Re: Current SVN fails to build / link on CentOS 5.5

[alexandru <alex () hackd net>]

Hi,

On 2010-08-18, at 11:32 AM, Thomas Buchanan wrote:

> Hello,
>
> While trying to compile and test a recent SVN build (rev 19863), I
> noticed the following failure on a CentOS 5.5 box:
>
> gcc -o ncat -g -O2 -Wall  ncat_main.o ncat_connect.o ncat_core.o
> ncat_posix.o ncat_listen.o ncat_proxy.o ncat_broker.o ncat_hostmatch.o
> ncat_ssl.o base64.o http.o util.o sys_wrap.o http_digest.o
> ../nsock/src/libnsock.a ../nbase/libnbase.a -lssl -lcrypto -lpcap -lssl
> -lcrypto -ldl
> ../nsock/src/libnsock.a(nsock_core.o): In function
> `handle_connect_result':
> /home/tbuchanan/dev/svn/nmap/nsock/src/nsock_core.c:423: undefined
> reference to `SSL_set_tlsext_host_name'
> collect2: ld returned 1 exit status
> make[1]: *** [ncat] Error 1
> make[1]: Leaving directory `/home/tbuchanan/dev/svn/nmap/ncat'
> make: *** [ncat_build] Error 2
>
> This also happens with nping and ncrack, at least.
>
> g++   -o nping ArgParser.o NetworkLayerElement.o PacketElement.o
> common.o common_modified.o nping.o RawData.o UDPHeader.o  NpingOps.o
> TCPHeader.o utils.o utils_net.o IPv4Header.o ICMPv4Header.o IPv6Header.o
> output.o TransportLayerElement.o stats.o NpingTargets.o NpingTarget.o
> EthernetHeader.o ARPHeader.o EchoHeader.o  ../nbase/libnbase.a
> ../nsock/src/libnsock.a ../libnetutil/libnetutil.a -lpcap -lssl -lcrypto
> ../libdnet-stripped/src/.libs/libdnet.a -ldl  -lpthread
> ../nsock/src/libnsock.a(nsock_core.o): In function
> `handle_connect_result':
> /home/tbuchanan/dev/svn/nmap/nsock/src/nsock_core.c:423: undefined
> reference to `SSL_set_tlsext_host_name'
> collect2: ld returned 1 exit status
> make[1]: *** [nping] Error 1
> make[1]: Leaving directory `/home/tbuchanan/dev/svn/nmap/nping'
> make: *** [all] Error 2
>
> Apologies for any wrapping errors in the previous lines.
>
> I believe I have all the necessary devel RPMS installed, as nmap-5.35DC1
> compiles and links just fine.  I can provide specific package version
> information if necessary.

My 5.5 install ships with openssl-devel 0.9.8e. I've just tested this and it seems SSL_set_tlsext_host_name was 
introduced in openssl-1.

If you don't want to do a global install of openssl, but just want to compile Nmap against it, you can download 
http://www.openssl.org/source/openssl-1.0.0a.tar.gz into a temp location, and build it

./config --prefix=/tmp/work enable-md2
make depend
make
make install # will put files in /tmp/work

then, compile Nmap with

./configure --with-openssl=/tmp/work

and it should work — let us know if otherwise.

 
I think this dependency probably deserves being listed in the compilation documentation for Nmap.

> Thanks for any suggestions on this.
>
> Thomas
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://seclists.org/nmap-dev/


--
@

Attachment: PGP.sig
Description: This is a digitally signed message part

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/