Re: Problems building nmap with SSL

[Michael Berg <mberg447 () comcast net>]

I had to compile some other SSL dependant code on a Red Hat 9 system 
recently and ran into similar problems.  I'm not at a Red Hat system at 
the moment (I prefer Debian for personal use), but here's a rough 
recount of what I had to do.

Red Hat 9's openssl libs are linked against the kerberos5 libs, but Red 
Hat has the krb5 libs in a location that the normal include path doesn't 
check.  That's why you've got errors about krb5.h not being found and 
parse errors near krb5 and ssl structures.

This wasn't in nmap, but in the other software I was compiling on a Red 
Hat 9 system, I had to modify the CFLAGS definition to also include 
something like "-I/path/to/kerberos/libs/"  where 
/path/to/kerberos/libs/ is wherever krb5.h is.  (Like I said, I'm not on 
a RH9 box at the moment, so I don't remember exactly where they stuffed 
it.  Try locate or find.)

Once you do that and regenerate any configure scripts and Makefiles that 
need to know about the change, it will find the needed kerberos header 
files.  I can't remember if the krb5 libraries were in a weird spot and 
needed some linker options passed as well.  Try the include path, and if 
the fails during linking, check into that.

I hope this helps.
Michael


Todd wrote:

> I'm trying to compile the latest nmap (3.48) with
> SSL support on a Red Hat 9 system. I updated OpenSSL
> and Kerberso RPMs to the latest and applied the
> patch posted by Fyodor on October 6th.
>
> I ran configure like so:
>
> ./configure --with-openssl=/usr/include/openssl/
>
> Then I ran make with this result:
>
> ##### make output ####
> gcc -c  -g -O2 -Wall  -I../../nbase  -DHAVE_CONFIG_H -DNSOCK_VERSION=\"0.01\"  -I../include nsock_connect.c -o 
> nsock_connect.o
> In file included from /usr/include/openssl/ssl.h:179,
>                 from nsock_ssl.h:60,
>                 from nsock_internal.h:69,
>                 from nsock_connect.c:50:
> /usr/include/openssl/kssl.h:72:18: krb5.h: No such file or directory
> In file included from /usr/include/openssl/ssl.h:179,
>                 from nsock_ssl.h:60,
>                 from nsock_internal.h:69,
>                 from nsock_connect.c:50:
> /usr/include/openssl/kssl.h:134: parse error before "krb5_enctype"
> /usr/include/openssl/kssl.h:136: parse error before '*' token
> /usr/include/openssl/kssl.h:137: parse error before '}' token
> /usr/include/openssl/kssl.h:149: parse error before "kssl_ctx_setstring"
> /usr/include/openssl/kssl.h:149: parse error before '*' token
> /usr/include/openssl/kssl.h:150: parse error before '*' token
> /usr/include/openssl/kssl.h:151: parse error before '*' token
> /usr/include/openssl/kssl.h:151: parse error before '*' token
> /usr/include/openssl/kssl.h:152: parse error before '*' token
> /usr/include/openssl/kssl.h:153: parse error before "kssl_ctx_setprinc"
> /usr/include/openssl/kssl.h:153: parse error before '*' token
> /usr/include/openssl/kssl.h:155: parse error before "kssl_cget_tkt"
> /usr/include/openssl/kssl.h:155: parse error before '*' token
> /usr/include/openssl/kssl.h:157: parse error before "kssl_sget_tkt"
> /usr/include/openssl/kssl.h:157: parse error before '*' token
> /usr/include/openssl/kssl.h:159: parse error before "kssl_ctx_setkey"
> /usr/include/openssl/kssl.h:159: parse error before '*' token
> /usr/include/openssl/kssl.h:161: parse error before "context"
> /usr/include/openssl/kssl.h:162: parse error before "kssl_build_principal_2"
> /usr/include/openssl/kssl.h:162: parse error before "context"
> /usr/include/openssl/kssl.h:165: parse error before "kssl_validate_times"
> /usr/include/openssl/kssl.h:165: parse error before "atime"
> /usr/include/openssl/kssl.h:167: parse error before "kssl_check_authent"
> /usr/include/openssl/kssl.h:167: parse error before '*' token
> /usr/include/openssl/kssl.h:169: parse error before "enctype"
> In file included from nsock_ssl.h:60,
>                 from nsock_internal.h:69,
>                 from nsock_connect.c:50:
> /usr/include/openssl/ssl.h:909: parse error before "KSSL_CTX"
> /usr/include/openssl/ssl.h:931: parse error before '}' token
> make[1]: *** [nsock_connect.o] Error 1
> make[1]: Leaving directory `/root/nmap-3.48/nsock/src'
> make: *** [nsock/src/libnsock.a] Error 2
> #### END make output ####
>
> Any ideas how to get over this hump?
>
> Thanks!
>
> -Todd
>
>
> ---------------------------------------------------------------------
> For help using this (nmap-dev) mailing list, send a blank email to 
> nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).
>
>
>  

--
The difference between common-sense and paranoia is that common-sense
is thinking everyone is out to get you. That's normal -- they are.
Paranoia is thinking that they're conspiring.
               -- J. Kegler

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature