#49556 - Add wolfSSL and use it with VDE 2, fixing VDE 2's dependency on obsolete OpenSSL 1.0

Package	Source(s)		Maintainer(s)
guix-patches		PTS Buildd Popcon

Message #16 received at 49556@debbugs.gnu.org (full text, mbox, reply):

Received: (at 49556) by debbugs.gnu.org; 3 Aug 2021 18:01:47 +0000
From debbugs-submit-bounces@debbugs.gnu.org Tue Aug 03 14:01:47 2021
Received: from localhost ([127.0.0.1]:41388 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1mAyjb-0001eC-1J
	for submit@debbugs.gnu.org; Tue, 03 Aug 2021 14:01:47 -0400
Received: from mout01.posteo.de ([185.67.36.65]:42907)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <dnbarbato@posteo.de>) id 1mAyjW-0001dv-7j
 for 49556@debbugs.gnu.org; Tue, 03 Aug 2021 14:01:46 -0400
Received: from submission (posteo.de [89.146.220.130]) 
 by mout01.posteo.de (Postfix) with ESMTPS id E6D6E240026
 for <49556@debbugs.gnu.org>; Tue,  3 Aug 2021 20:01:35 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.de; s=2017;
 t=1628013695; bh=zzzbKdk7FVXhb2GkJsqN9LteH3moYGZr7uLeY+vxaro=;
 h=From:To:Cc:Subject:Date:From;
 b=ZIAHTqMIk8BHXc/NmbGi+AtjkWHk1RLuTfCamDLvzRDtxJYENQpeQdh66ot5ilEJ9
 yLl/OqBBTEWhAwM37gI1bLI7OFOJKY/pM6oKi6uCFCcm9E/dFhGOAOf/oCaHP8lp4N
 1weUtKFsnLON0sUaTJJrSlxAT0NjCDpfW8vdOS6dNAWwsoq8zn5uTCxsBRjW7A7iiE
 njG0tmvOg+LMKI9SZZS3rz9PwAq83EIDCHm9ehdIpuwKpnZ1OCS6VtzwkAspx+c2QL
 EmsO5+YwUwXOXAnyIJPx7AQXkfV0TOLLks4ZPhVYaQNhxsVKJOYCTkXoY5uQ0Ps86q
 cX2yF0rgu835Q==
Received: from customer (localhost [127.0.0.1])
 by submission (posteo.de) with ESMTPSA id 4GfN3f6VGXz6tmL;
 Tue,  3 Aug 2021 20:01:34 +0200 (CEST)
From: Diego Nicola Barbato <dnbarbato@posteo.de>
To: Leo Famulari <leo@famulari.name>
Subject: Re: [bug#49556] [PATCH 2/2] gnu: VDE 2: Update to 2.3.2-0.8599321.
References: <3541a7f3fc7d42c6d501180100f81b357ce2d36c.1626217314.git.leo@famulari.name>
 <1a3710d2a7891dfb069d6d8dfadeca998954bc1e.1626217314.git.leo@famulari.name>
Date: Tue, 03 Aug 2021 18:01:33 +0000
In-Reply-To: <1a3710d2a7891dfb069d6d8dfadeca998954bc1e.1626217314.git.leo@famulari.name>
 (Leo Famulari's message of "Tue, 13 Jul 2021 19:01:55 -0400")
Message-ID: <87eebaz9tu.fsf@GlaDOS.home>
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 49556
Cc: 49556@debbugs.gnu.org
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Hi Leo,

Leo Famulari <leo@famulari.name> writes:

> Updating to this unreleased revision allows us to package VDE 2 with
> wolfSSL instead of the obsolete OpenSSL 1.0:
>
> https://github.com/virtualsquare/vde-2/issues/2
>
> * gnu/packages/networking.scm (vde2): Update to 2.3.2-0.8599321.
> [source]: Use git-fetch.
> [native-inputs]: Add autoconf, automake, and libtool
> [inputs]: Replace openssl-1.0 with wolfssl.

[...]

I've tried building this and it looks like the configure script fails to
detect wolfSSL (the build still succeeds, but "VDE CryptCab" is
disabled):

--8<---------------cut here---------------start------------->8---
Configure results:

 - VDE CryptCab............ disabled
 + VDE Router.............. enabled
 + VDE VXLAN............... enabled
 + Python Libraries........ enabled
 + TAP support............. enabled
 + pcap support............ enabled
 - Experimental features... disabled
 - Profiling options....... disabled
 - Kernel switch........... disabled


configure: WARNING: VDE CryptCab support has been disabled because wolfSSL is
not installed on your system, or because wolfssl/wolfcrypt/chacha.h could not be found.
Please install libwolfssl if you want CryptCab to be compiled and installed.
--8<---------------cut here---------------end--------------->8---

I suspect the following lines in configure.ac are the culprit:

--8<---------------cut here---------------start------------->8---
AC_CHECK_LIB([crypto], [EVP_EncryptInit],
  [add_cryptcab_support=yes],
  [add_cryptcab_support=no ; warn_cryptcab=yes])
--8<---------------cut here---------------end--------------->8---

This might've been overlooked when switching from OpenSSL to wolfSSL,
since libcrypto is provided by the former, but not the latter.  They
should probably be changed to something like this instead:

--8<---------------cut here---------------start------------->8---
AC_CHECK_LIB([wolfssl], [wc_Chacha_Process],
  [add_cryptcab_support=yes],
  [add_cryptcab_support=no ; warn_cryptcab=yes])
--8<---------------cut here---------------end--------------->8---

I'll report this issue upstream.

Regards,

Diego

Display info messages

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Dec 22 16:41:57 2024; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

#49556 Add wolfSSL and use it with VDE 2, fixing VDE 2's dependency on obsolete OpenSSL 1.0