Hello, I wanted to try out this particular setting for ocserv tls-priorities = "NONE:%SERVER_PRECEDENCE:PFS? PFS is only available on 3.3.x, but ubuntu only have GnuTLS 3.2.x package, so I build 3.3.9 from source, and during ./configure I saw this output: configure: External hardware support: /dev/crypto: no Hardware accel: x86-64 Padlock accel: yes PKCS#11 support: no TPM support: no With GnuTLS installed, I try to configure and make ocserv, but saw this error: sec-mod.o: In function `sec_mod_server': /home/dev/tools/ocserv-0.8.6/src/sec-mod.c:458: undefined reference to `gnutls_pkcs11_reinit' collect2: error: ld returned 1 exit status Since it was building correctly with gnutls 3.2.x previously, I suspect I missed something when building gnutls 3.3.x, I tried to configure GnuTLS build using --without-p11-kit, but same error appears. Looking at ocserv source, it does check for pkcs11 support in GnuTLS before invoking, what can I do to make this build successful? Suggestion much appreciated.
