Re: Current SVN fails to build / link on CentOS 5.5

[David Fifield <david () bamsoftware com>]

On Wed, Aug 18, 2010 at 03:54:27PM -0700, alexandru wrote:
> Hi,
>
> On 2010-08-18, at 11:32 AM, Thomas Buchanan wrote:
>
> > Hello,
> >
> > While trying to compile and test a recent SVN build (rev 19863), I
> > noticed the following failure on a CentOS 5.5 box:
> >
> > gcc -o ncat -g -O2 -Wall  ncat_main.o ncat_connect.o ncat_core.o
> > ncat_posix.o ncat_listen.o ncat_proxy.o ncat_broker.o ncat_hostmatch.o
> > ncat_ssl.o base64.o http.o util.o sys_wrap.o http_digest.o
> > ../nsock/src/libnsock.a ../nbase/libnbase.a -lssl -lcrypto -lpcap -lssl
> > -lcrypto -ldl
> > ../nsock/src/libnsock.a(nsock_core.o): In function
> > `handle_connect_result':
> > /home/tbuchanan/dev/svn/nmap/nsock/src/nsock_core.c:423: undefined
> > reference to `SSL_set_tlsext_host_name'
> > collect2: ld returned 1 exit status
> > make[1]: *** [ncat] Error 1
> > make[1]: Leaving directory `/home/tbuchanan/dev/svn/nmap/ncat'
> > make: *** [ncat_build] Error 2
>
> My 5.5 install ships with openssl-devel 0.9.8e. I've just tested this
> and it seems SSL_set_tlsext_host_name was introduced in openssl-1.

http://www.openssl.org/news/changelog.html seems to be wrong in claiming
that it was introduced in 1.0.0a. I have 0.9.8k and it works for me. I
checked the CHANGES file in the distribution and it says that the
function was introduced in 0.9.8f.

r19881 should fix the problem. It avoids using the function (actually a
macro) if it's not available. This will break SNI for those with an
OpenSSL too old to support it.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/