<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
I tell a slight lie. I have libreswan-3.21-1.el7.centos.x86_64. I
did not realise you'd separated the repos, but the same comments
apply. rpm -qR libreswan-3.21-1.el7.centos.x86_64 does not appear to
have any version requirements for libunbound.so.2 or
libevent-2.0.so.5. I' not sure even where to find the el7.centos
packages on the download site. Presumably the repos are looking
somewhere else. I'll have to dig further.<br>
<br>
<div class="moz-cite-prefix">On 10/08/2017 21:35, Nick Howitt wrote:<br>
</div>
<blockquote type="cite"
cite="mid:fbefb9e2-8fd9-7160-dd20-45b71822fbd6@howitts.co.uk">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
Sorry, but I did not build the files. Libreswan came down
automatically from the Libreswan repo last night with a nightly
"yum update". Looking in <a class="moz-txt-link-freetext"
href="https://download.libreswan.org/binaries/rhel/7/x86_64/"
moz-do-not-send="true">https://download.libreswan.org/binaries/rhel/7/x86_64/</a>
there are no unbound/unbound-devel packages. Presumably also there
is no requirement in the libreswan rpm for unbound >= 1.5.0
either as that would have stopped it from installing.<br>
<br>
<div class="moz-cite-prefix">On 10/08/2017 21:27, Paul Wouters
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:alpine.LRH.2.21.1708101621140.19026@bofh.nohats.ca"> <br>
On Thu, 10 Aug 2017, Nick Howitt wrote: <br>
<br>
<blockquote type="cite">Presumably then this would be a
non-standard centos7/el7 version of unbound? I normally just
use their pre-compiled rpm <br>
packages and have never compiled any myself. I currently have
v1.4.20-28.el7. I thought in the past when we needed <br>
non-standard versions of the rpm's they were compiled into the
libreswan repo. <br>
</blockquote>
<br>
Support for that was added in 1.5.0. If you are on rhel/centos
then the <br>
version is not good enough. There is rhbz#1251440 to request a
rebase <br>
for RHEL-7.5. You can find updated unbound packages meanwhile in
our <br>
repository on download.libreswan.org/binaries/rhel/7/ <br>
<br>
The reason it compiled must have been because
USE_UNBOUND_EVENT_H_COPY <br>
is set to true per default and so you got the newer include file
<br>
while having on older library. The reason for this is that due
to <br>
a bug in upstream unbound, they did not install unbound-event.h
<br>
even if they compiled in support for libevent into the library.
So <br>
we have to ship our own version of the include file for now
while <br>
distro's catch up and properly ship unbound-event.h. <br>
<br>
It's unfortunate that this lead to your upgrade state where
unbound <br>
is not good enough. We did however upgrade our shipped spec
files <br>
to require unbound >= 1.5.0, so I assume you build from your
own <br>
spec file where this was not updated, or else it should have
failed <br>
to build, or when using our binary repo on
download.libreswan.org <br>
for rhel/epel, it would have dragged in a newer unbound as well.
<br>
<br>
Paul <br>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Swan mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Swan@lists.libreswan.org">Swan@lists.libreswan.org</a>
<a class="moz-txt-link-freetext" href="https://lists.libreswan.org/mailman/listinfo/swan">https://lists.libreswan.org/mailman/listinfo/swan</a>
</pre>
</blockquote>
<br>
</body>
</html>