On Thu, 2019-04-25 at 09:18 -0400, Smithy Smith wrote: > Hello Openconnect Team, > > I am trying to build openconnect 8.02 on my Ubuntu 18.04 machine. > After running the "./configure --without-gnutls > --with-vpnc-script=/usr/share/vpnc-scripts/vpnc-script" command, I run > "make". Near the end I get the following error: > > openssl-pkcs11.c: In function ‘slot_login’: > openssl-pkcs11.c:253:27: error: ‘ERR_LIB_PKCS11’ undeclared (first use > in this function); did you mean ‘ERR_LIB_PKCS12’? > if (ERR_GET_LIB(err) == ERR_LIB_PKCS11 && > ^~~~~~~~~~~~~~ > ERR_LIB_PKCS12 > openssl-pkcs11.c:253:27: note: each undeclared identifier is reported > only once for each function it appears in > openssl-pkcs11.c:254:28: error: ‘PKCS11_F_PKCS11_LOGIN’ undeclared > (first use in this function); did you mean ‘CKR_F_PKCS11_LOGIN’? > ERR_GET_FUNC(err) == PKCS11_F_PKCS11_LOGIN) > ^~~~~~~~~~~~~~~~~~~~~ > CKR_F_PKCS11_LOGIN > Makefile:1222: recipe for target 'libopenconnect_la-openssl-pkcs11.lo' failed > make[1]: *** [libopenconnect_la-openssl-pkcs11.lo] Error 1 > make[1]: Leaving directory '/tmp/openconnect-8.02' > Makefile:697: recipe for target 'all' failed > make: *** [all] Error 2 > > > Based on the above, I manually changed the openssl-pkcs11.c file, > replacing "ERR_LIB_PKCS11" with "ERR_LIB_PKCS12" and replacing > "PKCS11_F_PKCS11_LOGIN" with "CKR_F_PKCS11_LOGIN". After changing the > openssl-pkcs11.c file, the "make" completes and I can run openconnect. > But when I use my smartcard with openconnect, I never get prompted for > my pin, and I see the following errors, "Missing > CKA_ALWAYS_AUTHENTICATE attribute", and "SSL connection failure". I > am not sure if my manual changes to the openssl-pkcs11.c file caused > these problems. Ubuntu ships a known-broken version of libp11. Please update libp11 to a newer version. Or better still, build with GnuTLS instead of OpenSSL.
Attachment:
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ openconnect-devel mailing list openconnect-devel@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/openconnect-devel
