -D__LIB_BUILD__ -I/usr/include -g -O2 -fstack-check -maccumulate-outgoing-args -DENABLE_ECDSA=1 -I/usr/include/libxml2 -DLINUX -g -O2 -fstack-check -MT libpki_token_openssl_la-openssl_hsm.lo -MD -MP -MF .deps/libpki_token_openssl_la-openssl_hsm.Tpo -c -o libpki_token_openssl_la-openssl_hsm.lotest -f 'openssl_hsm.c' || echo './'openssl_hsm.c libtool: compile: gcc -I. -I../../../src/libpki -I../.. -DENABLE_ECDSA=1 -D__LIB_BUILD__ -I/usr/include -g -O2 -fstack-check -maccumulate-outgoing-args -DENABLE_ECDSA=1 -I/usr/include/libxml2 -DLINUX -g -O2 -fstack-check -MT libpki_token_openssl_la-openssl_hsm.lo -MD -MP -MF .deps/libpki_token_openssl_la-openssl_hsm.Tpo -c openssl_hsm.c -fPIC -DPIC -o .libs/libpki_token_openssl_la-openssl_hsm.o In file included from openssl_hsm.c:4:0: ../../libpki/pki.h:503:29: fatal error: libpki/pki_conf.h: No such file or directory #include <libpki/pki_conf.h> ^ compilation terminated. make[3]: *** [libpki_token_openssl_la-openssl_hsm.lo] Error 1 make[3]: Leaving directory/usr/local/src/libpki/src/drivers/openssl'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory /usr/local/src/libpki/src/drivers' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory/usr/local/src/libpki/src'
make: *** [all-recursive] Error 1"
Output of the config.log:
This file contains any messages produced by compilers while
running configure, to aid debugging if configure makes a mistake.
It was created by libpki configure 0.8.9, which was
generated by GNU Autoconf 2.69. Invocation command line was
$ ./configure
---------
Platform.
---------
hostname = template.local
uname -m = x86_64
uname -r = 3.10.0-327.36.1.el7.x86_64
uname -s = Linux
uname -v = #1 SMP Sun Sep 18 13:04:29 UTC 2016
/usr/bin/uname -p = x86_64
/bin/uname -X = unknown
/bin/arch = x86_64
/usr/bin/arch -k = unknown
/usr/convex/getsysinfo = unknown
/usr/bin/hostinfo = unknown
/bin/machine = unknown
/usr/bin/oslevel = unknown
/bin/universe = unknown
PATH: /usr/local/sbin
PATH: /sbin
PATH: /bin
PATH: /usr/sbin
PATH: /usr/bin
PATH: /root/bin
PATH: /root/bin
-----------
Core tests.
-----------
configure:2671: checking build system type
configure:2685: result: x86_64-unknown-linux-gnu
configure:2705: checking host system type
configure:2718: result: x86_64-unknown-linux-gnu
configure:2738: checking target system type
configure:2751: result: x86_64-unknown-linux-gnu
configure:2826: checking how to print strings
configure:2853: result: printf
configure:2925: checking for gcc
configure:2941: found /bin/gcc
configure:2952: result: gcc
configure:3181: checking for C compiler version
configure:3190: gcc --version >&5
gcc (GCC) 4.8.5 20150623 (Red Hat 4.8.5-4)
Copyright (C) 2015 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
configure:3201: $? = 0
configure:3190: gcc -v >&5
Using built-in specs.
COLLECT_GCC=gcc
COLLECT_LTO_WRAPPER=/usr/libexec/gcc/x86_64-redhat-linux/4.8.5/lto-wrapper
Target: x86_64-redhat-linux
Configured with: ../configure --prefix=/usr --mandir=/usr/share/man --infodir=/usr/share/info --with-bugurl=http://bugzilla.redhat.com/bugzilla --enable-bootstrap --enable-shared --enable-threads=posix --enable-checking=release --with-system-zlib --enable-__cxa_atexit --disable-libunwind-exceptions --enable-gnu-unique-object --enable-linker-build-id --with-linker-hash-style=gnu --enable-languages=c,c++,objc,obj-c++,java,fortran,ada,go,lto --enable-plugin --enable-initfini-array --disable-libgcj --with-isl=/builddir/build/BUILD/gcc-4.8.5-20150702/obj-x86_64-redhat-linux/isl-install --with-cloog=/builddir/build/BUILD/gcc-4.8.5-20150702/obj-x86_64-redhat-linux/cloog-install --enable-gnu-indirect-function --with-tune=generic --with-arch_32=x86-64 --build=x86_64-redhat-linux
Thread model: posix
gcc version 4.8.5 20150623 (Red Hat 4.8.5-4) (GCC)
configure:3201: $? = 0
configure:3190: gcc -V >&5
gcc: error: unrecognized command line option '-V'
gcc: fatal error: no input files
compilation terminated.
configure:3201: $? = 4
configure:3190: gcc -qversion >&5
gcc: error: unrecognized command line option '-qversion'
gcc: fatal error: no input files
compilation terminated.
configure:3201: $? = 4
configure:3221: checking whether the C compiler works
configure:3243: gcc conftest.c >&5
configure:3247: $? = 0
configure:3295: result: yes
configure:3298: checking for C compiler default output file name
configure:3300: result: a.out
configure:3306: checking for suffix of executables
configure:3313: gcc -o conftest conftest.c >&5
configure:3317: $? = 0
configure:3339: result:
configure:3361: checking whether we are cross compiling
configure:3369: gcc -o conftest conftest.c >&5
configure:3373: $? = 0
configure:3380: ./conftest
configure:3384: $? = 0
configure:3399: result: no
configure:3404: checking for suffix of object files
configure:3426: gcc -c conftest.c >&5
configure:3430: $? = 0
configure:3451: result: o
configure:3455: checking whether we are using the GNU C compiler
configure:3474: gcc -c conftest.c >&5
configure:3474: $? = 0
configure:3483: result: yes
configure:3492: checking whether gcc accepts -g
configure:3512: gcc -c -g conftest.c >&5
configure:3512: $? = 0
configure:3553: result: yes
configure:3570: checking for gcc option to accept ISO C89
configure:3633: gcc -c -g -O2 conftest.c >&5
configure:3633: $? = 0
configure:3646: result: none needed
configure:3671: checking whether gcc understands -c and -o together
configure:3693: gcc -c conftest.c -o conftest2.o
configure:3696: $? = 0
configure:3693: gcc -c conftest.c -o conftest2.o
configure:3696: $? = 0
configure:3708: result: yes
configure:3725: checking for a sed that does not truncate output
configure:3789: result: /bin/sed
configure:3807: checking for grep that handles long lines and -e
configure:3865: result: /bin/grep
configure:3870: checking for egrep
configure:3932: result: /bin/grep -E
configure:3937: checking for fgrep
configure:3999: result: /bin/grep -F
configure:4034: checking for ld used by gcc
configure:4101: result: /bin/ld
configure:4108: checking if the linker (/bin/ld) is GNU ld
configure:4123: result: yes
configure:4135: checking for BSD- or MS-compatible name lister (nm)
configure:4184: result: /bin/nm -B
configure:4314: checking the name lister (/bin/nm -B) interface
configure:4321: gcc -c -g -O2 conftest.c >&5
configure:4324: /bin/nm -B "conftest.o"
configure:4327: output
0000000000000000 B some_variable
configure:4334: result: BSD nm
configure:4337: checking whether ln -s works
configure:4341: result: yes
configure:4349: checking the maximum length of command line arguments
configure:4479: result: 1572864
configure:4496: checking whether the shell understands some XSI constructs
configure:4506: result: yes
configure:4510: checking whether the shell understands "+="
configure:4516: result: yes
configure:4551: checking how to convert x86_64-unknown-linux-gnu file names to x86_64-unknown-linux-gnu format
configure:4591: result: func_convert_file_noop
configure:4598: checking how to convert x86_64-unknown-linux-gnu file names to toolchain format
configure:4618: result: func_convert_file_noop
configure:4625: checking for /bin/ld option to reload object files
configure:4632: result: -r
configure:4706: checking for objdump
configure:4722: found /bin/objdump
configure:4733: result: objdump
configure:4765: checking how to recognize dependent libraries
configure:4967: result: pass_all
configure:5052: checking for dlltool
configure:5082: result: no
configure:5112: checking how to associate runtime and link libraries
configure:5139: result: printf %s\n
configure:5200: checking for ar
configure:5216: found /bin/ar
configure:5227: result: ar
configure:5264: checking for archiver @file support
configure:5281: gcc -c -g -O2 conftest.c >&5
configure:5281: $? = 0
configure:5284: ar cru libconftest.a @conftest.lst >&5
configure:5287: $? = 0
configure:5292: ar cru libconftest.a @conftest.lst >&5
ar: conftest.o: No such file or directory
configure:5295: $? = 1
configure:5307: result: @
configure:5365: checking for strip
configure:5381: found /bin/strip
configure:5392: result: strip
configure:5464: checking for ranlib
configure:5480: found /bin/ranlib
configure:5491: result: ranlib
configure:5568: checking for gawk
configure:5584: found /bin/gawk
configure:5595: result: gawk
configure:5635: checking command to parse /bin/nm -B output from gcc object
configure:5755: gcc -c -g -O2 conftest.c >&5
configure:5758: $? = 0
configure:5762: /bin/nm -B conftest.o | sed -n -e 's/^. [ ][ ]([_A-Za-z][A-Za-z0-9])$/\1 \2 \2/p' | sed '/ __gnu_lto/d' > conftest.nm
configure:5765: $? = 0
configure:5831: gcc -o conftest -g -O2 conftest.c conftstm.o >&5
configure:5834: $? = 0
configure:5872: result: ok
configure:5909: checking for sysroot
configure:5939: result: no
configure:6016: gcc -c -g -O2 conftest.c >&5
configure:6019: $? = 0
configure:6201: checking for mt
configure:6231: result: no
configure:6251: checking if : is a manifest tool
configure:6257: : '-?'
configure:6265: result: no
configure:6907: checking how to run the C preprocessor
configure:6938: gcc -E conftest.c
configure:6938: $? = 0
configure:6952: gcc -E conftest.c
conftest.c:10:28: fatal error: ac_nonexistent.h: No such file or directory
#include <ac_nonexistent.h>
^
compilation terminated.
configure:6952: $? = 1
configure: failed program was:
| /* confdefs.h /
| #define PACKAGE_NAME "libpki"
| #define PACKAGE_TARNAME "libpki"
| #define PACKAGE_VERSION "0.8.9"
| #define PACKAGE_STRING "libpki 0.8.9"
| #define PACKAGE_BUGREPORT "[email protected]"
| #define PACKAGE_URL ""
| #define ENABLE_ARCH_64 1
| / end confdefs.h. /
| #include <ac_nonexistent.h>
configure:6977: result: gcc -E
configure:6997: gcc -E conftest.c
configure:6997: $? = 0
configure:7011: gcc -E conftest.c
conftest.c:10:28: fatal error: ac_nonexistent.h: No such file or directory
#include <ac_nonexistent.h>
^
compilation terminated.
configure:7011: $? = 1
configure: failed program was:
| / confdefs.h /
| #define PACKAGE_NAME "libpki"
| #define PACKAGE_TARNAME "libpki"
| #define PACKAGE_VERSION "0.8.9"
| #define PACKAGE_STRING "libpki 0.8.9"
| #define PACKAGE_BUGREPORT "[email protected]"
| #define PACKAGE_URL ""
| #define ENABLE_ARCH_64 1
| / end confdefs.h. /
| #include <ac_nonexistent.h>
configure:7040: checking for ANSI C header files
configure:7060: gcc -c -g -O2 conftest.c >&5
configure:7060: $? = 0
configure:7133: gcc -o conftest -g -O2 conftest.c >&5
configure:7133: $? = 0
configure:7133: ./conftest
configure:7133: $? = 0
configure:7144: result: yes
configure:7157: checking for sys/types.h
configure:7157: gcc -c -g -O2 conftest.c >&5
configure:7157: $? = 0
configure:7157: result: yes
configure:7157: checking for sys/stat.h
configure:7157: gcc -c -g -O2 conftest.c >&5
configure:7157: $? = 0
configure:7157: result: yes
configure:7157: checking for stdlib.h
configure:7157: gcc -c -g -O2 conftest.c >&5
configure:7157: $? = 0
configure:7157: result: yes
configure:7157: checking for string.h
configure:7157: gcc -c -g -O2 conftest.c >&5
configure:7157: $? = 0
configure:7157: result: yes
configure:7157: checking for memory.h
configure:7157: gcc -c -g -O2 conftest.c >&5
configure:7157: $? = 0
configure:7157: result: yes
configure:7157: checking for strings.h
configure:7157: gcc -c -g -O2 conftest.c >&5
configure:7157: $? = 0
configure:7157: result: yes
configure:7157: checking for inttypes.h
configure:7157: gcc -c -g -O2 conftest.c >&5
configure:7157: $? = 0
configure:7157: result: yes
configure:7157: checking for stdint.h
configure:7157: gcc -c -g -O2 conftest.c >&5
configure:7157: $? = 0
configure:7157: result: yes
configure:7157: checking for unistd.h
configure:7157: gcc -c -g -O2 conftest.c >&5
configure:7157: $? = 0
configure:7157: result: yes
configure:7171: checking for dlfcn.h
configure:7171: gcc -c -g -O2 conftest.c >&5
configure:7171: $? = 0
configure:7171: result: yes
configure:7377: checking for objdir
configure:7392: result: .libs
configure:7663: checking if gcc supports -fno-rtti -fno-exceptions
configure:7681: gcc -c -g -O2 -fno-rtti -fno-exceptions conftest.c >&5
cc1: warning: command line option '-fno-rtti' is valid for C++/ObjC++ but not for C [enabled by default]
configure:7685: $? = 0
configure:7698: result: no
configure:8025: checking for gcc option to produce PIC
configure:8032: result: -fPIC -DPIC
configure:8040: checking if gcc PIC flag -fPIC -DPIC works
configure:8058: gcc -c -g -O2 -fPIC -DPIC -DPIC conftest.c >&5
configure:8062: $? = 0
configure:8075: result: yes
configure:8104: checking if gcc static flag -static works
configure:8132: result: no
configure:8147: checking if gcc supports -c -o file.o
configure:8168: gcc -c -g -O2 -o out/conftest2.o conftest.c >&5
configure:8172: $? = 0
configure:8194: result: yes
configure:8202: checking if gcc supports -c -o file.o
configure:8249: result: yes
configure:8282: checking whether the gcc linker (/bin/ld -m elf_x86_64) supports shared libraries
configure:9435: result: yes
configure:9472: checking whether -lc should be explicitly linked in
configure:9480: gcc -c -g -O2 conftest.c >&5
configure:9483: $? = 0
configure:9498: gcc -shared -fPIC -DPIC conftest.o -v -Wl,-soname -Wl,conftest -o conftest 2>&1 | /bin/grep -lc >/dev/null 2>&1
configure:9501: $? = 0
configure:9515: result: no
configure:9675: checking dynamic linker characteristics
configure:10186: gcc -o conftest -g -O2 -Wl,-rpath -Wl,/foo conftest.c >&5
configure:10186: $? = 0
configure:10412: result: GNU/Linux ld.so
configure:10519: checking how to hardcode library paths into programs
configure:10544: result: immediate
configure:11084: checking whether stripping libraries is possible
configure:11089: result: yes
configure:11124: checking if libtool supports shared libraries
configure:11126: result: yes
configure:11129: checking whether to build shared libraries
configure:11150: result: yes
configure:11153: checking whether to build static libraries
configure:11157: result: yes
configure:11195: checking for egrep
configure:11257: result: /bin/grep -E
configure:11282: checking for a BSD-compatible install
configure:11350: result: /bin/install -c
configure:11361: checking whether build environment is sane
configure:11416: result: yes
configure:11564: checking for a thread-safe mkdir -p
configure:11603: result: /bin/mkdir -p
configure:11606: checking whether make sets $(MAKE)
configure:11628: result: yes
configure:11658: checking for style of include used by make
configure:11686: result: GNU
configure:11720: checking whether make supports nested variables
configure:11737: result: yes
configure:11822: checking dependency style of gcc
configure:11933: result: gcc3
configure:12312: checking for make
configure:12330: found /bin/make
configure:12342: result: /bin/make
configure:12352: checking for ar
configure:12370: found /bin/ar
configure:12382: result: /bin/ar
configure:12393: result: Not an iPhone Build
configure:12399: checking whether to enable maintainer-specific portions of Makefiles
configure:12408: result: no
configure:12423: checking whether ln -s works
configure:12427: result: yes
configure:12438: checking for gawk
configure:12465: result: gawk
configure:12476: checking whether /bin/make sets $(MAKE)
configure:12498: result: yes
configure:12512: checking for calloc in -lc
configure:12537: gcc -o conftest -g -O2 conftest.c -lc >&5
conftest.c:31:6: warning: conflicting types for built-in function 'calloc' [enabled by default]
char calloc ();
^
configure:12537: $? = 0
configure:12546: result: yes
configure:12561: checking for ANSI C header files
configure:12665: result: yes
configure:12673: checking for sys/wait.h that is POSIX.1 compatible
configure:12699: gcc -c -g -O2 conftest.c >&5
configure:12699: $? = 0
configure:12706: result: yes
configure:12717: checking for stdlib.h
configure:12717: result: yes
configure:12717: checking for string.h
configure:12717: result: yes
configure:12717: checking sys/socket.h usability
configure:12717: gcc -c -g -O2 conftest.c >&5
configure:12717: $? = 0
configure:12717: result: yes
configure:12717: checking sys/socket.h presence
configure:12717: gcc -E conftest.c
configure:12717: $? = 0
configure:12717: result: yes
configure:12717: checking for sys/socket.h
configure:12717: result: yes
configure:12717: checking syslog.h usability
configure:12717: gcc -c -g -O2 conftest.c >&5
configure:12717: $? = 0
configure:12717: result: yes
configure:12717: checking syslog.h presence
configure:12717: gcc -E conftest.c
configure:12717: $? = 0
configure:12717: result: yes
configure:12717: checking for syslog.h
configure:12717: result: yes
configure:12731: checking sys/select.h usability
configure:12731: gcc -c -g -O2 conftest.c >&5
configure:12731: $? = 0
configure:12731: result: yes
configure:12731: checking sys/select.h presence
configure:12731: gcc -E conftest.c
configure:12731: $? = 0
configure:12731: result: yes
configure:12731: checking for sys/select.h
configure:12731: result: yes
configure:12744: checking for an ANSI C-conforming const
configure:12810: gcc -c -g -O2 conftest.c >&5
configure:12810: $? = 0
configure:12817: result: yes
configure:12825: checking for pid_t
configure:12825: gcc -c -g -O2 conftest.c >&5
configure:12825: $? = 0
configure:12825: gcc -c -g -O2 conftest.c >&5
conftest.c: In function 'main':
conftest.c:68:20: error: expected expression before ')' token
if (sizeof ((pid_t)))
^
configure:12825: $? = 1
configure: failed program was:
| / confdefs.h /
| #define PACKAGE_NAME "libpki"
| #define PACKAGE_TARNAME "libpki"
| #define PACKAGE_VERSION "0.8.9"
| #define PACKAGE_STRING "libpki 0.8.9"
| #define PACKAGE_BUGREPORT "[email protected]"
| #define PACKAGE_URL ""
| #define ENABLE_ARCH_64 1
| #define STDC_HEADERS 1
| #define HAVE_SYS_TYPES_H 1
| #define HAVE_SYS_STAT_H 1
| #define HAVE_STDLIB_H 1
| #define HAVE_STRING_H 1
| #define HAVE_MEMORY_H 1
| #define HAVE_STRINGS_H 1
| #define HAVE_INTTYPES_H 1
| #define HAVE_STDINT_H 1
| #define HAVE_UNISTD_H 1
| #define HAVE_DLFCN_H 1
| #define LT_OBJDIR ".libs/"
| #define PACKAGE "libpki"
| #define VERSION "0.8.9"
| #define HAVE_CALLOC 1
| #define STDC_HEADERS 1
| #define HAVE_SYS_WAIT_H 1
| #define HAVE_STDLIB_H 1
| #define HAVE_STRING_H 1
| #define HAVE_SYS_SOCKET_H 1
| #define HAVE_SYSLOG_H 1
| #define HAVE_SYS_SELECT_H 1
| / end confdefs.h. /
| #include <stdio.h>
| #ifdef HAVE_SYS_TYPES_H
| # include <sys/types.h>
| #endif
| #ifdef HAVE_SYS_STAT_H
| # include <sys/stat.h>
| #endif
| #ifdef STDC_HEADERS
| # include <stdlib.h>
| # include <stddef.h>
| #else
| # ifdef HAVE_STDLIB_H
| # include <stdlib.h>
| # endif
| #endif
| #ifdef HAVE_STRING_H
| # if !defined STDC_HEADERS && defined HAVE_MEMORY_H
| # include <memory.h>
| # endif
| # include <string.h>
| #endif
| #ifdef HAVE_STRINGS_H
| # include <strings.h>
| #endif
| #ifdef HAVE_INTTYPES_H
| # include <inttypes.h>
| #endif
| #ifdef HAVE_STDINT_H
| # include <stdint.h>
| #endif
| #ifdef HAVE_UNISTD_H
| # include <unistd.h>
| #endif
| int
| main ()
| {
| if (sizeof ((pid_t)))
| return 0;
| ;
| return 0;
| }
configure:12825: result: yes
configure:12836: checking whether struct tm is in sys/time.h or time.h
configure:12856: gcc -c -g -O2 conftest.c >&5
configure:12856: $? = 0
configure:12863: result: time.h
configure:12875: checking vfork.h usability
configure:12875: gcc -c -g -O2 conftest.c >&5
conftest.c:65:19: fatal error: vfork.h: No such file or directory
#include <vfork.h>
^
compilation terminated.
configure:12875: $? = 1
configure: failed program was:
| / confdefs.h /
| #define PACKAGE_NAME "libpki"
| #define PACKAGE_TARNAME "libpki"
| #define PACKAGE_VERSION "0.8.9"
| #define PACKAGE_STRING "libpki 0.8.9"
| #define PACKAGE_BUGREPORT "[email protected]"
| #define PACKAGE_URL ""
| #define ENABLE_ARCH_64 1
| #define STDC_HEADERS 1
| #define HAVE_SYS_TYPES_H 1
| #define HAVE_SYS_STAT_H 1
| #define HAVE_STDLIB_H 1
| #define HAVE_STRING_H 1
| #define HAVE_MEMORY_H 1
| #define HAVE_STRINGS_H 1
| #define HAVE_INTTYPES_H 1
| #define HAVE_STDINT_H 1
| #define HAVE_UNISTD_H 1
| #define HAVE_DLFCN_H 1
| #define LT_OBJDIR ".libs/"
| #define PACKAGE "libpki"
| #define VERSION "0.8.9"
| #define HAVE_CALLOC 1
| #define STDC_HEADERS 1
| #define HAVE_SYS_WAIT_H 1
| #define HAVE_STDLIB_H 1
| #define HAVE_STRING_H 1
| #define HAVE_SYS_SOCKET_H 1
| #define HAVE_SYSLOG_H 1
| #define HAVE_SYS_SELECT_H 1
| / end confdefs.h. /
| #include <stdio.h>
| #ifdef HAVE_SYS_TYPES_H
| # include <sys/types.h>
| #endif
| #ifdef HAVE_SYS_STAT_H
| # include <sys/stat.h>
| #endif
| #ifdef STDC_HEADERS
| # include <stdlib.h>
| # include <stddef.h>
| #else
| # ifdef HAVE_STDLIB_H
| # include <stdlib.h>
| # endif
| #endif
| #ifdef HAVE_STRING_H
| # if !defined STDC_HEADERS && defined HAVE_MEMORY_H
| # include <memory.h>
| # endif
| # include <string.h>
| #endif
| #ifdef HAVE_STRINGS_H
| # include <strings.h>
| #endif
| #ifdef HAVE_INTTYPES_H
| # include <inttypes.h>
| #endif
| #ifdef HAVE_STDINT_H
| # include <stdint.h>
| #endif
| #ifdef HAVE_UNISTD_H
| # include <unistd.h>
| #endif
| #include <vfork.h>
configure:12875: result: no
configure:12875: checking vfork.h presence
configure:12875: gcc -E conftest.c
conftest.c:32:19: fatal error: vfork.h: No such file or directory
#include <vfork.h>
^
compilation terminated.
configure:12875: $? = 1
configure: failed program was:
| / confdefs.h /
| #define PACKAGE_NAME "libpki"
| #define PACKAGE_TARNAME "libpki"
| #define PACKAGE_VERSION "0.8.9"
| #define PACKAGE_STRING "libpki 0.8.9"
| #define PACKAGE_BUGREPORT "[email protected]"
| #define PACKAGE_URL ""
| #define ENABLE_ARCH_64 1
| #define STDC_HEADERS 1
| #define HAVE_SYS_TYPES_H 1
| #define HAVE_SYS_STAT_H 1
| #define HAVE_STDLIB_H 1
| #define HAVE_STRING_H 1
| #define HAVE_MEMORY_H 1
| #define HAVE_STRINGS_H 1
| #define HAVE_INTTYPES_H 1
| #define HAVE_STDINT_H 1
| #define HAVE_UNISTD_H 1
| #define HAVE_DLFCN_H 1
| #define LT_OBJDIR ".libs/"
| #define PACKAGE "libpki"
| #define VERSION "0.8.9"
| #define HAVE_CALLOC 1
| #define STDC_HEADERS 1
| #define HAVE_SYS_WAIT_H 1
| #define HAVE_STDLIB_H 1
| #define HAVE_STRING_H 1
| #define HAVE_SYS_SOCKET_H 1
| #define HAVE_SYSLOG_H 1
| #define HAVE_SYS_SELECT_H 1
| / end confdefs.h. /
| #include <vfork.h>
configure:12875: result: no
configure:12875: checking for vfork.h
configure:12875: result: no
configure:12888: checking for fork
configure:12888: gcc -o conftest -g -O2 conftest.c >&5
conftest.c:55:6: warning: conflicting types for built-in function 'fork' [enabled by default]
char fork ();
^
configure:12888: $? = 0
configure:12888: result: yes
configure:12888: checking for vfork
configure:12888: gcc -o conftest -g -O2 conftest.c >&5
configure:12888: $? = 0
configure:12888: result: yes
configure:12898: checking for working fork
configure:12920: gcc -o conftest -g -O2 conftest.c >&5
configure:12920: $? = 0
configure:12920: ./conftest
configure:12920: $? = 0
configure:12930: result: yes
configure:12951: checking for working vfork
configure:13061: result: yes
configure:13088: checking for stdlib.h
configure:13088: result: yes
configure:13098: checking for GNU libc compatible malloc
configure:13132: result: yes
configure:13156: checking for bzero
configure:13156: gcc -o conftest -g -O2 conftest.c >&5
conftest.c:61:6: warning: conflicting types for built-in function 'bzero' [enabled by default]
char bzero ();
^
configure:13156: $? = 0
configure:13156: result: yes
configure:13156: checking for memset
configure:13156: gcc -o conftest -g -O2 conftest.c >&5
conftest.c:62:6: warning: conflicting types for built-in function 'memset' [enabled by default]
char memset ();
^
configure:13156: $? = 0
configure:13156: result: yes
configure:13156: checking for setenv
configure:13156: gcc -o conftest -g -O2 conftest.c >&5
configure:13156: $? = 0
configure:13156: result: yes
configure:13156: checking for socket
configure:13156: gcc -o conftest -g -O2 conftest.c >&5
configure:13156: $? = 0
configure:13156: result: yes
configure:13156: checking for strcasecmp
configure:13156: gcc -o conftest -g -O2 conftest.c >&5
conftest.c:65:6: warning: conflicting types for built-in function 'strcasecmp' [enabled by default]
char strcasecmp ();
^
configure:13156: $? = 0
configure:13156: result: yes
configure:13156: checking for strchr
configure:13156: gcc -o conftest -g -O2 conftest.c >&5
conftest.c:66:6: warning: conflicting types for built-in function 'strchr' [enabled by default]
char strchr ();
^
configure:13156: $? = 0
configure:13156: result: yes
configure:13156: checking for strrchr
configure:13156: gcc -o conftest -g -O2 conftest.c >&5
conftest.c:67:6: warning: conflicting types for built-in function 'strrchr' [enabled by default]
char strrchr ();
^
configure:13156: $? = 0
configure:13156: result: yes
configure:13156: checking for strstr
configure:13156: gcc -o conftest -g -O2 conftest.c >&5
conftest.c:68:6: warning: conflicting types for built-in function 'strstr' [enabled by default]
char strstr ();
^
configure:13156: $? = 0
configure:13156: result: yes
configure:13173: checking checking for -fstack-check support
configure:13191: gcc -o conftest -g -O2 -fstack-check conftest.c >&5
configure:13191: $? = 0
configure:13191: ./conftest
configure:13191: $? = 0
configure:13206: result: yes
configure:13213: checking checking for -maccumulate-outgoing-args support
configure:13231: gcc -o conftest -g -O2 -fstack-check -maccumulate-outgoing-args conftest.c >&5
configure:13231: $? = 0
configure:13231: ./conftest
configure:13231: $? = 0
configure:13246: result: yes
configure:13712: gcc -o conftest -g -O2 -fstack-check -maccumulate-outgoing-args conftest.c >&5
configure:13712: $? = 0
configure:13712: ./conftest
configure:13712: $? = 0
configure:13741: gcc -o conftest -g -O2 -fstack-check -maccumulate-outgoing-args conftest.c >&5
configure:13741: $? = 0
configure:13741: ./conftest
configure:13741: $? = 0
configure:13760: checking for date
configure:13778: found /bin/date
configure:13790: result: /bin/date
configure:13800: checking for chmod
configure:13818: found /bin/chmod
configure:13830: result: /bin/chmod
configure:13840: checking for pkgmk
configure:13873: result: no
configure:13880: checking for rpm
configure:13898: found /bin/rpm
configure:13910: result: /bin/rpm
configure:13930: checking for perl
configure:13948: found /bin/perl
configure:13960: result: /bin/perl
configure:13971: checking for pthread_create in -lpthread
configure:13996: gcc -o conftest -g -O2 -fstack-check conftest.c -lpthread >&5
configure:13996: $? = 0
configure:14005: result: yes
configure:14018: result: Detecting pthread cflags ...
configure:14034: gcc -c -g -O2 -fstack-check conftest.c >&5
configure:14034: $? = 0
configure:14074: result: pthread cflags ... none
configure:14181: checking for bash
configure:14212: result: /bin/sh
configure:14222: checking for pod2man
configure:14240: found /bin/pod2man
configure:14253: result: /bin/pod2man
configure:14263: checking for mkdir
configure:14281: found /bin/mkdir
configure:14293: result: /bin/mkdir
configure:14303: checking for sed
configure:14333: result: /bin/sed
configure:14343: checking for gzip
configure:14361: found /bin/gzip
configure:14373: result: /bin/gzip
configure:14383: checking for gzip
configure:14401: found /bin/gzip
configure:14413: result: /bin/gzip
configure:14423: checking for tar
configure:14441: found /bin/tar
configure:14453: result: /bin/tar
configure:14463: checking for pwd
configure:14493: result: /usr/local/src/libpki
configure:14503: checking for chmod
configure:14533: result: /bin/chmod
configure:14543: checking for chown
configure:14561: found /bin/chown
configure:14573: result: /bin/chown
configure:14583: checking for cp
configure:14601: found /bin/cp
configure:14613: result: /bin/cp
configure:14623: checking for echo
configure:14641: found /bin/echo
configure:14653: result: /bin/echo
configure:14663: checking for doxygen
configure:14681: found /bin/doxygen
configure:14693: result: /bin/doxygen
configure:14703: checking for pdflatex
configure:14736: result: no
configure:14744: checking for pkg-config
configure:14760: found /bin/pkg-config
configure:14772: result: yes
configure:14791: checking for builder
configure:14824: result: no
configure:14891: checking checking for ldap vendor
configure:14990: result: LDAP VENDOR () ===> searching for Sun
configure:15015: checking checking for OpenLDAP vendor ()
configure:15041: result: LDAP VENDOR: OPENLDAP
configure:15060: result: LDAP Vendor......: OPENLDAP
configure:15062: result: LDAP CFLAGS......:
configure:15064: result: LDAP LDADD.......: -lldap_r
configure:15066: result: LDAP LDFLAGS.....:
configure:15138: checking for xml2-config
configure:15157: found /bin/xml2-config
configure:15169: result: /bin/xml2-config
configure:15205: result: with xml2-prefix : /usr
configure:15207: result: with xml2-cflags : -I/usr/include/libxml2
configure:15209: result: with xml2-ldflags : -L/usr/lib64
configure:15211: result: with xml2-ldadd : -lxml2 -lz -lm -ldl
configure:15275: checking for mysql_config
configure:15309: result: no
configure:15359: gcc -o conftest -I/include -L/lib -lmysqlclient_r conftest.c >&5
conftest.c:55:21: fatal error: mysql.h: No such file or directory
#include <mysql.h>
^
compilation terminated.
configure:15359: $? = 1
configure: program exited with status 1
configure: failed program was:
| / confdefs.h /
| #define PACKAGE_NAME "libpki"
| #define PACKAGE_TARNAME "libpki"
| #define PACKAGE_VERSION "0.8.9"
| #define PACKAGE_STRING "libpki 0.8.9"
| #define PACKAGE_BUGREPORT "[email protected]"
| #define PACKAGE_URL ""
| #define ENABLE_ARCH_64 1
| #define STDC_HEADERS 1
| #define HAVE_SYS_TYPES_H 1
| #define HAVE_SYS_STAT_H 1
| #define HAVE_STDLIB_H 1
| #define HAVE_STRING_H 1
| #define HAVE_MEMORY_H 1
| #define HAVE_STRINGS_H 1
| #define HAVE_INTTYPES_H 1
| #define HAVE_STDINT_H 1
| #define HAVE_UNISTD_H 1
| #define HAVE_DLFCN_H 1
| #define LT_OBJDIR ".libs/"
| #define PACKAGE "libpki"
| #define VERSION "0.8.9"
| #define HAVE_CALLOC 1
| #define STDC_HEADERS 1
| #define HAVE_SYS_WAIT_H 1
| #define HAVE_STDLIB_H 1
| #define HAVE_STRING_H 1
| #define HAVE_SYS_SOCKET_H 1
| #define HAVE_SYSLOG_H 1
| #define HAVE_SYS_SELECT_H 1
| #define HAVE_FORK 1
| #define HAVE_VFORK 1
| #define HAVE_WORKING_VFORK 1
| #define HAVE_WORKING_FORK 1
| #define HAVE_STDLIB_H 1
| #define HAVE_MALLOC 1
| #define HAVE_BZERO 1
| #define HAVE_MEMSET 1
| #define HAVE_SETENV 1
| #define HAVE_SOCKET 1
| #define HAVE_STRCASECMP 1
| #define HAVE_STRCHR 1
| #define HAVE_STRRCHR 1
| #define HAVE_STRSTR 1
| #define HAVE_GCC_PRAGMA_IGNORED 1
| #define HAVE_GCC_PRAGMA_POP 1
| #define HAVE_LIBPTHREAD 1
| #define HAVE_PTHREAD_RWLOCK 1
| #define LDAP_VENDOR_OPENLDAP 1
| #define HAVE_LDAP 1
| #define LDAP_VENDOR_OPENLDAP 1
| #define HAVE_XML2 1
| / end confdefs.h. /
|
| #include <mysql.h>
| int main(void) {
| MYSQL *x;
| return(0);
| }
configure:15399: result: ** WARNING::MySQL URLs are disabled! ****
configure:15448: checking for pg_config
configure:15482: result: no
configure:15531: gcc -o conftest -I/usr/include -L/usr/lib64 -lpq conftest.c >&5
conftest.c:55:24: fatal error: libpq-fe.h: No such file or directory
#include <libpq-fe.h>
^
compilation terminated.
configure:15531: $? = 1
configure: program exited with status 1
configure: failed program was:
| /* confdefs.h /
| #define PACKAGE_NAME "libpki"
| #define PACKAGE_TARNAME "libpki"
| #define PACKAGE_VERSION "0.8.9"
| #define PACKAGE_STRING "libpki 0.8.9"
| #define PACKAGE_BUGREPORT "[email protected]"
| #define PACKAGE_URL ""
| #define ENABLE_ARCH_64 1
| #define STDC_HEADERS 1
| #define HAVE_SYS_TYPES_H 1
| #define HAVE_SYS_STAT_H 1
| #define HAVE_STDLIB_H 1
| #define HAVE_STRING_H 1
| #define HAVE_MEMORY_H 1
| #define HAVE_STRINGS_H 1
| #define HAVE_INTTYPES_H 1
| #define HAVE_STDINT_H 1
| #define HAVE_UNISTD_H 1
| #define HAVE_DLFCN_H 1
| #define LT_OBJDIR ".libs/"
| #define PACKAGE "libpki"
| #define VERSION "0.8.9"
| #define HAVE_CALLOC 1
| #define STDC_HEADERS 1
| #define HAVE_SYS_WAIT_H 1
| #define HAVE_STDLIB_H 1
| #define HAVE_STRING_H 1
| #define HAVE_SYS_SOCKET_H 1
| #define HAVE_SYSLOG_H 1
| #define HAVE_SYS_SELECT_H 1
| #define HAVE_FORK 1
| #define HAVE_VFORK 1
| #define HAVE_WORKING_VFORK 1
| #define HAVE_WORKING_FORK 1
| #define HAVE_STDLIB_H 1
| #define HAVE_MALLOC 1
| #define HAVE_BZERO 1
| #define HAVE_MEMSET 1
| #define HAVE_SETENV 1
| #define HAVE_SOCKET 1
| #define HAVE_STRCASECMP 1
| #define HAVE_STRCHR 1
| #define HAVE_STRRCHR 1
| #define HAVE_STRSTR 1
| #define HAVE_GCC_PRAGMA_IGNORED 1
| #define HAVE_GCC_PRAGMA_POP 1
| #define HAVE_LIBPTHREAD 1
| #define HAVE_PTHREAD_RWLOCK 1
| #define LDAP_VENDOR_OPENLDAP 1
| #define HAVE_LDAP 1
| #define LDAP_VENDOR_OPENLDAP 1
| #define HAVE_XML2 1
| / end confdefs.h. /
|
| #include <libpq-fe.h>
| int main(void) {
| PGconn *sql;
| return(0);
| }
configure:15567: result: ** WARNING::PostgreSQL disabled! ****
configure:15623: gcc -c conftest.c >&5
configure:15623: $? = 0
configure:15685: result: enable_kmf: no
configure:15687: result: enable_openssl: yes
configure:15813: result: with openssl-prefix :
configure:15829: result: openssl lib dir : (default)
configure:15836: result: crypto package for token operations... OPENSSL
configure:15898: checking for pkg-config
configure:15916: found /bin/pkg-config
configure:15928: result: /bin/pkg-config
configure:15953: checking pkg-config is at least version 0.9.0
configure:15956: result: yes
configure:15966: checking for OPENSSL
configure:15973: $PKG_CONFIG --exists --print-errors "openssl >= $openssl_pkg_min_ver"
configure:15976: $? = 0
configure:15990: $PKG_CONFIG --exists --print-errors "openssl >= $openssl_pkg_min_ver"
configure:15993: $? = 0
configure:16033: result: yes
configure:16036: result: openssl 0.9.8 or greater found via pkgconfig
configure:16105: checking for OPENSSL
configure:16178: result: yes
configure:16181: result: OPENSSL 0.9.8 or greater found via pkg-config
configure:16361: gcc -o conftest conftest.c -lssl -lcrypto >&5
configure:16361: $? = 0
configure:16361: ./conftest
configure:16361: $? = 0
configure:16385: result: Library OPENSSL prefix... /usr
configure:16387: result: Library OPENSSL is SHARED...
configure:16389: result: Library OPENSSL C flags...
configure:16391: result: Library OPENSSL LD flags...
configure:16393: result: Library OPENSSL LIBS flags ...
configure:16407: result: OpenSSL Prefix: /usr
configure:16420: result: OpenSSL Prefix: /usr
configure:16457: result: OPENSSL ldflags: .................
configure:16459: result: OPENSSL ldadd: ................... -lssl -lcrypto
configure:16466: checking for library containing BIO_new
configure:16497: gcc -o conftest -lssl -lcrypto conftest.c >&5
configure:16497: $? = 0
configure:16514: result: none required
configure:16556: result: OpenSSL EC/ECDSA: Checking support in files
configure:16575: result: OpenSSL Support for EC/ECDSA: ............ yes
configure:16655: result: OPENSSL ldflags: .................
configure:16657: result: OPENSSL ldadd: ................... -lssl -lcrypto
configure:16680: result: enable engine support : yes
configure:16785: result: Removed /usr/lib64 from linking (non-existing dir)
configure:16790: result: Removing duplicate entries for -L/usr/lib64 from libpki_ldflags
configure:16794: result: Removed duplicate entries for -L/usr/lib64 from libpki_ldflags
configure:16812: result: Removed duplicate entries for -I/usr/include from libpki_cflags
configure:16854: result: Removed /usr/lib64 from linking (non-existing dir)
configure:16859: result: Removing duplicate entries for -L/usr/lib64 from my_ldflags
configure:16863: result: Removed duplicate entries for -L/usr/lib64 from my_ldflags
configure:16866: result: New my_ldflags: -L/usr/lib64 -L/usr/lib64
configure:16883: result: Removed duplicate entries for -I/usr/include from my_cflags
configure:17018: checking that generated files are newer than configure
configure:17024: result: done
configure:17107: creating ./config.status
----------------------
Running config.status.
----------------------
This file was extended by libpki config.status 0.8.9, which was
generated by GNU Autoconf 2.69. Invocation command line was
CONFIG_FILES =
CONFIG_HEADERS =
CONFIG_LINKS =
CONFIG_COMMANDS =
$ ./config.status
on template.cts.local
config.status:1284: creating Makefile
config.status:1284: creating src/global-vars
config.status:1392: WARNING: 'src/global-vars.in' seems to ignore the --datarootdir setting
config.status:1284: creating src/Makefile
config.status:1284: creating src/drivers/Makefile
config.status:1284: creating src/drivers/openssl/Makefile
config.status:1284: creating src/drivers/engine/Makefile
config.status:1284: creating src/drivers/pkcs11/Makefile
config.status:1284: creating src/drivers/kmf/Makefile
config.status:1284: creating src/openssl/Makefile
config.status:1284: creating src/io/Makefile
config.status:1284: creating src/net/Makefile
config.status:1284: creating src/scep/Makefile
config.status:1284: creating src/cms/Makefile
config.status:1284: creating src/prqp/Makefile
config.status:1284: creating src/lirt/Makefile
config.status:1284: creating src/tools/Makefile
config.status:1284: creating src/scripts/libpki-config
config.status:1284: creating src/tests/Makefile
config.status:1284: creating src/libpki/pki_config.h
config.status:1284: creating contrib/libpki.pc
config.status:1284: creating contrib/libpki-inst.xml
config.status:1284: creating examples/prqp/Makefile
config.status:1284: creating examples/profiles/Makefile
config.status:1284: creating examples/token/Makefile
config.status:1284: creating examples/url/Makefile
config.status:1284: creating examples/crl/Makefile
config.status:1284: creating examples/pkcs11/Makefile
config.status:1284: creating examples/pkcs12/Makefile
config.status:1284: creating examples/fips-mode/Makefile
config.status:1284: creating docs/Makefile
config.status:1284: creating docs/pkginfo
config.status:1284: creating etc/Makefile
config.status:1284: creating etc/profile.d/test.xml
config.status:1284: creating etc/profile.d/user.xml
config.status:1284: creating etc/profile.d/server.xml
config.status:1284: creating etc/store.d/empty.xml
config.status:1284: creating src/libpki/config.h
config.status:1513: executing libtool commands
config.status:1513: executing depfiles commands
----------------
Cache variables.
----------------
ac_cv_build=x86_64-unknown-linux-gnu
ac_cv_c_compiler_gnu=yes
ac_cv_c_const=yes
ac_cv_env_CC_set=
ac_cv_env_CC_value=
ac_cv_env_CFLAGS_set=
ac_cv_env_CFLAGS_value=
ac_cv_env_CPPFLAGS_set=
ac_cv_env_CPPFLAGS_value=
ac_cv_env_CPP_set=
ac_cv_env_CPP_value=
ac_cv_env_LDFLAGS_set=
ac_cv_env_LDFLAGS_value=
ac_cv_env_LIBS_set=
ac_cv_env_LIBS_value=
ac_cv_env_OPENSSL_CFLAGS_set=
ac_cv_env_OPENSSL_CFLAGS_value=
ac_cv_env_OPENSSL_LIBS_set=
ac_cv_env_OPENSSL_LIBS_value=
ac_cv_env_PKG_CONFIG_LIBDIR_set=
ac_cv_env_PKG_CONFIG_LIBDIR_value=
ac_cv_env_PKG_CONFIG_PATH_set=
ac_cv_env_PKG_CONFIG_PATH_value=
ac_cv_env_PKG_CONFIG_set=
ac_cv_env_PKG_CONFIG_value=
ac_cv_env_build_alias_set=
ac_cv_env_build_alias_value=
ac_cv_env_host_alias_set=
ac_cv_env_host_alias_value=
ac_cv_env_target_alias_set=
ac_cv_env_target_alias_value=
ac_cv_func_bzero=yes
ac_cv_func_fork=yes
ac_cv_func_fork_works=yes
ac_cv_func_malloc_0_nonnull=yes
ac_cv_func_memset=yes
ac_cv_func_setenv=yes
ac_cv_func_socket=yes
ac_cv_func_strcasecmp=yes
ac_cv_func_strchr=yes
ac_cv_func_strrchr=yes
ac_cv_func_strstr=yes
ac_cv_func_vfork=yes
ac_cv_func_vfork_works=yes
ac_cv_header_dlfcn_h=yes
ac_cv_header_inttypes_h=yes
ac_cv_header_memory_h=yes
ac_cv_header_stdc=yes
ac_cv_header_stdint_h=yes
ac_cv_header_stdlib_h=yes
ac_cv_header_string_h=yes
ac_cv_header_strings_h=yes
ac_cv_header_sys_select_h=yes
ac_cv_header_sys_socket_h=yes
ac_cv_header_sys_stat_h=yes
ac_cv_header_sys_types_h=yes
ac_cv_header_sys_wait_h=yes
ac_cv_header_syslog_h=yes
ac_cv_header_unistd_h=yes
ac_cv_header_vfork_h=no
ac_cv_host=x86_64-unknown-linux-gnu
ac_cv_lib_c_calloc=yes
ac_cv_lib_pthread_pthread_create=yes
ac_cv_objext=o
ac_cv_path_AR=/bin/ar
ac_cv_path_CHMOD=/bin/chmod
ac_cv_path_CHOWN=/bin/chown
ac_cv_path_CP=/bin/cp
ac_cv_path_DATE=/bin/date
ac_cv_path_DOXYGEN=/bin/doxygen
ac_cv_path_ECHO=/bin/echo
ac_cv_path_EGREP='/bin/grep -E'
ac_cv_path_FGREP='/bin/grep -F'
ac_cv_path_GREP=/bin/grep
ac_cv_path_GZIP=/bin/gzip
ac_cv_path_MAKE=/bin/make
ac_cv_path_MKDIR=/bin/mkdir
ac_cv_path_PERL=/bin/perl
ac_cv_path_POD2MAN=/bin/pod2man
ac_cv_path_PWD=/usr/local/src/libpki
ac_cv_path_RPM=/bin/rpm
ac_cv_path_SED=/bin/sed
ac_cv_path_SHELL=/bin/sh
ac_cv_path_TAR=/bin/tar
ac_cv_path_ZIP=/bin/gzip
ac_cv_path_ac_pt_PKG_CONFIG=/bin/pkg-config
ac_cv_path_install='/bin/install -c'
ac_cv_path_mkdir=/bin/mkdir
ac_cv_path_xml2_config=/bin/xml2-config
ac_cv_prog_AWK=gawk
ac_cv_prog_CPP='gcc -E'
ac_cv_prog_HAS_PKGCONF=yes
ac_cv_prog_ac_ct_AR=ar
ac_cv_prog_ac_ct_CC=gcc
ac_cv_prog_ac_ct_OBJDUMP=objdump
ac_cv_prog_ac_ct_RANLIB=ranlib
ac_cv_prog_ac_ct_STRIP=strip
ac_cv_prog_cc_c89=
ac_cv_prog_cc_g=yes
ac_cv_prog_make__bin_make_set=yes
ac_cv_prog_make_make_set=yes
ac_cv_search_BIO_new='none required'
ac_cv_struct_tm=time.h
ac_cv_target=x86_64-unknown-linux-gnu
ac_cv_type_pid_t=yes
am_cv_CC_dependencies_compiler_type=gcc3
am_cv_make_support_nested_variables=yes
am_cv_prog_cc_c_o=yes
jm_cv_func_working_malloc=yes
lt_cv_ar_at_file=@
lt_cv_archive_cmds_need_lc=no
lt_cv_deplibs_check_method=pass_all
lt_cv_file_magic_cmd='$MAGIC_CMD'
lt_cv_file_magic_test_file=
lt_cv_ld_reload_flag=-r
lt_cv_nm_interface='BSD nm'
lt_cv_objdir=.libs
lt_cv_path_LD=/bin/ld
lt_cv_path_NM='/bin/nm -B'
lt_cv_path_mainfest_tool=no
lt_cv_prog_compiler_c_o=yes
lt_cv_prog_compiler_pic='-fPIC -DPIC'
lt_cv_prog_compiler_pic_works=yes
lt_cv_prog_compiler_rtti_exceptions=no
lt_cv_prog_compiler_static_works=no
lt_cv_prog_gnu_ld=yes
lt_cv_sharedlib_from_linklib_cmd='printf %s\n'
lt_cv_shlibpath_overrides_runpath=no
lt_cv_sys_global_symbol_pipe='sed -n -e '''s/^. [ ][ ]([A-Za-z][A-Za-z0-9])$/\1 \2 \2/p''' | sed '''/ __gnu_lto/d''''
lt_cv_sys_global_symbol_to_c_name_address='sed -n -e '''s/^: ([^ ])[ ]$/ {"\1", (void ) 0},/p''' -e '''s/^[ABCDGIRSTW] ([^ ]) ([^ ])$/ {"\2", (void ) &\2},/p''''
lt_cv_sys_global_symbol_to_c_name_address_lib_prefix='sed -n -e '''s/^: ([^ ])[ ]$/ {"\1", (void ) 0},/p''' -e '''s/^[ABCDGIRSTW]_ ([^ ]) (lib[^ ])$/ {"\2", (void ) &\2},/p''' -e '''s/^[ABCDGIRSTW] ([^ ]) ([^ ])$/ {"lib\2", (void ) &\2},/p''''
lt_cv_sys_global_symbol_to_cdecl='sed -n -e '''s/^T . (.)$/extern int \1();/p''' -e '''s/^[ABCDGIRSTW] .* (.)$/extern char \1;/p''''
lt_cv_sys_max_cmd_len=1572864
lt_cv_to_host_file_cmd=func_convert_file_noop
lt_cv_to_tool_file_cmd=func_convert_file_noop
pkg_cv_OPENSSL_CFLAGS=' '
pkg_cv_OPENSSL_LIBS='-lssl -lcrypto '
-----------------
Output variables.
-----------------
ACLOCAL='${SHELL} /usr/local/src/libpki/build/missing aclocal-1.15'
AMDEPBACKSLASH=''
AMDEP_FALSE='#'
AMDEP_TRUE=''
AMTAR='$${TAR-tar}'
AM_BACKSLASH=''
AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)'
AM_DEFAULT_VERBOSITY='1'
AM_V='$(V)'
AR='/bin/ar '
AUTOCONF='${SHELL} /usr/local/src/libpki/build/missing autoconf'
AUTOHEADER='${SHELL} /usr/local/src/libpki/build/missing autoheader'
AUTOMAKE='${SHELL} /usr/local/src/libpki/build/missing automake-1.15'
AWK='gawk'
CC='gcc'
CCDEPMODE='depmode=gcc3'
CFLAGS='-g -O2 -fstack-check'
CHMOD='/bin/chmod'
CHOWN='/bin/chown'
CP='/bin/cp'
CPP='gcc -E'
CPPFLAGS=''
CPU='x86_64'
CXX=''
CYGPATH_W='echo'
DATE='/bin/date'
DEFS='-DHAVE_CONFIG_H'
DEPDIR='.deps'
DESTDIR=''
DIST_NAME='\S'
DIST_VERSION=''
DLLTOOL='false'
DOXYGEN='/bin/doxygen'
DSYMUTIL=''
DUMPBIN=''
ECHO='/bin/echo'
ECHO_C=''
ECHO_N='-n'
ECHO_T=''
EGREP='/bin/grep -E'
ENABLE_KMF_FALSE=''
ENABLE_KMF_TRUE='#'
ENABLE_OPENSSL_ENGINE_FALSE='#'
ENABLE_OPENSSL_ENGINE_TRUE=''
ENABLE_OPENSSL_FALSE='#'
ENABLE_OPENSSL_TRUE=''
EXEEXT=''
FGREP='/bin/grep -F'
GREP='/bin/grep'
GZIP='/bin/gzip'
HAS_PKGCONF='yes'
INSTALL_BUILDER=''
INSTALL_DATA='${INSTALL} -m 644'
INSTALL_PROGRAM='${INSTALL}'
INSTALL_SCRIPT='${INSTALL}'
INSTALL_STRIP_PROGRAM='$(install_sh) -c -s'
LD='/bin/ld -m elf_x86_64'
LDAP_PREFIX_FALSE=''
LDAP_PREFIX_TRUE='#'
LDFLAGS=''
LIBOBJS=''
LIBPKI_ARCH_AIX_FALSE=''
LIBPKI_ARCH_AIX_TRUE='#'
LIBPKI_ARCH_BSD_FALSE=''
LIBPKI_ARCH_BSD_TRUE='#'
LIBPKI_ARCH_HPUX_FALSE=''
LIBPKI_ARCH_HPUX_TRUE='#'
LIBPKI_ARCH_LINUX_FALSE='#'
LIBPKI_ARCH_LINUX_TRUE=''
LIBPKI_ARCH_OSX_FALSE=''
LIBPKI_ARCH_OSX_TRUE='#'
LIBPKI_ARCH_SOLARIS_FALSE=''
LIBPKI_ARCH_SOLARIS_TRUE='#'
LIBPKI_ENABLE_IPHONE_FALSE=''
LIBPKI_ENABLE_IPHONE_TRUE='#'
LIBS=''
LIBTOOL='$(SHELL) $(top_builddir)/libtool'
LIBTOOL_DEPS='build/ltmain.sh'
LIPO=''
LN_S='ln -s'
LTLIBOBJS=''
MAINT='#'
MAINTAINER_MODE_FALSE=''
MAINTAINER_MODE_TRUE='#'
MAKE='/bin/make'
MAKEINFO='${SHELL} /usr/local/src/libpki/build/missing makeinfo'
MANIFEST_TOOL=':'
MKDIR='/bin/mkdir'
MKDIR_P='/bin/mkdir -p'
MYSQL_CONFIG=''
MYSQL_CPPFLAGS=''
NM='/bin/nm -B'
NMEDIT=''
OBJDUMP='objdump'
OBJEXT='o'
OPENSSL_CFLAGS=' '
OPENSSL_LIBS='-lssl -lcrypto '
OPENSSL_PREFIX_FALSE=''
OPENSSL_PREFIX_TRUE='#'
OTOOL64=''
OTOOL=''
PACKAGE='libpki'
PACKAGE_BUGREPORT='[email protected]'
PACKAGE_NAME='libpki'
PACKAGE_STRING='libpki 0.8.9'
PACKAGE_TARNAME='libpki'
PACKAGE_URL=''
PACKAGE_VERSION='0.8.9'
PATH_SEPARATOR=':'
PDFLATEX=''
PERL='/bin/perl'
PG_CONFIG=''
PG_CPPFLAGS=''
PKGMK='rpm'
PKG_CONFIG='/bin/pkg-config'
PKG_CONFIG_LIBDIR=''
PKG_CONFIG_PATH=''
POD2MAN='/bin/pod2man'
PWD='/usr/local/src/libpki'
RANLIB='ranlib'
RC='1'
RPM='/bin/rpm'
SED='/bin/sed'
SET_MAKE=''
SHELL='/bin/sh'
STATIC_COMPILE_FALSE=''
STATIC_COMPILE_TRUE='#'
STRIP='strip'
TAR='/bin/tar'
TODAY='20161013'
VERSION='0.8.9'
ZIP='/bin/gzip'
ac_aux_dir='build'
ac_ct_AR='ar'
ac_ct_CC='gcc'
ac_ct_DUMPBIN=''
am__EXEEXT_FALSE=''
am__EXEEXT_TRUE='#'
am__fastdepCC_FALSE='#'
am__fastdepCC_TRUE=''
am__include='include'
am__isrc=''
am__leading_dot='.'
am__nodep='_no'
am__quote=''
am__tar='$${TAR-tar} chof - "$$tardir"'
am__untar='$${TAR-tar} xf -'
arch_target='x86_64'
bindir='${exec_prefix}/bin'
build='x86_64-unknown-linux-gnu'
build_alias=''
build_cpu='x86_64'
build_os='linux-gnu'
build_vendor='unknown'
conf_dir='file:///usr/etc'
datadir='${datarootdir}'
datarootdir='${prefix}/share'
dist_group='openca'
dist_user='madwolf'
docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
dvidir='${docdir}'
etc_dir='/usr/etc'
exec_prefix='${prefix}'
extra_checks='no'
host='x86_64-unknown-linux-gnu'
host_alias=''
host_cpu='x86_64'
host_os='linux-gnu'
host_vendor='unknown'
htmldir='${docdir}'
iface_age='9'
iface_current='89'
iface_revision='89'
iface_version='89'
include_dir='/usr/include'
include_prefix='/usr/include'
includedir='${prefix}/include'
infodir='${datarootdir}/info'
install_sh='${SHELL} /usr/local/src/libpki/build/install-sh'
kmf_cflags=''
kmf_ldadd=''
kmf_libflags=''
kmf_prefix=''
ldap_cflags=''
ldap_ldadd='-lldap_r'
ldap_ldflags=''
ldap_prefix=''
ldap_vendor='OPENLDAP'
lib_prefix='/usr/lib64'
libdir='/usr/lib64'
libexecdir='${exec_prefix}/libexec'
libpki_cflags='-I/usr/include -DENABLE_ECDSA=1 -I/usr/include/libxml2 '
libpki_ldadd='-lpthread'
libpki_ldflags='-L/usr/lib64 -lssl -lcrypto -L/usr/lib64'
localedir='${datarootdir}/locale'
localstatedir='${prefix}/var'
mandir='${datarootdir}/man'
mkdir_p='$(MKDIR_P)'
my_cflags='-I/usr/include -g -O2 -fstack-check -maccumulate-outgoing-args -DENABLE_ECDSA=1 -I/usr/include/libxml2 '
my_ldadd='-lpthread -ldl -lrt -lldap_r -lssl -lcrypto -lxml2 -lz -lm -ldl -lresolv'
my_ldflags='-L/usr/lib64 -L/usr/lib64'
myarch='linux'
mybits='64'
mybits_install='64'
mysql_cflags=''
mysql_config=''
mysql_ldadd=''
mysql_ldflags=''
mysql_prefix=''
oldincludedir='/usr/include'
openssl_cflags=' -DENABLE_ECDSA=1'
openssl_ldadd='-lssl -lcrypto '
openssl_ldflags=''
openssl_prefix='/usr'
openssl_static_libs=''
package_build='no'
package_prefix='/usr'
pdfdir='${docdir}'
pg_cflags=''
pg_config=''
pg_ldadd=''
pg_ldflags=''
pg_prefix=''
prefix='/usr'
program_transform_name='s,x,x,'
psdir='${docdir}'
pthread_opts=''
resolv_ldadd='-lresolv'
rpath='-Wl,-rpath -Wl,"/usr/lib64" '
sbindir='${exec_prefix}/sbin'
sdkver='5.0'
sharedstatedir='${prefix}/com'
shlext='so'
sys_cflags='-DLINUX'
sys_ldadd='-ldl -lrt'
sysconfdir='${prefix}/etc'
target='x86_64-unknown-linux-gnu'
target_alias=''
target_cpu='x86_64'
target_os='linux-gnu'
target_vendor='unknown'
test_libs=' -ldl -lrt'
xml2_cflags='-I/usr/include/libxml2'
xml2_config='/usr/bin/xml2-config'
xml2_ldadd='-lxml2 -lz -lm -ldl'
xml2_ldflags='-L/usr/lib64'
xml2_prefix='/usr'
xml2_prefix_FALSE='#'
xml2_prefix_TRUE=''
-----------
confdefs.h.
-----------
/* confdefs.h */
define PACKAGE_NAME "libpki"
define PACKAGE_TARNAME "libpki"
define PACKAGE_VERSION "0.8.9"
define PACKAGE_STRING "libpki 0.8.9"
define PACKAGE_BUGREPORT "[email protected]"
define PACKAGE_URL ""
define ENABLE_ARCH_64 1
define STDC_HEADERS 1
define HAVE_SYS_TYPES_H 1
define HAVE_SYS_STAT_H 1
define HAVE_STDLIB_H 1
define HAVE_STRING_H 1
define HAVE_MEMORY_H 1
define HAVE_STRINGS_H 1
define HAVE_INTTYPES_H 1
define HAVE_STDINT_H 1
define HAVE_UNISTD_H 1
define HAVE_DLFCN_H 1
define LT_OBJDIR ".libs/"
define PACKAGE "libpki"
define VERSION "0.8.9"
define HAVE_CALLOC 1
define STDC_HEADERS 1
define HAVE_SYS_WAIT_H 1
define HAVE_STDLIB_H 1
define HAVE_STRING_H 1
define HAVE_SYS_SOCKET_H 1
define HAVE_SYSLOG_H 1
define HAVE_SYS_SELECT_H 1
define HAVE_FORK 1
define HAVE_VFORK 1
define HAVE_WORKING_VFORK 1
define HAVE_WORKING_FORK 1
define HAVE_STDLIB_H 1
define HAVE_MALLOC 1
define HAVE_BZERO 1
define HAVE_MEMSET 1
define HAVE_SETENV 1
define HAVE_SOCKET 1
define HAVE_STRCASECMP 1
define HAVE_STRCHR 1
define HAVE_STRRCHR 1
define HAVE_STRSTR 1
define HAVE_GCC_PRAGMA_IGNORED 1
define HAVE_GCC_PRAGMA_POP 1
define HAVE_LIBPTHREAD 1
define HAVE_PTHREAD_RWLOCK 1
define LDAP_VENDOR_OPENLDAP 1
define HAVE_LDAP 1
define LDAP_VENDOR_OPENLDAP 1
define HAVE_XML2 1
define HAVE_LIBRESOLV 1
define ENABLE_OPENSSL 1
define ENABLE_ECDSA 1
define HAVE_ENGINE 1
define LIBPKI_TARGET_LINUX 1
configure: exit 0
But at the same time I'm able to compile it for any version of Ubuntu/Debian.
Add Support For OQS Provider and OpenSSL 3.x
Currently, support for Quantum-Safe algorithms is provided via the modified (requires patching) OpenSSL-1.1.1 from the OQS project. Since the branch is at the end of life, we need to support OQS via a different mechanism, the OQS provider.
The main drawback of this solution is the inability of providing the modified version of the code (the implementation for OQS sigs) that provides support for hash-n-sign with quantum-safe algorithms.
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.