Re: [Pan-users] SSL on Pan 137

[Ed Fletcher]

On 05/19/2012 08:07 PM, Duncan wrote:
> Ed Fletcher posted on Sat, 19 May 2012 18:29:58 -0300 as excerpted:
> > Where does configure get the version information?
>
> Often/normally from pkgconfig files, which are replacing the old libtool
> methods, etc.
>
> Look in /usr/lib(64)?/pkgconfig/ (standard location, distro may change
> it) for a gnutls.pc file.  Whatever that's pointing to is very likely to
> be what's detected.  Also check the include files at (again, standard
> location) /usr/include/gnutls/* , as those are likely to be the headers
> built against.
>
> FWIW, gentoo doesn't have anything even /close/ to that old still in the
> tree at all.  The oldest version, stable on all archs, is 2.12.18.  Also
> available are 2.12.19 and 3.0.18 and 3.0.19, with the last one the one
> I'm using for pan (and everything else depending on gnutls) here.
> However, there were some dependency changes around the 2.12.16 or so
> point -- gnutls started depending on nettle -- and between that and minor
> changes that require patching older versions of many packages depending
> on gnutls, it took awhile for distros to bump beyond that, and you appear
> to be on an older one that hasn't, yet.
>
> I actually unmasked the newer versions here, as pan needed the latest
> (3.0.12 or some such) when it first switched from the initial openssl
> secure connection implementation (openssl is problematic for gpled apps
> like pan due to gpl incompatibilities in its license, so most of the
> distros would have failed to activate the security option if pan had
> stayed with openssl, in ordered to actually be able to legally distribute
> it).  In ordered to do that, I had to dig up patches and apply them or
> unmask newer versions of some of the other gnutls depending packages, in
> ordered to get them to build.  AFAIK I still have one (claws-mail) that I
> have to revert to an older gnutls in ordered to be able to build, then I
> can upgrade gnutls again and the app will run, it just won't build with
> the newer version yet.  Fortunately, after he got the initial
> implementation working, HM was able to relax the gnutls requirements a
> bit, but obviously it's still too high for what slack is running ATM.

Bingo!  Found /usr/local/lib/pkgconfig/ with the two files in it.  Moved 
them to /usr/lib64/pkgconfig/ and now the ./configure file in pan can 
see the newer version of GnuTLS.

Hmph.  Now make fails:

make[3]: Entering directory `/root/pan2/pan/data'
  CXX    article.o
  CXX    article-cache.o
  CXX    encode-cache.o
  CXX    cert-store.o
cert-store.cc: In member function 'void 
pan::CertStore::remove_hard(const pan::Quark&)':
cert-store.cc:302:22: error: 'unlink' was not declared in this scope
make[3]: *** [cert-store.o] Error 1

I take it from the cert-store.o that it something to do with TLS.  Maybe 
I broke something by moving the files around by hand.

Ed
--
"Money is like manure; it's not worth a thing unless
it's spread around encouraging young things to grow."
- Thornton Wilder