Skip to contentSkip to conversation

Build broken on Mac OS X

Openvpn-devel New Arne Schwabe 4 participants 18 messages Jun 2, 2012 – Jun 4, 2012

lore
Share & tools
lore

Arne Schwabe

author
#0 lore raw

Hello,

while preparing my patches for OS X I also noticed that the build is broken on OS X:

[...]
checking net/if_tun.h usability... no
checking net/if_tun.h presence... no
checking for net/if_tun.h... no
checking net/tun/if_tun.h usability... no
checking net/tun/if_tun.h presence... no
checking for net/tun/if_tun.h... no
checking linux/if_tun.h usability... no
checking linux/if_tun.h presence... no
checking for linux/if_tun.h... no
checking tap-windows.h usability... no
checking tap-windows.h presence... no
checking for tap-windows.h... no
configure: error: no tap header could be found

The bad commit is: 7cacdfd4b7f221139e0d2a0334f1f1cd8f2a1b75

build: tap: search for tap header

It aborts build if no tap headers is found. If the check is disabled configure works but the build still does not work.

In the INSTALL file --with-lzo-headers and --with-lzo-lib is mentioned, which do not work:

checking for aes_crypt_cbc in -lpolarssl... no
checking for lzo1x_1_15_compress in -llzo2... no
checking for lzo1x_1_15_compress in -llzo... no
checking for PKCS11_HELPER... no
configure: error: lzo enabled but missing

./configure --help mentions LZO_CFLAGS and LZO_LIBS which work a bit better but still do not work.

LZO_CFLAGS="-I/opt/local/include" LZO_LIBS=-L/opt/local/lib ./configure [...]
make
[...]
/bin/sh ../../libtool --tag=CC --mode=link gcc -I/opt/local/include
-I/opt/local/include -I/opt/local/include -g -O2 -o openvpn
base64.o buffer.o clinat.o crypto.o crypto_openssl.o crypto_polarssl.o dhcp.o error.o event.o fdmisc.o forward.o fragment.o gremlin.o helper.o httpdigest.o lladdr.o init.o interval.o list.o lzo.o manage.o mbuf.o misc.o platform.o console.o mroute.o mss.o mstats.o mtcp.o mtu.o mudp.o multi.o ntlm.o occ.o pkcs11.o pkcs11_openssl.o pkcs11_polarssl.o openvpn.o options.o otime.o packet_id.o perf.o pf.o ping.o plugin.o pool.o proto.o proxy.o ps.o push.o reliable.o route.o schedule.o session_id.o shaper.o sig.o socket.o socks.o ssl.o ssl_openssl.o ssl_polarssl.o ssl_verify.o ssl_verify_openssl.o ssl_verify_polarssl.o status.o tun.o win32.o cryptoapi.o ../../src/compat/libcompat.la -lresolv -L/opt/local/lib -L/opt/local/lib -lssl -lcrypto
-L/opt/local/lib -lcrypto -ldl libtool: link: gcc
-I/opt/local/include -I/opt/local/include -I/opt/local/include -g -O2 -o openvpn base64.o buffer.o clinat.o crypto.o crypto_openssl.o crypto_polarssl.o dhcp.o error.o event.o fdmisc.o forward.o fragment.o gremlin.o helper.o httpdigest.o lladdr.o init.o interval.o list.o lzo.o manage.o mbuf.o misc.o platform.o console.o mroute.o mss.o mstats.o mtcp.o mtu.o mudp.o multi.o ntlm.o occ.o pkcs11.o pkcs11_openssl.o pkcs11_polarssl.o openvpn.o options.o otime.o packet_id.o perf.o pf.o ping.o plugin.o pool.o proto.o proxy.o ps.o push.o reliable.o route.o schedule.o session_id.o shaper.o sig.o socket.o socks.o ssl.o ssl_openssl.o ssl_polarssl.o ssl_verify.o ssl_verify_openssl.o ssl_verify_polarssl.o status.o tun.o win32.o cryptoapi.o ../../src/compat/.libs/libcompat.a -lresolv -L/opt/local/lib -lssl -lcrypto -ldl
Undefined symbols for architecture x86_64:
"_lzo1x_decompress_safe", referenced from:
_lzo_decompress in lzo.o
"_lzo1x_1_15_compress", referenced from:
_lzo_compress in lzo.o
"___lzo_init_v2", referenced from:
_lzo_compress_init in lzo.o
ld: symbol(s) not found for architecture x86_64
collect2: ld returned 1 exit status
make[3]: *** [openvpn] Error 1
make[2]: *** [all-recursive] Error 1
make[1]: *** [all-recursive] Error 1
make: *** [all] Error 2

I have no idea about the configure, autotools internal to fix this.

Arne

#1 lore raw

Hello,

Quoted 21 lines · Arne Schwabe

Hello,

while preparing my patches for OS X I also noticed that the build is broken on OS X:

[...]
checking net/if_tun.h usability... no checking net/if_tun.h presence... no checking for net/if_tun.h... no checking net/tun/if_tun.h usability... no checking net/tun/if_tun.h presence... no checking for net/tun/if_tun.h... no checking linux/if_tun.h usability... no checking linux/if_tun.h presence... no checking for linux/if_tun.h... no checking tap-windows.h usability... no checking tap-windows.h presence... no checking for tap-windows.h... no
configure: error: no tap header could be found

Quoted 3 lines

The bad commit is: 7cacdfd4b7f221139e0d2a0334f1f1cd8f2a1b75

   build: tap: search for tap header

Can you please tell me which tap header is expected and send me the config.log as well? or just send me the config.log...

Quoted 7 lines

It aborts build if no tap headers is found. If the check is disabled configure works but the build still does not work.

In the INSTALL file  --with-lzo-headers and --with-lzo-lib is mentioned, which do not work:

<snip>

Quoted 2 lines

LZO_CFLAGS="-I/opt/local/include" LZO_LIBS=-L/opt/local/lib ./configure

This should have been:
LZO_CFLAGS="-I/opt/local/include" LZO_LIBS="-L/opt/local/lib -llzo" ./configure

The -llzo is also needs in XXX_LIBS phrase.

Thanks,
Alon.

author
#2 lore raw

Am 02.06.12 16:19, schrieb Alon Bar-Lev:

Quoted 24 lines

Hello,

Quoted 21 lines · Arne Schwabe

Hello,

while preparing my patches for OS X I also noticed that the build is broken on OS X:

[...]
checking net/if_tun.h usability... no checking net/if_tun.h presence... no checking for net/if_tun.h... no checking net/tun/if_tun.h usability... no checking net/tun/if_tun.h presence... no checking for net/tun/if_tun.h... no checking linux/if_tun.h usability... no checking linux/if_tun.h presence... no checking for linux/if_tun.h... no checking tap-windows.h usability... no checking tap-windows.h presence... no checking for tap-windows.h... no
configure: error: no tap header could be found

Quoted 5 lines
Quoted 3 lines

The bad commit is: 7cacdfd4b7f221139e0d2a0334f1f1cd8f2a1b75

build: tap: search for tap header

Can you please tell me which tap header is expected and send me the config.log as well? or just send me the config.log...

I have no idea what header is expected but I think none. config.log is available here: http://plai.de/.tmp/config.log

Quoted 6 lines
Quoted 6 lines

It aborts build if no tap headers is found. If the check is disabled configure works but the build still does not work.

In the INSTALL file --with-lzo-headers and --with-lzo-lib is mentioned, which do not work:

Quoted 8 lines

<snip>

Quoted 1 line

LZO_CFLAGS="-I/opt/local/include" LZO_LIBS=-L/opt/local/lib ./configure

This should have been:
LZO_CFLAGS="-I/opt/local/include" LZO_LIBS="-L/opt/local/lib -llzo" ./configure

The -llzo is also needs in XXX_LIBS phrase.

The INSTALL file then needs to be updated to reflect the change.

Arne

#3 lore raw
Quoted 5 lines · Arne Schwabe
Quoted 5 lines
Quoted 3 lines

In the INSTALL file  --with-lzo-headers and --with-lzo-lib is mentioned, which do not work:

<snip>

Quoted 7 lines
Quoted 6 lines
Quoted 1 line

LZO_CFLAGS="-I/opt/local/include" LZO_LIBS=-L/opt/local/lib ./configure

This should have been:
LZO_CFLAGS="-I/opt/local/include" LZO_LIBS="-L/opt/local/lib -llzo" ./configure

The -llzo is also needs in XXX_LIBS phrase.

The INSTALL file then needs to be updated to reflect the change.

Right, this INSTALL is out of date in many other aspects. I clean up the INSTALL for none windows. I hope it is better now.

Alon

#4 lore raw

PATCH 1/1 build: update INSTALL to recent changes

---
 INSTALL |  144 +++++++++++++++++++++++++++++++++++++--------------------------
 1 files changed, 85 insertions(+), 59 deletions(-)
INSTALL +85 -59
index ab0d671..209cfa6 100644
@@ -60,13 +60,12 @@ OPTIONAL (but recommended):
   (2) LZO real-time compression library, required for link compression,
       available from http://www.oberhumer.com/opensource/lzo/
       OpenBSD users can use ports or packages to install lzo, but remember
-      to add "--with-lzo-headers" and "--with-lzo-lib" directives to
-      "configure", pointing to /usr/local/include and /usr/local/lib
-      respectively since gcc will not find them otherwise.
+      to add LZO_CFLAGS="-I/usr/local/include" LZO_LIBS="-L/usr/local/lib -llzo"
+      directives to "configure", since gcc will not find them otherwise.
   (3) Pthread library.
 
 OPTIONAL (for developers only):
-  (1) Autoconf 2.50 or higher + Automake 1.5 or higher
+  (1) Autoconf 2.59 or higher + Automake 1.9 or higher
       -- available from http://www.gnu.org/software/software.html
   (2) Dmalloc library
       -- available from http://dmalloc.com/

@@ -75,13 +74,16 @@ OPTIONAL (for developers only):
 
 CHECK OUT SOURCE FROM SUBVERSION REPOSITORY:
 
+  git clone https://github.com/OpenVPN/openvpn 
+
   Check out stable version:
 
-    svn checkout http://svn.openvpn.net/projects/openvpn/trunk/openvpn openvpn
+  git checkout -b 2.2 remotes/origin/release/2.2
+
+  Check out master (unstable) branch:
 
-  Check out beta21 branch:
+  git checkout master
 
-    svn checkout http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn openvpn
 
 *************************************************************************
 

@@ -95,7 +97,7 @@ BUILD COMMANDS FROM TARBALL:
 
 BUILD COMMANDS FROM SUBVERSION REPOSITORY CHECKOUT:
 
-	autoreconf -i -v
+	autoreconf -i -v -f
 	./configure
 	make
 	make install

@@ -104,7 +106,7 @@ BUILD COMMANDS FROM SUBVERSION REPOSITORY CHECKOUT:
 
 BUILD A TARBALL FROM SUBVERSION REPOSITORY CHECKOUT:
 
-	autoreconf -i -v
+	autoreconf -i -v -f
 	./configure
 	make dist
 

@@ -121,36 +123,85 @@ Test Crypto:
 
 Test SSL/TLS negotiations (runs for 2 minutes):
 
-./openvpn --config sample-config-files/loopback-client  (In one window) 
-./openvpn --config sample-config-files/loopback-server  (Simultaneously in another window) 
+./openvpn --config sample/sample-config-files/loopback-client (In one window) 
+./openvpn --config sample/sample-config-files/loopback-server (Simultaneously in another window) 
 
 *************************************************************************
 
 OPTIONS for ./configure:
 
-  --enable-pthread          Compile pthread support for
-                            improved latency during SSL/TLS key
-                            negotiations (Linux or Solaris only)
-
-  --disable-lzo             Do not compile LZO compression support
-  --disable-crypto          Do not compile OpenSSL crypto support
-  --disable-ssl             Do not compile OpenSSL SSL support for
-                            TLS-based key exchange
-
-  --with-ssl-headers=DIR    Crypto/SSL Include files location
-  --with-ssl-lib=DIR        Crypto/SSL Library location
-  --with-lzo-headers=DIR    LZO Include files location
-  --with-lzo-lib=DIR        LZO Library location
-
-  --with-ifconfig-path=PATH   Path to ifconfig tool (only need to
-                              specify if in a non-standard location)
-
-  --with-leak-check=TYPE    Build with memory leak checking
-                            TYPE = dmalloc or ssl
-
-  --enable-strict           Enable strict compiler warnings
-
-  --enable-strict-options   Enable strict options check between peers
+  --disable-lzo           disable LZO compression support [default=yes]
+  --enable-lzo-stub       don't compile LZO compression support but still
+                          allow limited interoperability with LZO-enabled
+                          peers [default=no]
+  --disable-crypto        disable crypto support [default=yes]
+  --disable-ssl           disable SSL support for TLS-based key exchange
+                          [default=yes]
+  --enable-x509-alt-username
+                          enable the --x509-username-field feature
+                          [default=no]
+  --disable-multi         disable client/server support (--mode server +
+                          client mode) [default=yes]
+  --disable-server        disable server support only (but retain client
+                          support) [default=yes]
+  --disable-plugins       disable plug-in support [default=yes]
+  --disable-eurephia      disable support for the eurephia plug-in
+                          [default=yes]
+  --disable-management    disable management server support [default=yes]
+  --enable-pkcs11         enable pkcs11 support [default=no]
+  --disable-socks         disable Socks support [default=yes]
+  --disable-http-proxy    disable HTTP proxy support [default=yes]
+  --disable-fragment      disable internal fragmentation support (--fragment)
+                          [default=yes]
+  --disable-multihome     disable multi-homed UDP server support (--multihome)
+                          [default=yes]
+  --disable-port-share    disable TCP server port-share support (--port-share)
+                          [default=yes]
+  --disable-debug         disable debugging support (disable gremlin and verb
+                          7+ messages) [default=yes]
+  --enable-small          enable smaller executable size (disable OCC, usage
+                          message, and verb 4 parm list) [default=yes]
+  --enable-password-save  allow --askpass and --auth-user-pass passwords to be
+                          read from a file [default=yes]
+  --enable-iproute2       enable support for iproute2 [default=no]
+  --disable-def-auth      disable deferred authentication [default=yes]
+  --disable-pf            disable internal packet filter [default=yes]
+  --enable-strict         enable strict compiler warnings (debugging option)
+                          [default=no]
+  --enable-pedantic       enable pedantic compiler warnings, will not generate
+                          a working executable (debugging option) [default=no]
+  --enable-strict-options enable strict options check between peers (debugging
+                          option) [default=no]
+  --enable-selinux        enable SELinux support [default=no]
+  --enable-systemd        enable systemd suppport [default=no]
+
+ENVIRONMENT for ./configure:
+
+  IFCONFIG    full path to ipconfig utility
+  ROUTE       full path to route utility
+  IPROUTE     full path to ip utility
+  NETSTAT     path to netstat utility
+  MAN2HTML    path to man2html utility
+  GIT         path to git utility
+  TAP_CFLAGS  C compiler flags for tap
+  OPENSSL_CRYPTO_CFLAGS
+              C compiler flags for OPENSSL_CRYPTO, overriding pkg-config
+  OPENSSL_CRYPTO_LIBS
+              linker flags for OPENSSL_CRYPTO, overriding pkg-config
+  OPENSSL_SSL_CFLAGS
+              C compiler flags for OPENSSL_SSL, overriding pkg-config
+  OPENSSL_SSL_LIBS
+              linker flags for OPENSSL_SSL, overriding pkg-config
+  POLARSSL_CFLAGS
+              C compiler flags for polarssl
+  POLARSSL_LIBS
+              linker flags for polarssl
+  LZO_CFLAGS  C compiler flags for lzo
+  LZO_LIBS    linker flags for lzo
+  PKCS11_HELPER_CFLAGS
+              C compiler flags for PKCS11_HELPER, overriding pkg-config
+  PKCS11_HELPER_LIBS
+              linker flags for PKCS11_HELPER, overriding pkg-config
 
 *************************************************************************
 

@@ -316,28 +367,3 @@ CAVEATS & BUGS:
   IV for OFB and CFB modes.  This is not an issue if you are
   using CBC cipher mode (the default), or if you are using OFB or CFB
   cipher mode with SSL/TLS authentication.
-
-******************************************************************************
-
-Subject: [Openvpn-users] Re: Windows XP 64 bit
-From: Hypherion
-Date: Thu, 14 Apr 2005 07:01:17 +0000 (UTC)
-
-Well I managed to build a Windows XP 64 bit driver myself and it's working
-great, I can connect to my server again :)
-
-I had to use the WinDDK for Windows 2003 Service Pack 1 and just built the
-driver in the Windows 2003 AMD64 environment.  I had to comment out the
-MAPINFO:FIXUPS directive in the SOURCES file. 
- 
-Then I copied and renamed (devcon.exe/tapinstall.exe) from
-C:\WINDDK\3790.1830\tools\devcon\amd64. 
- 
-I had to edit the file OemWin2k.inf and change the Manufactured + Product
-Section to:
-
-[Manufacturer]
-   %Provider% = tap0901, NTamd64
-
-[tap0901.NTamd64]
-   %DeviceDescription% = tap0901.ndi, tap0901
Signature · 1 line
1.7.3.4
#5 lore raw

PATCH 1/1 build: update INSTALL to recent changes

Signed-off-by Alon Bar-Lev <[email protected]...>
---
 INSTALL |  144 +++++++++++++++++++++++++++++++++++++--------------------------
 1 files changed, 85 insertions(+), 59 deletions(-)
INSTALL +85 -59
index ab0d671..209cfa6 100644
@@ -60,13 +60,12 @@ OPTIONAL (but recommended):
   (2) LZO real-time compression library, required for link compression,
       available from http://www.oberhumer.com/opensource/lzo/
       OpenBSD users can use ports or packages to install lzo, but remember
-      to add "--with-lzo-headers" and "--with-lzo-lib" directives to
-      "configure", pointing to /usr/local/include and /usr/local/lib
-      respectively since gcc will not find them otherwise.
+      to add LZO_CFLAGS="-I/usr/local/include" LZO_LIBS="-L/usr/local/lib -llzo"
+      directives to "configure", since gcc will not find them otherwise.
   (3) Pthread library.
 
 OPTIONAL (for developers only):
-  (1) Autoconf 2.50 or higher + Automake 1.5 or higher
+  (1) Autoconf 2.59 or higher + Automake 1.9 or higher
       -- available from http://www.gnu.org/software/software.html
   (2) Dmalloc library
       -- available from http://dmalloc.com/

@@ -75,13 +74,16 @@ OPTIONAL (for developers only):
 
 CHECK OUT SOURCE FROM SUBVERSION REPOSITORY:
 
+  git clone https://github.com/OpenVPN/openvpn 
+
   Check out stable version:
 
-    svn checkout http://svn.openvpn.net/projects/openvpn/trunk/openvpn openvpn
+  git checkout -b 2.2 remotes/origin/release/2.2
+
+  Check out master (unstable) branch:
 
-  Check out beta21 branch:
+  git checkout master
 
-    svn checkout http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn openvpn
 
 *************************************************************************
 

@@ -95,7 +97,7 @@ BUILD COMMANDS FROM TARBALL:
 
 BUILD COMMANDS FROM SUBVERSION REPOSITORY CHECKOUT:
 
-	autoreconf -i -v
+	autoreconf -i -v -f
 	./configure
 	make
 	make install

@@ -104,7 +106,7 @@ BUILD COMMANDS FROM SUBVERSION REPOSITORY CHECKOUT:
 
 BUILD A TARBALL FROM SUBVERSION REPOSITORY CHECKOUT:
 
-	autoreconf -i -v
+	autoreconf -i -v -f
 	./configure
 	make dist
 

@@ -121,36 +123,85 @@ Test Crypto:
 
 Test SSL/TLS negotiations (runs for 2 minutes):
 
-./openvpn --config sample-config-files/loopback-client  (In one window) 
-./openvpn --config sample-config-files/loopback-server  (Simultaneously in another window) 
+./openvpn --config sample/sample-config-files/loopback-client (In one window) 
+./openvpn --config sample/sample-config-files/loopback-server (Simultaneously in another window) 
 
 *************************************************************************
 
 OPTIONS for ./configure:
 
-  --enable-pthread          Compile pthread support for
-                            improved latency during SSL/TLS key
-                            negotiations (Linux or Solaris only)
-
-  --disable-lzo             Do not compile LZO compression support
-  --disable-crypto          Do not compile OpenSSL crypto support
-  --disable-ssl             Do not compile OpenSSL SSL support for
-                            TLS-based key exchange
-
-  --with-ssl-headers=DIR    Crypto/SSL Include files location
-  --with-ssl-lib=DIR        Crypto/SSL Library location
-  --with-lzo-headers=DIR    LZO Include files location
-  --with-lzo-lib=DIR        LZO Library location
-
-  --with-ifconfig-path=PATH   Path to ifconfig tool (only need to
-                              specify if in a non-standard location)
-
-  --with-leak-check=TYPE    Build with memory leak checking
-                            TYPE = dmalloc or ssl
-
-  --enable-strict           Enable strict compiler warnings
-
-  --enable-strict-options   Enable strict options check between peers
+  --disable-lzo           disable LZO compression support [default=yes]
+  --enable-lzo-stub       don't compile LZO compression support but still
+                          allow limited interoperability with LZO-enabled
+                          peers [default=no]
+  --disable-crypto        disable crypto support [default=yes]
+  --disable-ssl           disable SSL support for TLS-based key exchange
+                          [default=yes]
+  --enable-x509-alt-username
+                          enable the --x509-username-field feature
+                          [default=no]
+  --disable-multi         disable client/server support (--mode server +
+                          client mode) [default=yes]
+  --disable-server        disable server support only (but retain client
+                          support) [default=yes]
+  --disable-plugins       disable plug-in support [default=yes]
+  --disable-eurephia      disable support for the eurephia plug-in
+                          [default=yes]
+  --disable-management    disable management server support [default=yes]
+  --enable-pkcs11         enable pkcs11 support [default=no]
+  --disable-socks         disable Socks support [default=yes]
+  --disable-http-proxy    disable HTTP proxy support [default=yes]
+  --disable-fragment      disable internal fragmentation support (--fragment)
+                          [default=yes]
+  --disable-multihome     disable multi-homed UDP server support (--multihome)
+                          [default=yes]
+  --disable-port-share    disable TCP server port-share support (--port-share)
+                          [default=yes]
+  --disable-debug         disable debugging support (disable gremlin and verb
+                          7+ messages) [default=yes]
+  --enable-small          enable smaller executable size (disable OCC, usage
+                          message, and verb 4 parm list) [default=yes]
+  --enable-password-save  allow --askpass and --auth-user-pass passwords to be
+                          read from a file [default=yes]
+  --enable-iproute2       enable support for iproute2 [default=no]
+  --disable-def-auth      disable deferred authentication [default=yes]
+  --disable-pf            disable internal packet filter [default=yes]
+  --enable-strict         enable strict compiler warnings (debugging option)
+                          [default=no]
+  --enable-pedantic       enable pedantic compiler warnings, will not generate
+                          a working executable (debugging option) [default=no]
+  --enable-strict-options enable strict options check between peers (debugging
+                          option) [default=no]
+  --enable-selinux        enable SELinux support [default=no]
+  --enable-systemd        enable systemd suppport [default=no]
+
+ENVIRONMENT for ./configure:
+
+  IFCONFIG    full path to ipconfig utility
+  ROUTE       full path to route utility
+  IPROUTE     full path to ip utility
+  NETSTAT     path to netstat utility
+  MAN2HTML    path to man2html utility
+  GIT         path to git utility
+  TAP_CFLAGS  C compiler flags for tap
+  OPENSSL_CRYPTO_CFLAGS
+              C compiler flags for OPENSSL_CRYPTO, overriding pkg-config
+  OPENSSL_CRYPTO_LIBS
+              linker flags for OPENSSL_CRYPTO, overriding pkg-config
+  OPENSSL_SSL_CFLAGS
+              C compiler flags for OPENSSL_SSL, overriding pkg-config
+  OPENSSL_SSL_LIBS
+              linker flags for OPENSSL_SSL, overriding pkg-config
+  POLARSSL_CFLAGS
+              C compiler flags for polarssl
+  POLARSSL_LIBS
+              linker flags for polarssl
+  LZO_CFLAGS  C compiler flags for lzo
+  LZO_LIBS    linker flags for lzo
+  PKCS11_HELPER_CFLAGS
+              C compiler flags for PKCS11_HELPER, overriding pkg-config
+  PKCS11_HELPER_LIBS
+              linker flags for PKCS11_HELPER, overriding pkg-config
 
 *************************************************************************
 

@@ -316,28 +367,3 @@ CAVEATS & BUGS:
   IV for OFB and CFB modes.  This is not an issue if you are
   using CBC cipher mode (the default), or if you are using OFB or CFB
   cipher mode with SSL/TLS authentication.
-
-******************************************************************************
-
-Subject: [Openvpn-users] Re: Windows XP 64 bit
-From: Hypherion
-Date: Thu, 14 Apr 2005 07:01:17 +0000 (UTC)
-
-Well I managed to build a Windows XP 64 bit driver myself and it's working
-great, I can connect to my server again :)
-
-I had to use the WinDDK for Windows 2003 Service Pack 1 and just built the
-driver in the Windows 2003 AMD64 environment.  I had to comment out the
-MAPINFO:FIXUPS directive in the SOURCES file. 
- 
-Then I copied and renamed (devcon.exe/tapinstall.exe) from
-C:\WINDDK\3790.1830\tools\devcon\amd64. 
- 
-I had to edit the file OemWin2k.inf and change the Manufactured + Product
-Section to:
-
-[Manufacturer]
-   %Provider% = tap0901, NTamd64
-
-[tap0901.NTamd64]
-   %DeviceDescription% = tap0901.ndi, tap0901
Signature · 1 line
1.7.3.4
#7 lore raw

Re: [Openvpn-devel] [PATCH] build: update INSTALL to recent changes

In reply to Alon Bar-Lev

Hi,

Quoted 3 lines · Alon Bar-Lev
Signed-off-by Alon Bar-Lev <[email protected]...>
---
 INSTALL |  144 +++++++++++++++++++++++++++++++++++++--------------------------

Thanks for covering this missing piece.

One thing that caught my eye while reading this:

INSTALL OPTIONAL (for developers only): · line 78

Quoted 6 lines
INSTALL +2 -0
@@ -75,13 +74,16 @@ OPTIONAL (for developers only):
 
 CHECK OUT SOURCE FROM SUBVERSION REPOSITORY:
 
+  git clone https://github.com/OpenVPN/openvpn 
+

You have updated all the commands to "git", but all the head lines still talk about "SUBVERSION". Maybe change that to "SOURCE CODE REPOSITORY" or so?

gert

Signature · 4 lines
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             [email protected]...
fax: +49-89-35655025                        [email protected]...
#8 lore raw

Re: [Openvpn-devel] [PATCH] build: update INSTALL to recent changes

Quoted 13 lines · Gert Doering

Hi,

Quoted 3 lines · Alon Bar-Lev
Signed-off-by Alon Bar-Lev <[email protected]...>

---
 INSTALL |  144 +++++++++++++++++++++++++++++++++++++--------------------------

Thanks for covering this missing piece.

One thing that caught my eye while reading this:

Quoted 2 lines
(quoted diff) +0 -0
@@ -75,13 +74,16 @@ OPTIONAL (for developers only):
Quoted 8 lines
Quoted 4 lines

 CHECK OUT SOURCE FROM SUBVERSION REPOSITORY:

+  git clone https://github.com/OpenVPN/openvpn
+

You have updated all the commands to "git", but all the head lines still talk about "SUBVERSION".  Maybe change that to "SOURCE CODE REPOSITORY" or so?

Sure.
I think that most of this file is obsolete... maybe someone with better English than mine should attend to it...

Alon.

#9 lore raw

Re: [Openvpn-devel] [PATCH] build: update INSTALL to recent changes

Hi,

Quoted 3 lines · Alon Bar-Lev
Quoted 3 lines
Quoted 3 lines
Signed-off-by Alon Bar-Lev <[email protected]...>

---
 INSTALL |  144 +++++++++++++++++++++++++++++++++++++--------------------------

[..]

Quoted 1 line

I think that most of this file is obsolete...

That might very well be...

Quoted 1 line

maybe someone with better English than mine should attend to it...

I'm not a native speaker either, so I doubt my English better than yours. Maybe ecrist could be volunteered? :-)

gert

Signature · 4 lines
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             [email protected]...
fax: +49-89-35655025                        [email protected]...
#10 lore raw

PATCH 1/1 build: update INSTALL to recent changes

In reply to Alon Bar-Lev
Signed-off-by Alon Bar-Lev <[email protected]...>
---
 INSTALL |  150 +++++++++++++++++++++++++++++++++++++--------------------------
 1 files changed, 88 insertions(+), 62 deletions(-)
INSTALL +88 -62
index ab0d671..fd1fb80 100644
@@ -60,28 +60,30 @@ OPTIONAL (but recommended):
   (2) LZO real-time compression library, required for link compression,
       available from http://www.oberhumer.com/opensource/lzo/
       OpenBSD users can use ports or packages to install lzo, but remember
-      to add "--with-lzo-headers" and "--with-lzo-lib" directives to
-      "configure", pointing to /usr/local/include and /usr/local/lib
-      respectively since gcc will not find them otherwise.
+      to add CFLAGS="-I/usr/local/include" LDFLAGS="-L/usr/local/lib"
+      directives to "configure", since gcc will not find them otherwise.
   (3) Pthread library.
 
 OPTIONAL (for developers only):
-  (1) Autoconf 2.50 or higher + Automake 1.5 or higher
+  (1) Autoconf 2.59 or higher + Automake 1.9 or higher
       -- available from http://www.gnu.org/software/software.html
   (2) Dmalloc library
       -- available from http://dmalloc.com/
 
 *************************************************************************
 
-CHECK OUT SOURCE FROM SUBVERSION REPOSITORY:
+CHECK OUT SOURCE FROM SOURCE REPOSITORY:
+
+  git clone https://github.com/OpenVPN/openvpn 
 
   Check out stable version:
 
-    svn checkout http://svn.openvpn.net/projects/openvpn/trunk/openvpn openvpn
+  git checkout -b 2.2 remotes/origin/release/2.2
+
+  Check out master (unstable) branch:
 
-  Check out beta21 branch:
+  git checkout master
 
-    svn checkout http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn openvpn
 
 *************************************************************************
 

@@ -93,18 +95,18 @@ BUILD COMMANDS FROM TARBALL:
 
 *************************************************************************
 
-BUILD COMMANDS FROM SUBVERSION REPOSITORY CHECKOUT:
+BUILD COMMANDS FROM SOURCE REPOSITORY CHECKOUT:
 
-	autoreconf -i -v
+	autoreconf -i -v -f
 	./configure
 	make
 	make install
 
 *************************************************************************
 
-BUILD A TARBALL FROM SUBVERSION REPOSITORY CHECKOUT:
+BUILD A TARBALL FROM SOURCE REPOSITORY CHECKOUT:
 
-	autoreconf -i -v
+	autoreconf -i -v -f
 	./configure
 	make dist
 

@@ -121,36 +123,85 @@ Test Crypto:
 
 Test SSL/TLS negotiations (runs for 2 minutes):
 
-./openvpn --config sample-config-files/loopback-client  (In one window) 
-./openvpn --config sample-config-files/loopback-server  (Simultaneously in another window) 
+./openvpn --config sample/sample-config-files/loopback-client (In one window) 
+./openvpn --config sample/sample-config-files/loopback-server (Simultaneously in another window) 
 
 *************************************************************************
 
 OPTIONS for ./configure:
 
-  --enable-pthread          Compile pthread support for
-                            improved latency during SSL/TLS key
-                            negotiations (Linux or Solaris only)
-
-  --disable-lzo             Do not compile LZO compression support
-  --disable-crypto          Do not compile OpenSSL crypto support
-  --disable-ssl             Do not compile OpenSSL SSL support for
-                            TLS-based key exchange
-
-  --with-ssl-headers=DIR    Crypto/SSL Include files location
-  --with-ssl-lib=DIR        Crypto/SSL Library location
-  --with-lzo-headers=DIR    LZO Include files location
-  --with-lzo-lib=DIR        LZO Library location
-
-  --with-ifconfig-path=PATH   Path to ifconfig tool (only need to
-                              specify if in a non-standard location)
-
-  --with-leak-check=TYPE    Build with memory leak checking
-                            TYPE = dmalloc or ssl
-
-  --enable-strict           Enable strict compiler warnings
-
-  --enable-strict-options   Enable strict options check between peers
+  --disable-lzo           disable LZO compression support [default=yes]
+  --enable-lzo-stub       don't compile LZO compression support but still
+                          allow limited interoperability with LZO-enabled
+                          peers [default=no]
+  --disable-crypto        disable crypto support [default=yes]
+  --disable-ssl           disable SSL support for TLS-based key exchange
+                          [default=yes]
+  --enable-x509-alt-username
+                          enable the --x509-username-field feature
+                          [default=no]
+  --disable-multi         disable client/server support (--mode server +
+                          client mode) [default=yes]
+  --disable-server        disable server support only (but retain client
+                          support) [default=yes]
+  --disable-plugins       disable plug-in support [default=yes]
+  --disable-eurephia      disable support for the eurephia plug-in
+                          [default=yes]
+  --disable-management    disable management server support [default=yes]
+  --enable-pkcs11         enable pkcs11 support [default=no]
+  --disable-socks         disable Socks support [default=yes]
+  --disable-http-proxy    disable HTTP proxy support [default=yes]
+  --disable-fragment      disable internal fragmentation support (--fragment)
+                          [default=yes]
+  --disable-multihome     disable multi-homed UDP server support (--multihome)
+                          [default=yes]
+  --disable-port-share    disable TCP server port-share support (--port-share)
+                          [default=yes]
+  --disable-debug         disable debugging support (disable gremlin and verb
+                          7+ messages) [default=yes]
+  --enable-small          enable smaller executable size (disable OCC, usage
+                          message, and verb 4 parm list) [default=yes]
+  --enable-password-save  allow --askpass and --auth-user-pass passwords to be
+                          read from a file [default=yes]
+  --enable-iproute2       enable support for iproute2 [default=no]
+  --disable-def-auth      disable deferred authentication [default=yes]
+  --disable-pf            disable internal packet filter [default=yes]
+  --enable-strict         enable strict compiler warnings (debugging option)
+                          [default=no]
+  --enable-pedantic       enable pedantic compiler warnings, will not generate
+                          a working executable (debugging option) [default=no]
+  --enable-strict-options enable strict options check between peers (debugging
+                          option) [default=no]
+  --enable-selinux        enable SELinux support [default=no]
+  --enable-systemd        enable systemd suppport [default=no]
+
+ENVIRONMENT for ./configure:
+
+  IFCONFIG    full path to ipconfig utility
+  ROUTE       full path to route utility
+  IPROUTE     full path to ip utility
+  NETSTAT     path to netstat utility
+  MAN2HTML    path to man2html utility
+  GIT         path to git utility
+  TAP_CFLAGS  C compiler flags for tap
+  OPENSSL_CRYPTO_CFLAGS
+              C compiler flags for OPENSSL_CRYPTO, overriding pkg-config
+  OPENSSL_CRYPTO_LIBS
+              linker flags for OPENSSL_CRYPTO, overriding pkg-config
+  OPENSSL_SSL_CFLAGS
+              C compiler flags for OPENSSL_SSL, overriding pkg-config
+  OPENSSL_SSL_LIBS
+              linker flags for OPENSSL_SSL, overriding pkg-config
+  POLARSSL_CFLAGS
+              C compiler flags for polarssl
+  POLARSSL_LIBS
+              linker flags for polarssl
+  LZO_CFLAGS  C compiler flags for lzo
+  LZO_LIBS    linker flags for lzo
+  PKCS11_HELPER_CFLAGS
+              C compiler flags for PKCS11_HELPER, overriding pkg-config
+  PKCS11_HELPER_LIBS
+              linker flags for PKCS11_HELPER, overriding pkg-config
 
 *************************************************************************
 

@@ -316,28 +367,3 @@ CAVEATS & BUGS:
   IV for OFB and CFB modes.  This is not an issue if you are
   using CBC cipher mode (the default), or if you are using OFB or CFB
   cipher mode with SSL/TLS authentication.
-
-******************************************************************************
-
-Subject: [Openvpn-users] Re: Windows XP 64 bit
-From: Hypherion
-Date: Thu, 14 Apr 2005 07:01:17 +0000 (UTC)
-
-Well I managed to build a Windows XP 64 bit driver myself and it's working
-great, I can connect to my server again :)
-
-I had to use the WinDDK for Windows 2003 Service Pack 1 and just built the
-driver in the Windows 2003 AMD64 environment.  I had to comment out the
-MAPINFO:FIXUPS directive in the SOURCES file. 
- 
-Then I copied and renamed (devcon.exe/tapinstall.exe) from
-C:\WINDDK\3790.1830\tools\devcon\amd64. 
- 
-I had to edit the file OemWin2k.inf and change the Manufactured + Product
-Section to:
-
-[Manufacturer]
-   %Provider% = tap0901, NTamd64
-
-[tap0901.NTamd64]
-   %DeviceDescription% = tap0901.ndi, tap0901
Signature · 1 line
1.7.3.4
#11 lore raw

Re: [Openvpn-devel] [PATCH] build: update INSTALL to recent changes

Hi,

Quoted 3 lines · Alon Bar-Lev
Signed-off-by Alon Bar-Lev <[email protected]...>
---
 INSTALL |  150 +++++++++++++++++++++++++++++++++++++--------------------------

ACK!

It might need further work, but it's much better than what we currently have.

gert

Signature · 4 lines
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             [email protected]...
fax: +49-89-35655025                        [email protected]...
#12 lore raw

Re: [Openvpn-devel] [PATCH] build: update INSTALL to recent changes

Quoted 7 lines · Gert Doering

Hi,

Quoted 3 lines · Alon Bar-Lev
Signed-off-by Alon Bar-Lev <[email protected]...>

---
 INSTALL |  150 +++++++++++++++++++++++++++++++++++++--------------------------

Quoted 5 lines

ACK!

It might need further work, but it's much better than what we currently have.

gert

I am not sure the duplication between 'configure --help' and INSTALL is the way to go... each change in one derives a change in the other, I left this as it was.

Alon.

Applied
#13 lore raw

Re: [Openvpn-devel] [PATCH] build: update INSTALL to recent changes

In reply to Alon Bar-Lev
Quoted 5 lines · Alon Bar-Lev
Signed-off-by Alon Bar-Lev <[email protected]...>
---
 INSTALL |  150 +++++++++++++++++++++++++++++++++++++--------------------------
 1 files changed, 88 insertions(+), 62 deletions(-)

Applied to master branch.

commit e4d6066229e6f58399f177c4e8fa0cd6dfb59f0a

Author: Alon Bar-Lev <[email protected]...>
Date:   Mon Jun 4 07:45:07 2012 +0300
    build: update INSTALL to recent changes
    
    Signed-off-by: Alon Bar-Lev <[email protected]...>
    Acked-by: Gert Doering <[email protected]...>
    Message-Id: [email protected]...
    URL: http://article.gmane.org/gmane.network.openvpn.devel/6676
    Signed-off-by: David Sommerseth <[email protected]...>

kind regards,

David Sommerseth

#14 lore raw
In reply to Arne Schwabe
Quoted 25 lines · Arne Schwabe

Am 02.06.12 16:19, schrieb Alon Bar-Lev:

Quoted 24 lines

Hello,

Quoted 21 lines · Arne Schwabe

Hello,

while preparing my patches for OS X I also noticed that the build is broken on OS X:

[...]
checking net/if_tun.h usability... no checking net/if_tun.h presence... no checking for net/if_tun.h... no checking net/tun/if_tun.h usability... no checking net/tun/if_tun.h presence... no checking for net/tun/if_tun.h... no checking linux/if_tun.h usability... no checking linux/if_tun.h presence... no checking for linux/if_tun.h... no checking tap-windows.h usability... no checking tap-windows.h presence... no checking for tap-windows.h... no
configure: error: no tap header could be found

Quoted 7 lines
Quoted 5 lines
Quoted 3 lines

The bad commit is: 7cacdfd4b7f221139e0d2a0334f1f1cd8f2a1b75

   build: tap: search for tap header

Can you please tell me which tap header is expected and send me the config.log as well? or just send me the config.log...

I have no idea what header is expected but I think none. config.log is available here: http://plai.de/.tmp/config.log

Right.
None.
This was my mistake.

Alon.

#15 lore raw

Temporary workaround:

have_tap_header="yes" ./configure ...

Quoted 39 lines · Alon Bar-Lev
Quoted 25 lines · Arne Schwabe

Am 02.06.12 16:19, schrieb Alon Bar-Lev:

Quoted 24 lines

Hello,

Quoted 21 lines · Arne Schwabe

Hello,

while preparing my patches for OS X I also noticed that the build is broken on OS X:

[...]
checking net/if_tun.h usability... no checking net/if_tun.h presence... no checking for net/if_tun.h... no checking net/tun/if_tun.h usability... no checking net/tun/if_tun.h presence... no checking for net/tun/if_tun.h... no checking linux/if_tun.h usability... no checking linux/if_tun.h presence... no checking for linux/if_tun.h... no checking tap-windows.h usability... no checking tap-windows.h presence... no checking for tap-windows.h... no
configure: error: no tap header could be found

Quoted 7 lines
Quoted 5 lines
Quoted 3 lines

The bad commit is: 7cacdfd4b7f221139e0d2a0334f1f1cd8f2a1b75

   build: tap: search for tap header

Can you please tell me which tap header is expected and send me the config.log as well? or just send me the config.log...

I have no idea what header is expected but I think none. config.log is available here: http://plai.de/.tmp/config.log

Right.
None.
This was my mistake.

Alon.

#16 lore raw

PATCH 1/1 build: support platforms that does not need explicit tun headers

Both "generic" and Darwin have no special headers to use tap.

Fixes commit 7cacdfd4b7.

Reported-by Arne Schwabe <[email protected]...>
Signed-off-by Alon Bar-Lev <[email protected]...>
---
 configure.ac |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)
configure.ac +2 -0
index 5ace128..339164f 100644
@@ -283,6 +283,7 @@ case "$host" in
 	*-*-darwin*)
 		AC_DEFINE([TARGET_DARWIN], [1], [Are we running on Mac OS X?])
 		AC_DEFINE_UNQUOTED([TARGET_PREFIX], ["M"], [Target prefix])
+		have_tap_header="yes"
 		dnl some Mac OS X tendering (we use vararg macros...)
 		CPPFLAGS="$CPPFLAGS -no-cpp-precomp"
 		;;

@@ -299,6 +300,7 @@ case "$host" in
 		;;
 	*)
 		AC_DEFINE_UNQUOTED([TARGET_PREFIX], ["X"], [Target prefix])
+		have_tap_header="yes"
 		;;
 esac
Signature · 1 line
1.7.3.4
#17 lore raw

Re: [Openvpn-devel] [PATCH] build: support platforms that does not need explicit tun headers

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Quoted 7 lines · Alon Bar-Lev

Both "generic" and Darwin have no special headers to use tap.

Fixes commit 7cacdfd4b7.

Reported-by Arne Schwabe <[email protected]...> Signed-off-by: Alon

Bar-Lev <[email protected]...> --- configure.ac | 2 ++ 1 files
changed, 2 insertions(+), 0 deletions(-)

ACK. Applied to master branch.

commit 05f16e84314d83d81aa341ad2c6ea706603befd6

Author: Alon Bar-Lev <[email protected]...>
Date:   Sat Jun 2 18:31:49 2012 +0300
    build: support platforms that does not need explicit tun headers

    Reported-by: Arne Schwabe <[email protected]...>
    Signed-off-by: Alon Bar-Lev <[email protected]...>
    Acked-by: David Sommerseth <[email protected]...>
    Message-Id: [email protected]...
    URL: http://article.gmane.org/gmane.network.openvpn.devel/6659
    Signed-off-by: David Sommerseth <[email protected]...>

kind regards,

David Sommerseth
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/MnHsACgkQDC186MBRfrp4ewCfUQkyPawHIAuOuKPLmJ0TGvPU D/EAnRsKHThzGVmkSYvVfxFQ1FpQTjhB
=/UN6
-----END PGP SIGNATURE-----