Re: [Fwknop-discuss] Build failure on Mac OS X 10.9
Brought to you by:
mbr
Menu
▾
▴
Re: [Fwknop-discuss] Build failure on Mac OS X 10.9
|
From: Michael R. <mb...@ci...> - 2013-11-18 14:01:22
|
On Nov 17, 2013, Blair Zajac wrote:
>
> On Nov 17, 2013, at 7:47 PM, Michael Rash <mb...@ci...> wrote:
>
> > On Nov 17, 2013, Blair Zajac wrote:
> >
> >>
> >> On Nov 17, 2013, at 2:37 PM, Blair Zajac <Bl...@or...> wrote:
> >>
> >>>
> >>> On Nov 17, 2013, at 1:00 PM, Blair Zajac <Bl...@or...> wrote:
> >>>
> >>>> Hello Michael,
> >>>>
> >>>> I got a new MacBook Pro running Mavericks (10.9) and tried to install fwknop 2.5.1 today. Below is the build output.
> >>>>
> >>>> One error appears to be due to a compile failure for:
> >>>>
> >>>> #include <string.h>
> >>>>
> >>>> size_t strlcat(char *dst, const char *src, size_t siz);
> >>>>
> >>>> int main()
> >>>> {
> >>>> return 0;
> >>>> }
> >>>>
> >>>>
> >>>> I?m thinking we?ll need to have autoconf check if the declaration exists and if it doesn't exist then define it.
> >>>
> >>> I checked out your git repo and see its fixed in master.
> >>>
> >>> If you could cut a 2.5.2 release then I could use that for MacPorts.
> >>
> >> Trying master at fwknop-2.5.1-91-gc019a43 I am unable get the server to recognize the client:
> >>
> >> Nov 17 14:57:56 orca4 fwknopd[1456]: (stanza #1) SPA Packet from IP: 1.2.3.4 received with
> >> access source match
> >> Nov 17 14:57:56 orca4 fwknopd[1456]: (stanza #1) Error creating fko context: Decryption failed or decrypted data is invalid
> >> Nov 17 14:57:56 orca4 fwknopd[1456]: (stanza #2) SPA Packet from IP: 1.2.3.4 received with access source match
> >> Nov 17 14:57:56 orca4 fwknopd[1456]: (stanza #2) Error creating fko context: Decryption failed or decrypted data is invalid
> >>
> >>
> >> It does work from my ancient PPC system ;)
> >>
> >>
> >> Nov 17 14:59:25 orca4 fwknopd[1456]: (stanza #1) SPA Packet from IP: 1.2.3.4 received with access source match
> >> Nov 17 14:59:25 orca4 fwknopd[1456]: 'filter' table 'FWKNOP_INPUT' chain exists
> >> Nov 17 14:59:25 orca4 fwknopd[1456]: Added Rule to FWKNOP_INPUT for 1.2.3.4, tcp/22 expires at 1384729195
> >
> > Ok. Just for clarity, does the access.conf stanza have "ENCRYPTION_MODE
> > legacy" set? If so, then on the client command line you'll need to add
> > '-M legacy?.
>
> No, I don?t.
>
> SOURCE: ANY;
> KEY: example;
> REQUIRE_SOURCE_ADDRESS: Y;
> FW_ACCESS_TIMEOUT: 30;
> OPEN_PORTS: tcp/22;
>
>
> I?m just saying that nothing has changed on my server and my older clients but the fwknop on 10.9 isn?t able to log in using the same Mac
Ok. Tim Heckman suggested creating a 2.5.1-1 release that just contains
the autoconf fix and nothing else so that 2.5.1 can build on Mac OS X
10.9 (and before 2.5.2 is available). I've done this using github's release
feature, and it is available here:
https://github.com/mrash/fwknop/releases
I've also started adding OS X 10.9 compatibility tests like this:
https://github.com/mrash/fwknop/commit/a6f030412f6d9866cb13c2701521e7c433c2b074
The above runs fine on Ubuntu and FreeBSD systems under the test suite,
so SPA packets from the fwknop client on 10.9 will work properly against
fwknopd on those systems. More tests will be added as well.
I'd like to try to reproduce what you are seeing - nothing on the
crypto side or the SPA packet format has changed since 2.5. Thinking...
so, client=2.5.2 (git master code) vs. server=2.5.1 on PPC in your
setup?
Thanks,
--Mike
> >> make check doesn?t do much.
> >
> > Most of the testing functionality is implemented by the
> > test/test-fwknop.pl script along with associated test/tests/*.pl files.
> > It might be useful in the context of the above to run the backwards
> > compatibility tests:
> >
> >
> > # ./test-fwknop.pl --enable-all --include compat
>
> It got this far testing fwknop-2.5.1-97-g71d1903:
>
> # ./test-fwknop.pl --enable-all --include compat
> [-] --enable-valgrind mode requested but valgrind not found, disabling.
>
> [+] Starting the fwknop test suite...
>
> args: --enable-all --include compat
>
> Saved results from previous run to: output.last/
>
> [+] Total test buckets to execute: 26
>
> [Rijndael] [client->server compatibility] Cygwin Windows 2008.......pass (1)
> [Rijndael] [client->server backwards compatibility] v2.0............pass (2)
> [Rijndael] [client->server backwards compatibility] v2.0.1..........pass (3)
> [Rijndael] [client->server backwards compatibility] v2.0.2..........pass (4)
> [Rijndael] [client->server backwards compatibility] v2.0.3..........pass (5)
> [Rijndael] [client->server backwards compat.] v2.0.3 dual keys......pass (6)
> [Rijndael] [client->server backwards compatibility] v2.0.4..........pass (7)
> [Rijndael] [client->server backwards compat.] v2.0.4 dual keys......pass (8)
> [Rijndael] [client->server backwards compat.] v2.0.4 truncated key..pass (9)
> [Rijndael] [client->server backwards compat.] v2.0.4 non-trunc key..pass (10)
> [Rijndael] [Android compatibility] v4.1.2...........................pass (11)
> [Rijndael+HMAC] [client->server compatibility] Cygwin Windows 2008..pass (12)
> [Rijndael] [client->server OS compatibility] v2.5 Ubuntu-12.04......pass (13)
> [Rijndael] [client->server OS compatibility] v2.5 Ubuntu-13.04......pass (14)
> [Rijndael] [client->server OS compatibility] v2.5 FreeBSD-8.2.......pass (15)
> [Rijndael] [client->server OS compatibility] v2.5 OpenBSD-4.9.......pass (16)
> [Rijndael] [client->server OS compatibility] v2.5.1 OSX-10.9........pass (17)
> [Rijndael+HMAC] [client->server OS compatibility] v2.5 Ubuntu-12.04.pass (18)
> [Rijndael+HMAC] [client->server OS compatibility] v2.5 Ubuntu-13.04.pass (19)
> [Rijndael+HMAC] [client->server OS compatibility] v2.5 FreeBSD-8.2..pass (20)
> [Rijndael+HMAC] [client->server OS compatibility] v2.5 OpenBSD-4.9..pass (21)
> [Rijndael+HMAC] [client->server OS compatibility] v2.5.1 OSX-10.9...pass (22)
> [perl FKO module] [compatibility] client FKO -> C server............Can't locate object method "new" via package "FKO" at ./test-fwknop.pl line 3660.
>
> Blair
>
>
> ------------------------------------------------------------------------------
> DreamFactory - Open Source REST & JSON Services for HTML5 & Native Apps
> OAuth, Users, Roles, SQL, NoSQL, BLOB Storage and External API Access
> Free app hosting. Or install the open source package on any LAMP server.
> Sign up and see examples for AngularJS, jQuery, Sencha Touch and Native!
> http://pubads.g.doubleclick.net/gampad/clk?id=63469471&iu=/4140/ostg.clktrk
> _______________________________________________
> Fwknop-discuss mailing list
> Fwk...@li...
> https://lists.sourceforge.net/lists/listinfo/fwknop-discuss
|