[Swan] Cannot compile Libreswan 3.14 and newer on CentOS 5

Tomas France tomfra at centrum.cz
Fri Sep 25 17:31:52 UTC 2015


OK, one more problem it seems. The RPM is installed and "ipsec verify" shows
all green, except for "prelink" which shows "present" in yellow but that's
probably not important for now.

But when starting the ipsec service, I now get this error:

----------------------
certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key
database is in an old, unsupported format.
Failed to initialize nss database sql:/etc/ipsec.d
.Initializing NSS database
See 'man pluto' if you want to protect the NSS database with a password

certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key
database is in an old, unsupported format.
Failed to initialize nss database sql:/etc/ipsec.d
----------------------

I have not seen anything similar before.

Tomas




-----Original Message-----
From: Paul Wouters [mailto:paul at nohats.ca] 
Sent: Friday, September 25, 2015 5:44 PM
To: Tomas France
Cc: swan at lists.libreswan.org
Subject: Re: [Swan] Cannot compile Libreswan 3.14 and newer on CentOS 5

On Fri, 25 Sep 2015, Tomas France wrote:

> Thanks! Almost there hopefully :)
>
> Now it fails at this error:

Odd. I wonder if you have older glibc headers or something.

> -------------------------------
> -c /opt/libreswan-3.15/programs/pluto/ikev1_xauth.c
> cc1: warnings being treated as errors
> /opt/libreswan-3.15/programs/pluto/ikev1_xauth.c: In function
'xauth_inR0':
> /opt/libreswan-3.15/programs/pluto/ikev1_xauth.c:1508: warning: 
> implicit declaration of function 'strnlen'

try adding:

#include <string.h>

> /opt/libreswan-3.15/programs/pluto/ikev1_xauth.c:1508: warning: nested 
> extern declaration of 'strnlen'
> /opt/libreswan-3.15/programs/pluto/ikev1_xauth.c:1508: warning: 
> comparison between signed and unsigned
> /opt/libreswan-3.15/programs/pluto/ikev1_xauth.c:1529: warning: 
> comparison between signed and unsigned
> make[3]: *** [ikev1_xauth.o] Error 1
> -------------------------------

You can also ignore further warnings by creating a file Makefile.inc.local
containing:

WERROR_CFLAGS=

and it will ignore any further warnings.

Paul
> Tomas
>
>
>
> -----Original Message-----
> From: Paul Wouters [mailto:paul at nohats.ca]
> Sent: Friday, September 25, 2015 4:18 PM
> To: Tomas France
> Cc: swan at lists.libreswan.org
> Subject: Re: [Swan] Cannot compile Libreswan 3.14 and newer on CentOS 
> 5
>
> On Fri, 25 Sep 2015, Tomas France wrote:
>
>> -c /opt/libreswan-3.15/programs/pluto/timer.c
>> cc1: warnings being treated as errors
>> /opt/libreswan-3.15/programs/pluto/timer.c: In function 'timer_event_cb':
>> /opt/libreswan-3.15/programs/pluto/timer.c:455: warning:
>> 'last_used_age.delta_secs' is used uninitialized in this function
>> make[3]: *** [timer.o] Error 1
>> make[3]: Leaving directory
>> `/opt/libreswan-3.15/OBJ.linux.x86_64/programs/pluto'
>> make[2]: *** [local-base] Error 2
>> make[2]: Leaving directory `/opt/libreswan-3.15/programs/pluto'
>
> Hugh commited a fix for that:
>
> https://github.com/libreswan/libreswan/commit/5a9bdbadedcec879b0afd953
> 37ef6e
> 4a5d5429f9.patch
>
> Paul
>
> _______________________________________________
> Swan mailing list
> Swan at lists.libreswan.org
> https://lists.libreswan.org/mailman/listinfo/swan
>



More information about the Swan mailing list