Home page logo
/

nmap-dev logo Nmap Development mailing list archives

Re: Problems building nmap with SSL
From: Michael Berg <mberg447 () comcast net>
Date: Thu, 09 Oct 2003 19:08:02 -0600

I had to compile some other SSL dependant code on a Red Hat 9 system recently and ran into similar problems. I'm not at a Red Hat system at the moment (I prefer Debian for personal use), but here's a rough recount of what I had to do.

Red Hat 9's openssl libs are linked against the kerberos5 libs, but Red Hat has the krb5 libs in a location that the normal include path doesn't check. That's why you've got errors about krb5.h not being found and parse errors near krb5 and ssl structures.

This wasn't in nmap, but in the other software I was compiling on a Red Hat 9 system, I had to modify the CFLAGS definition to also include something like "-I/path/to/kerberos/libs/" where /path/to/kerberos/libs/ is wherever krb5.h is. (Like I said, I'm not on a RH9 box at the moment, so I don't remember exactly where they stuffed it. Try locate or find.)

Once you do that and regenerate any configure scripts and Makefiles that need to know about the change, it will find the needed kerberos header files. I can't remember if the krb5 libraries were in a weird spot and needed some linker options passed as well. Try the include path, and if the fails during linking, check into that.

I hope this helps.
Michael


Todd wrote:

I'm trying to compile the latest nmap (3.48) with
SSL support on a Red Hat 9 system. I updated OpenSSL
and Kerberso RPMs to the latest and applied the
patch posted by Fyodor on October 6th.

I ran configure like so:

./configure --with-openssl=/usr/include/openssl/

Then I ran make with this result:

##### make output ####
gcc -c  -g -O2 -Wall  -I../../nbase  -DHAVE_CONFIG_H -DNSOCK_VERSION=\"0.01\"  -I../include nsock_connect.c -o 
nsock_connect.o
In file included from /usr/include/openssl/ssl.h:179,
                from nsock_ssl.h:60,
                from nsock_internal.h:69,
                from nsock_connect.c:50:
/usr/include/openssl/kssl.h:72:18: krb5.h: No such file or directory
In file included from /usr/include/openssl/ssl.h:179,
                from nsock_ssl.h:60,
                from nsock_internal.h:69,
                from nsock_connect.c:50:
/usr/include/openssl/kssl.h:134: parse error before "krb5_enctype"
/usr/include/openssl/kssl.h:136: parse error before '*' token
/usr/include/openssl/kssl.h:137: parse error before '}' token
/usr/include/openssl/kssl.h:149: parse error before "kssl_ctx_setstring"
/usr/include/openssl/kssl.h:149: parse error before '*' token
/usr/include/openssl/kssl.h:150: parse error before '*' token
/usr/include/openssl/kssl.h:151: parse error before '*' token
/usr/include/openssl/kssl.h:151: parse error before '*' token
/usr/include/openssl/kssl.h:152: parse error before '*' token
/usr/include/openssl/kssl.h:153: parse error before "kssl_ctx_setprinc"
/usr/include/openssl/kssl.h:153: parse error before '*' token
/usr/include/openssl/kssl.h:155: parse error before "kssl_cget_tkt"
/usr/include/openssl/kssl.h:155: parse error before '*' token
/usr/include/openssl/kssl.h:157: parse error before "kssl_sget_tkt"
/usr/include/openssl/kssl.h:157: parse error before '*' token
/usr/include/openssl/kssl.h:159: parse error before "kssl_ctx_setkey"
/usr/include/openssl/kssl.h:159: parse error before '*' token
/usr/include/openssl/kssl.h:161: parse error before "context"
/usr/include/openssl/kssl.h:162: parse error before "kssl_build_principal_2"
/usr/include/openssl/kssl.h:162: parse error before "context"
/usr/include/openssl/kssl.h:165: parse error before "kssl_validate_times"
/usr/include/openssl/kssl.h:165: parse error before "atime"
/usr/include/openssl/kssl.h:167: parse error before "kssl_check_authent"
/usr/include/openssl/kssl.h:167: parse error before '*' token
/usr/include/openssl/kssl.h:169: parse error before "enctype"
In file included from nsock_ssl.h:60,
                from nsock_internal.h:69,
                from nsock_connect.c:50:
/usr/include/openssl/ssl.h:909: parse error before "KSSL_CTX"
/usr/include/openssl/ssl.h:931: parse error before '}' token
make[1]: *** [nsock_connect.o] Error 1
make[1]: Leaving directory `/root/nmap-3.48/nsock/src'
make: *** [nsock/src/libnsock.a] Error 2
#### END make output ####

Any ideas how to get over this hump?

Thanks!

-Todd


---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).



--
The difference between common-sense and paranoia is that common-sense
is thinking everyone is out to get you. That's normal -- they are.
Paranoia is thinking that they're conspiring.
               -- J. Kegler

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]