[blfs-support] curl-7.24.0, gnutls and nettle problem

Fernando de Oliveira famobr at yahoo.com.br
Thu Feb 2 14:55:28 PST 2012

LFS 6.5, 6.7, 6.8, 7.0 (actually SVN-20111210).

Installed: linux-3.2.2, gnutls-3.0.12 and nettle-2.4.

From http://curl.haxx.se/docs/adv_20120124.html and from http://curl.haxx.se/docs/adv_20120124B.html:

  Only curl and libcurl builds that use OpenSSL are affected.
  Affected versions: curl 7.10.6 to and including 7.23.1
  Not affected versions: curl < 7.10.6 and >= 7.24.0"

From the homepage at http://curl.haxx.se/:

"Note especially that 7.24.0 fixes two separate security vulnerabilities: data injection attack for certain protocols and SSL CBC IV vulnerability when built to use OpenSSL"

As I did for curl-7.23.1, I tried to install using (but "make" failed):

"--without-ssl --with-gnutls: To build with GnuTLS support instead of OpenSSL for SSL/TLS."

Tail of "make" log:

"libtool: link: gcc -g0 -O2 -Wno-system-headers -o .libs/curl hugehelp.o tool_binmode.o tool_bname.o tool_cb_dbg.o tool_cb_hdr.o tool_cb_prg.o tool_cb_rea.o tool_cb_see.o tool_cb_skt.o tool_cb_wrt.o tool_cfgable.o tool_convert.o tool_dirhie.o tool_doswin.o tool_easysrc.o tool_formparse.o tool_getparam.o tool_getpass.o tool_help.o tool_helpers.o tool_homedir.o tool_libinfo.o tool_main.o tool_mfiles.o tool_msgs.o tool_operate.o tool_operhlp.o tool_panykey.o tool_paramhlp.o tool_parsecfg.o tool_setopt.o tool_sleep.o tool_urlglob.o tool_util.o tool_vms.o tool_writeenv.o tool_writeout.o tool_xattr.o strtoofft.o strdup.o rawstr.o nonblock.o  ../lib/.libs/libcurl.so -lrt -lz
../lib/.libs/libcurl.so: undefined reference to `nettle_md5_digest'
../lib/.libs/libcurl.so: undefined reference to `nettle_des_encrypt'
../lib/.libs/libcurl.so: undefined reference to `nettle_des_set_key'
../lib/.libs/libcurl.so: undefined reference to `nettle_md5_init'
../lib/.libs/libcurl.so: undefined reference to `nettle_md5_update'
../lib/.libs/libcurl.so: undefined reference to `nettle_md4_digest'
../lib/.libs/libcurl.so: undefined reference to `nettle_md4_update'
../lib/.libs/libcurl.so: undefined reference to `nettle_md4_init'
collect2: ld returned 1 exit status
make[2]: ** [curl] Erro 1
make[2]: Saindo do diretório `/media/dados/home/fernando/tmp/paco-build-2012.02.01/curl-7.24.0/src'
make[1]: ** [all] Erro 2
make[1]: Saindo do diretório `/media/dados/home/fernando/tmp/paco-build-2012.02.01/curl-7.24.0/src'
make: ** [all-recursive] Erro 1"

It builds correctly with ssl (i.e., omiting the switches referred above).

Please, help would be much appreciated.


More information about the blfs-support mailing list