search

OpenSC / pkcs11-helper

Library that simplifies the interaction with PKCS#11 providers for end-user applications using a simple API and optional OpenSSL engine
Other
65 stars 43 forks source link

1.27.0: build fails with nss-3.70 #43

Closed gg3nx closed 3 years ago

gg3nx commented 3 years ago

Distro: Arch Linux Versions:

After getting and extracting pkcs11-helper-1.27.0.tar.bz2, launch configure with default args then make:


[xxx@computer pkcs11-helper-1.27.0]$ ./configure
checking for a BSD-compatible install... /bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /sbin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking whether make supports nested variables... yes
checking build system type... x86_64-pc-linux-gnu
checking host system type... x86_64-pc-linux-gnu
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking whether gcc understands -c and -o together... yes
checking whether make supports the include directive... yes (GNU style)
checking dependency style of gcc... gcc3
checking for pkg-config... /sbin/pkg-config
checking pkg-config is at least version 0.9.0... yes
checking for m4... m4
checking how to print strings... printf
checking for a sed that does not truncate output... /sbin/sed
checking for grep that handles long lines and -e... /sbin/grep
checking for egrep... /sbin/grep -E
checking for fgrep... /sbin/grep -F
checking for ld used by gcc... /sbin/ld
checking if the linker (/sbin/ld) is GNU ld... yes
checking for BSD- or MS-compatible name lister (nm)... /sbin/nm -B
checking the name lister (/sbin/nm -B) interface... BSD nm
checking whether ln -s works... yes
checking the maximum length of command line arguments... 1572864
checking how to convert x86_64-pc-linux-gnu file names to x86_64-pc-linux-gnu format... func_convert_file_noop
checking how to convert x86_64-pc-linux-gnu file names to toolchain format... func_convert_file_noop
checking for /sbin/ld option to reload object files... -r
checking for objdump... objdump
checking how to recognize dependent libraries... pass_all
checking for dlltool... no
checking how to associate runtime and link libraries... printf %s\n
checking for ar... ar
checking for archiver @FILE support... @
checking for strip... strip
checking for ranlib... ranlib
checking command to parse /sbin/nm -B output from gcc object... ok
checking for sysroot... no
checking for a working dd... /sbin/dd
checking how to truncate binary pipes... /sbin/dd bs=4096 count=1
checking for mt... no
checking if : is a manifest tool... no
checking how to run the C preprocessor... gcc -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking for dlfcn.h... yes
checking for objdir... .libs
checking if gcc supports -fno-rtti -fno-exceptions... no
checking for gcc option to produce PIC... -fPIC -DPIC
checking if gcc PIC flag -fPIC -DPIC works... yes
checking if gcc static flag -static works... yes
checking if gcc supports -c -o file.o... yes
checking if gcc supports -c -o file.o... (cached) yes
checking whether the gcc linker (/sbin/ld -m elf_x86_64) supports shared libraries... yes
checking whether -lc should be explicitly linked in... no
checking dynamic linker characteristics... GNU/Linux ld.so
checking how to hardcode library paths into programs... immediate
checking whether stripping libraries is possible... yes
checking if libtool supports shared libraries... yes
checking whether to build shared libraries... yes
checking whether to build static libraries... yes
checking for windres... no
checking whether time.h and sys/time.h may both be included... yes
checking for sys/time.h... yes
checking for unistd.h... (cached) yes
checking for alarm... yes
checking for working mktime... yes
checking for vprintf... yes
checking for _doprnt... no
checking for gettimeofday... yes
checking for memmove... yes
checking for memset... yes
checking for socket... yes
checking for strchr... yes
checking for strdup... yes
checking for strerror... yes
checking for strrchr... yes
checking for snprintf... yes
checking for dlopen in -ldl... yes
checking for pthread_create in -lpthread... yes
checking for libcrypto >= 0.9.7... yes
checking for RSA_meth_dup... yes
checking for RSA_meth_free... yes
checking for RSA_meth_set_priv_enc... yes
checking for RSA_meth_set_priv_dec... yes
checking for RSA_meth_set1_name... yes
checking for RSA_meth_set_flags... yes
checking for DSA_meth_dup... yes
checking for DSA_meth_free... yes
checking for DSA_meth_set_sign... yes
checking for DSA_meth_set1_name... yes
checking for DSA_SIG_set0... yes
checking for ECDSA_SIG_set0... yes
checking for EC_KEY_METHOD_get_sign... yes
checking for EC_KEY_METHOD_set_sign... yes
checking for X509_get0_notBefore... yes
checking for X509_get0_notAfter... yes
checking for EC_KEY_METHOD_new... yes
checking for OpenSSL ec support... yes
checking for gnutls >= 1.4... yes
checking for nss >= 3.11... yes
checking for mbedtls_x509_crt_init in -lmbedtls... yes
checking mbedtls/x509_crt.h usability... yes
checking mbedtls/x509_crt.h presence... yes
checking for mbedtls/x509_crt.h... yes
checking for ANSI C header files... (cached) yes
checking for ISO C 1999 vararg macro support... yes
checking for GNU GCC vararg macro support... yes
checking for an ANSI C-conforming const... yes
checking for inline... inline
checking for working volatile... yes
checking for off_t... yes
checking for pid_t... yes
checking for size_t... yes
checking whether time.h and sys/time.h may both be included... (cached) yes
checking whether struct tm is in sys/time.h or time.h... time.h
checking for size_t... (cached) yes
checking size of size_t... 8
checking size_t printf format... %016lx
checking stdio.h usability... yes
checking stdio.h presence... yes
checking for stdio.h... yes
checking for stdlib.h... (cached) yes
checking stdargs.h usability... no
checking stdargs.h presence... no
checking for stdargs.h... no
checking malloc.h usability... yes
checking malloc.h presence... yes
checking for malloc.h... yes
checking ctype.h usability... yes
checking ctype.h presence... yes
checking for ctype.h... yes
checking for string.h... (cached) yes
checking errno.h usability... yes
checking errno.h presence... yes
checking for errno.h... yes
checking assert.h usability... yes
checking assert.h presence... yes
checking for assert.h... yes
checking time.h usability... yes
checking time.h presence... yes
checking for time.h... yes
checking signal.h usability... yes
checking signal.h presence... yes
checking for signal.h... yes
checking for dlfcn.h... (cached) yes
checking for unistd.h... (cached) yes
checking for sys/time.h... (cached) yes
checking pthread.h usability... yes
checking pthread.h presence... yes
checking for pthread.h... yes
checking OpenSSL interface... yes
checking Win32 crypto engine... no
checking OpenSSL crypto engine... yes
checking GnuTLS crypto engine... yes
checking NSS crypto engine... yes
checking mbed TLS crypto engine... yes
checking that generated files are newer than configure... done
configure: creating ./config.status
config.status: creating Makefile
config.status: creating config-w32-vc.h
config.status: creating include/Makefile
config.status: creating include/pkcs11-helper-1.0/Makefile
config.status: creating include/pkcs11-helper-1.0/pkcs11h-version.h
config.status: creating man/Makefile
config.status: creating doc/Makefile
config.status: creating doc/api/Makefile
config.status: creating doc/api/Doxyfile
config.status: creating lib/Makefile
config.status: creating lib/libpkcs11-helper-1.pc
config.status: creating lib/versioninfo.rc
config.status: creating m4dir/Makefile
config.status: creating distro/Makefile
config.status: creating distro/rpm/Makefile
config.status: creating distro/rpm/pkcs11-helper.spec
config.status: creating distro/debian/Makefile
config.status: creating tests/Makefile
config.status: creating tests/test-basic/Makefile
config.status: creating tests/test-certificate/Makefile
config.status: creating tests/test-fork/Makefile
config.status: creating tests/test-openssl/Makefile
config.status: creating tests/test-slotevent/Makefile
config.status: creating config.h
config.status: executing depfiles commands
config.status: executing libtool commands
[xxx@computer pkcs11-helper-1.27.0]$ make
make  all-recursive
make[1]: Entering directory '/home/xxx/src/pkcs11-helper-1.27.0'
Making all in man
make[2]: Entering directory '/home/xxx/src/pkcs11-helper-1.27.0/man'
make[2]: Nothing to be done for 'all'.
make[2]: Leaving directory '/home/xxx/src/pkcs11-helper-1.27.0/man'
Making all in include
make[2]: Entering directory '/home/xxx/src/pkcs11-helper-1.27.0/include'
Making all in pkcs11-helper-1.0
make[3]: Entering directory '/home/xxx/src/pkcs11-helper-1.27.0/include/pkcs11-helper-1.0'
make[3]: Nothing to be done for 'all'.
make[3]: Leaving directory '/home/xxx/src/pkcs11-helper-1.27.0/include/pkcs11-helper-1.0'
make[3]: Entering directory '/home/xxx/src/pkcs11-helper-1.27.0/include'
make[3]: Nothing to be done for 'all-am'.
make[3]: Leaving directory '/home/xxx/src/pkcs11-helper-1.27.0/include'
make[2]: Leaving directory '/home/xxx/src/pkcs11-helper-1.27.0/include'
Making all in lib
make[2]: Entering directory '/home/xxx/src/pkcs11-helper-1.27.0/lib'
cat "./core.exports" > pkcs11-helper.exports
cat "./certificate.exports" >> pkcs11-helper.exports
cat "./data.exports" >> pkcs11-helper.exports
cat "./openssl.exports" >> pkcs11-helper.exports
cat "./slotevent.exports" >> pkcs11-helper.exports
cat "./token.exports" >> pkcs11-helper.exports
make  all-am
make[3]: Entering directory '/home/xxx/src/pkcs11-helper-1.27.0/lib'
/bin/sh ../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I..  -I../include -I../include   -g -O2  -I/usr/include/p11-kit-1  -I/usr/include/nss -I/usr/include/nspr   -MT pkcs11h-mem.lo -MD -MP -MF .deps/pkcs11h-mem.Tpo -c -o pkcs11h-mem.lo pkcs11h-mem.c
libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I../include -I../include -g -O2 -I/usr/include/p11-kit-1 -I/usr/include/nss -I/usr/include/nspr -MT pkcs11h-mem.lo -MD -MP -MF .deps/pkcs11h-mem.Tpo -c pkcs11h-mem.c  -fPIC -DPIC -o .libs/pkcs11h-mem.o
libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I../include -I../include -g -O2 -I/usr/include/p11-kit-1 -I/usr/include/nss -I/usr/include/nspr -MT pkcs11h-mem.lo -MD -MP -MF .deps/pkcs11h-mem.Tpo -c pkcs11h-mem.c -o pkcs11h-mem.o >/dev/null 2>&1
mv -f .deps/pkcs11h-mem.Tpo .deps/pkcs11h-mem.Plo
/bin/sh ../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I..  -I../include -I../include   -g -O2  -I/usr/include/p11-kit-1  -I/usr/include/nss -I/usr/include/nspr   -MT pkcs11h-sys.lo -MD -MP -MF .deps/pkcs11h-sys.Tpo -c -o pkcs11h-sys.lo pkcs11h-sys.c
libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I../include -I../include -g -O2 -I/usr/include/p11-kit-1 -I/usr/include/nss -I/usr/include/nspr -MT pkcs11h-sys.lo -MD -MP -MF .deps/pkcs11h-sys.Tpo -c pkcs11h-sys.c  -fPIC -DPIC -o .libs/pkcs11h-sys.o
libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I../include -I../include -g -O2 -I/usr/include/p11-kit-1 -I/usr/include/nss -I/usr/include/nspr -MT pkcs11h-sys.lo -MD -MP -MF .deps/pkcs11h-sys.Tpo -c pkcs11h-sys.c -o pkcs11h-sys.o >/dev/null 2>&1
mv -f .deps/pkcs11h-sys.Tpo .deps/pkcs11h-sys.Plo
/bin/sh ../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I..  -I../include -I../include   -g -O2  -I/usr/include/p11-kit-1  -I/usr/include/nss -I/usr/include/nspr   -MT pkcs11h-crypto.lo -MD -MP -MF .deps/pkcs11h-crypto.Tpo -c -o pkcs11h-crypto.lo pkcs11h-crypto.c
libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I../include -I../include -g -O2 -I/usr/include/p11-kit-1 -I/usr/include/nss -I/usr/include/nspr -MT pkcs11h-crypto.lo -MD -MP -MF .deps/pkcs11h-crypto.Tpo -c pkcs11h-crypto.c  -fPIC -DPIC -o .libs/pkcs11h-crypto.o
libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I../include -I../include -g -O2 -I/usr/include/p11-kit-1 -I/usr/include/nss -I/usr/include/nspr -MT pkcs11h-crypto.lo -MD -MP -MF .deps/pkcs11h-crypto.Tpo -c pkcs11h-crypto.c -o pkcs11h-crypto.o >/dev/null 2>&1
mv -f .deps/pkcs11h-crypto.Tpo .deps/pkcs11h-crypto.Plo
/bin/sh ../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I..  -I../include -I../include   -g -O2  -I/usr/include/p11-kit-1  -I/usr/include/nss -I/usr/include/nspr   -MT _pkcs11h-crypto-openssl.lo -MD -MP -MF .deps/_pkcs11h-crypto-openssl.Tpo -c -o _pkcs11h-crypto-openssl.lo _pkcs11h-crypto-openssl.c
libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I../include -I../include -g -O2 -I/usr/include/p11-kit-1 -I/usr/include/nss -I/usr/include/nspr -MT _pkcs11h-crypto-openssl.lo -MD -MP -MF .deps/_pkcs11h-crypto-openssl.Tpo -c _pkcs11h-crypto-openssl.c  -fPIC -DPIC -o .libs/_pkcs11h-crypto-openssl.o
libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I../include -I../include -g -O2 -I/usr/include/p11-kit-1 -I/usr/include/nss -I/usr/include/nspr -MT _pkcs11h-crypto-openssl.lo -MD -MP -MF .deps/_pkcs11h-crypto-openssl.Tpo -c _pkcs11h-crypto-openssl.c -o _pkcs11h-crypto-openssl.o >/dev/null 2>&1
mv -f .deps/_pkcs11h-crypto-openssl.Tpo .deps/_pkcs11h-crypto-openssl.Plo
/bin/sh ../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I..  -I../include -I../include   -g -O2  -I/usr/include/p11-kit-1  -I/usr/include/nss -I/usr/include/nspr   -MT _pkcs11h-crypto-nss.lo -MD -MP -MF .deps/_pkcs11h-crypto-nss.Tpo -c -o _pkcs11h-crypto-nss.lo _pkcs11h-crypto-nss.c
libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I../include -I../include -g -O2 -I/usr/include/p11-kit-1 -I/usr/include/nss -I/usr/include/nspr -MT _pkcs11h-crypto-nss.lo -MD -MP -MF .deps/_pkcs11h-crypto-nss.Tpo -c _pkcs11h-crypto-nss.c  -fPIC -DPIC -o .libs/_pkcs11h-crypto-nss.o
In file included from /usr/include/nss/keythi.h:10,
                 from /usr/include/nss/cert.h:21,
                 from _pkcs11h-crypto-nss.c:58:
/usr/include/nss/secmodt.h:79:5: error: unknown type name ‘CK_NSS_GetFIPSStatus’
   79 |     CK_NSS_GetFIPSStatus fipsIndicator;
      |     ^~~~~~~~~~~~~~~~~~~~
make[3]: *** [Makefile:613: _pkcs11h-crypto-nss.lo] Error 1
make[3]: Leaving directory '/home/xxx/src/pkcs11-helper-1.27.0/lib'
make[2]: *** [Makefile:491: all] Error 2
make[2]: Leaving directory '/home/xxx/src/pkcs11-helper-1.27.0/lib'
make[1]: *** [Makefile:546: all-recursive] Error 1
make[1]: Leaving directory '/home/xxx/src/pkcs11-helper-1.27.0'
make: *** [Makefile:455: all] Error 2
[xxx@computer pkcs11-helper-1.27.0]$```
alonbl commented 3 years ago

Please try master, it should resolve the issue.

gg3nx commented 3 years ago

I confirm issue is resolved with master branch. I'll open a bug in Arch to include patch 083a3a62f2e631deec2fb2799d10660a41c50294 until next official release. Thanks