Re: [Openvpn-devel] building on OSX (for Tunnelblick) (was: [PATCH] Add support of utun devices under Mac OS X)

[Jonathan K. B. <jkb...@gm...>]

On Mon, Apr 1, 2013 at 2:48 PM, Gert Doering <ge...@gr...> wrote:

> On Mon, Apr 01, 2013 at 09:26:04AM -0400, Jonathan K. Bullard wrote:
> > I don't have an opinion about including it in 2.3.2 vs. 2.4 -- I still
> > can't get anything after 2.3alpha1 to build properly for Tunnelblick!
>
> Uh.  I've seen some issues reported by you, but I thought it had been
> resolved in time for 2.3_RC and 2.3.0 - since we're at 2.3.1 now, I
> really want to see this fixed :-)
>
> So what is still breaking for you?
>
> (I'm especially surprised since I know Arne is building and testing on
> OSX, so it *should* work - but maybe it's "it works on 10.7 and 10.8,
> but fails on 10.6", which we might have overlooked as our pool of OSX
> machines with various OS releases to build on is a bit limited - how
> do other open source projects handle this??)
>

Thanks for your inquiry.

Tunnelblick is still being built on OS X 10.6.8 with Xcode 3.2.2 because it
still supports PowerPC, which later versions of Xcode (which are required
for use on 10.7+) don't support. (For simplicity, Tunnelblick and its
dependencies are all built as a single Xcode project. Tunnelblick usually
includes at least two or three versions of OpenVPN, and lets the user
select which version they want to use with a couple of clicks, but of
course it is limited to the versions that we can build!)

I doubt that the issues are in OpenVPN itself, or its build system. I think
I couldn't get it working because of my unfamiliarity with make and the
toolset that is required to build OpenVPN. As I remember:

   - The problems happen for 2.3alpha2 but not 2.3alpha1, and I finally
   figured out they were triggered not by the major build-system changes, but
   by the initial patch that added PolarSSL.
   - The problems were in getting openvpn to static link with lzo and
   openssl. (There may have been a similar issue with pkcs11-helper, but it is
   broken in Tunnelblick and I later found out that it shouldn't be static
   linked, so that wasn't a major concern.)

Harold Molina-Bulla has taken over the effort to get Tunnelblick building
with OpenVPN 2.3. I've added him as a cc: to this thread.