<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Sorry, but I did not build the files. Libreswan came down
automatically from the Libreswan repo last night with a nightly "yum
update". Looking in
<a class="moz-txt-link-freetext" href="https://download.libreswan.org/binaries/rhel/7/x86_64/">https://download.libreswan.org/binaries/rhel/7/x86_64/</a> there are no
unbound/unbound-devel packages. Presumably also there is no
requirement in the libreswan rpm for unbound >= 1.5.0 either as
that would have stopped it from installing.<br>
<br>
<div class="moz-cite-prefix">On 10/08/2017 21:27, Paul Wouters
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:alpine.LRH.2.21.1708101621140.19026@bofh.nohats.ca">
<br>
On Thu, 10 Aug 2017, Nick Howitt wrote:
<br>
<br>
<blockquote type="cite">Presumably then this would be a
non-standard centos7/el7 version of unbound? I normally just use
their pre-compiled rpm
<br>
packages and have never compiled any myself. I currently have
v1.4.20-28.el7. I thought in the past when we needed
<br>
non-standard versions of the rpm's they were compiled into the
libreswan repo.
<br>
</blockquote>
<br>
Support for that was added in 1.5.0. If you are on rhel/centos
then the
<br>
version is not good enough. There is rhbz#1251440 to request a
rebase
<br>
for RHEL-7.5. You can find updated unbound packages meanwhile in
our
<br>
repository on download.libreswan.org/binaries/rhel/7/
<br>
<br>
The reason it compiled must have been because
USE_UNBOUND_EVENT_H_COPY
<br>
is set to true per default and so you got the newer include file
<br>
while having on older library. The reason for this is that due to
<br>
a bug in upstream unbound, they did not install unbound-event.h
<br>
even if they compiled in support for libevent into the library. So
<br>
we have to ship our own version of the include file for now while
<br>
distro's catch up and properly ship unbound-event.h.
<br>
<br>
It's unfortunate that this lead to your upgrade state where
unbound
<br>
is not good enough. We did however upgrade our shipped spec files
<br>
to require unbound >= 1.5.0, so I assume you build from your
own
<br>
spec file where this was not updated, or else it should have
failed
<br>
to build, or when using our binary repo on download.libreswan.org
<br>
for rhel/epel, it would have dragged in a newer unbound as well.
<br>
<br>
Paul
<br>
</blockquote>
<br>
</body>
</html>