<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=iso-8859-1"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Texte brut Car";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
span.TextebrutCar
{mso-style-name:"Texte brut Car";
mso-style-priority:99;
mso-style-link:"Texte brut";
font-family:"Calibri","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=FR link=blue vlink=purple><div class=WordSection1><p class=MsoPlainText><span lang=EN-US>Hi,<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>I updated libnss to 3.17 and libnspr4 to 4.10 :<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>(I used your link to download the packages : <a href="ftp://ftp.libreswan.org/binaries/debian/wheezy/">ftp://ftp.libreswan.org/binaries/debian/wheezy/</a>)<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>ii libnss3:amd64 2:3.17.2-1.1 amd64 Network Security Service libraries<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>ii libnss3-1d:amd64 2:3.17.2-1.1 amd64 Network Security Service libraries - transitional package<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>ii libnss3-dev:amd64 2:3.17.2-1.1 amd64 Development files for the Network Security Service libraries<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>ii libnss3-tools 2:3.17.2-1.1 amd64 Network Security Service tools<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>ii libnspr4:amd64 2:4.10.7-1 amd64 NetScape Portable Runtime Library<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>ii libnspr4-0d:amd64 2:4.10.7-1 amd64 NetScape Portable Runtime Library - transitional package<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>ii libnspr4-dbg:amd64 2:4.10.7-1 amd64 Debugging symbols for the NetScape Portable Runtime library<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>ii libnspr4-dev 2:4.10.7-1 amd64 Development files for the NetScape Portable Runtime library<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><b><span lang=EN-US>It's works. Thank you very much for your help<o:p></o:p></span></b></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText>Sincerely,<span lang=EN-US style='mso-fareast-language:FR'><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US style='mso-fareast-language:FR'><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US style='mso-fareast-language:FR'><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span style='mso-fareast-language:FR'>-----Message d'origine-----<br>De : Antony Antony [mailto:antony@phenome.org] <br>Envoyé : vendredi 28 août 2015 13:15<br>À : Support Reseau<br>Cc : swan@lists.libreswan.org<br>Objet : Re: [Swan] Libreswan 3.15 - Compilation Problem</span></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>Hi,<o:p></o:p></p><p class=MsoPlainText>Libreswan 3.15 need a newer libnss/libnspr than the one in default Debian Wheezy/7.x Try with later version libnss, say 3.17 <o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>As an exmple the required binary packages are at:<o:p></o:p></p><p class=MsoPlainText><a href="ftp://ftp.libreswan.org/binaries/debian/wheezy/"><span style='color:windowtext;text-decoration:none'>ftp://ftp.libreswan.org/binaries/debian/wheezy/</span></a> <o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>And the steps are documented at:<o:p></o:p></p><p class=MsoPlainText><a href="https://libreswan.org/wiki/3.14_on_Debian_Wheezy"><span style='color:windowtext;text-decoration:none'>https://libreswan.org/wiki/3.14_on_Debian_Wheezy</span></a><o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>regards,<o:p></o:p></p><p class=MsoPlainText>-antony<o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>On Fri, Aug 28, 2015 at 12:31:09PM +0200, Support Reseau wrote:<o:p></o:p></p><p class=MsoPlainText>> Hi,<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> Since the vulnerability CVE-2015-3240 (IKE DoS when using NSS) I tried <o:p></o:p></p><p class=MsoPlainText>> to compile libreswan-3.15 on Debian 7. But I can’t; Do you know why :<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> -c /root/libreswan-3.15/programs/pluto/crypt_dbg.c<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> /root/libreswan-3.15/programs/pluto/crypt_dbg.c: In function 'symkey_bytes':<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> /root/libreswan-3.15/programs/pluto/crypt_dbg.c:102:2: error: implicit <o:p></o:p></p><p class=MsoPlainText>> declaration of function 'PK11_Decrypt'<o:p></o:p></p><p class=MsoPlainText>> [-Werror=implicit-function-declaration]<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> /root/libreswan-3.15/programs/pluto/crypt_dbg.c:102:2: error: nested <o:p></o:p></p><p class=MsoPlainText>> extern declaration of 'PK11_Decrypt' [-Werror=nested-externs]<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> cc1: all warnings being treated as errors<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> make[3]: *** [crypt_dbg.o] Erreur 1<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> make[3]: *** Attente des tâches non terminées....<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> make[3]: quittant le répertoire «<o:p></o:p></p><p class=MsoPlainText>> /root/libreswan-3.15/OBJ.linux.x86_64/programs/pluto »<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> make[2]: *** [local-base] Erreur 2<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> make[2]: quittant le répertoire « /root/libreswan-3.15/programs/pluto <o:p></o:p></p><p class=MsoPlainText>> »<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> make[1]: *** [all] Erreur 2<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> make[1]: quittant le répertoire « /root/libreswan-3.15/programs »<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> make: *** [all] Erreur 2<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> Sincerely<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>> _______________________________________________<o:p></o:p></p><p class=MsoPlainText>> Swan mailing list<o:p></o:p></p><p class=MsoPlainText>> <a href="mailto:Swan@lists.libreswan.org"><span style='color:windowtext;text-decoration:none'>Swan@lists.libreswan.org</span></a><o:p></o:p></p><p class=MsoPlainText>> <a href="https://lists.libreswan.org/mailman/listinfo/swan"><span style='color:windowtext;text-decoration:none'>https://lists.libreswan.org/mailman/listinfo/swan</span></a><o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p></div></body></html>