pieterlexis / swede

A tool to create and verify TLSA (DANE) records
53 stars 11 forks source link

Mac OS X installation documentation #2

Open danyork opened 12 years ago

danyork commented 12 years ago

It would be great if there were installation instructions for people who want to try using swede on a Mac OS X system. I realize many (most?) users might be on or have easy access to Linux systems but in my case I want to demo swede on my laptop, which is a Mac.

For the dependencies of python-{unbound, argparse, ipaddr, m2crypto} :

In some web searching I could not find a packaged version of the python module for unbound that could be easily downloaded and installed. There is a page on the unbound site about the python module that includes a link (on the word "here"):

http://www.unbound.net/documentation/pythonmod/install.html

but the link is dead. Another page on the Unbound site seems to be more recent:

http://www.unbound.net/documentation/pyunbound/install.html

and indicates you need to compile unbound with "--with-pyunbound".

When I have downloaded unbound-1.4.18 on my Mac and tried to do a "configure", I wind up with the error that it doesn't support OpenSSL 1.0.0:

configure: error: OpenSSL 1.0.0 is needed for GOST support

I gather from searching online that Apple is not a fan of OpenSSL ( http://ludovicrousseau.blogspot.com/2011/08/mac-os-x-lion-and-openssl.html ) and so it looks like one needs to install OpenSSL manually.

(The irony of all of this is that I already have unbound running on my Mac via my installation of DNSSEC-Trigger but the python module does not seem to be available.)

Anyway, I would be glad to contribute some installation instructions for Mac OS X once I can sort out how to get it working. (any thoughts on the text above would be welcome)

pieterlexis commented 12 years ago

I don't have a mac to test, but you could try to configure unbound with:

--with-pyunbound --disable-gost --with-libunbound-only

That should build the library and pyUnbound without the need for a newer OpenSSL.

I'm very interested in the install instructions for different platforms, as I'm working on a new version of swede called called tlsa that will be included in the 'hash-slinger' package.

edit:

Skimming that blog article, just extract openssl somewhere and build it (without installing) and build a static version of libunbound using the headers and libs from the built openssl?