CentOS 6.4 build openconnect with gnutls errors

[Bill S]

I am trying to build openconnect from source to be able to include
gnutls support (the CentOS packages does not include gnutls support,
and therefor will not work with my smartcard).  I've manually built
both gnutls-3.1.17 and nettle-2.5 and used
PKG_CONFIG_PATH=/usr/local/lib/pkgconfig/ to get ./configure to pass
its tests, but when I try to make the binaries, I get the following
results....

[root at wjslaptop openconnect-5.01]# ./configure --with-gnutls
checking for pkg-config... /usr/bin/pkg-config
checking pkg-config is at least version 0.9.0... yes
checking build system type... x86_64-unknown-linux-gnu
checking host system type... x86_64-unknown-linux-gnu
checking whether to enable maintainer-specific portions of Makefiles... yes
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
/home/wjs/tools/build/openconnect-5.01/missing: Unknown
`--is-lightweight' option
Try `/home/wjs/tools/build/openconnect-5.01/missing --help' for more information
configure: WARNING: 'missing' script is too old or missing
checking for a thread-safe mkdir -p... /bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking whether make supports nested variables... yes
checking whether make supports nested variables... (cached) yes
configure: Applying feature macros for GNU build
checking for style of include used by make... GNU
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking dependency style of gcc... gcc3
checking for fdevname_r... no
checking for getline... yes
checking for strcasestr... yes
checking for asprintf... yes
checking for supported compiler flags...  -Wall -Wextra
-Wno-missing-field-initializers -Wno-sign-compare
-Wno-unused-parameter -Werror=pointer-to-int-cast
-Wdeclaration-after-statement -Werror-implicit-function-declaration
-Wformat-nonliteral -Wformat-security -Winit-self
-Wmissing-declarations -Wmissing-include-dirs -Wnested-externs
-Wpointer-arith -Wwrite-strings
checking for socket... yes
checking for inet_aton... yes
checking for __android_log_vprint... no
checking for __android_log_vprint in -llog... no
checking for msgfmt... /usr/bin/msgfmt
checking for functional NLS support... yes
checking for GNUTLS... yes
checking for gnutls_dtls_set_data_mtu... yes
checking for gnutls_certificate_set_x509_system_trust... yes
checking for gnutls_pkcs12_simple_parse... yes
checking for gnutls_certificate_set_key... yes
checking for gnutls_pk_to_sign... yes
checking for gnutls_session_set_premaster... yes
checking for gnutls_pkcs11_add_provider... no
checking for tss library... no
checking how to print strings... printf
checking for a sed that does not truncate output... /bin/sed
checking for grep that handles long lines and -e... /bin/grep
checking for egrep... /bin/grep -E
checking for fgrep... /bin/grep -F
checking for ld used by gcc... /usr/bin/ld
checking if the linker (/usr/bin/ld) is GNU ld... yes
checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B
checking the name lister (/usr/bin/nm -B) interface... BSD nm
checking whether ln -s works... yes
checking the maximum length of command line arguments... 1966080
checking whether the shell understands some XSI constructs... yes
checking whether the shell understands "+="... yes
checking how to convert x86_64-unknown-linux-gnu file names to
x86_64-unknown-linux-gnu format... func_convert_file_noop
checking how to convert x86_64-unknown-linux-gnu file names to
toolchain format... func_convert_file_noop
checking for /usr/bin/ld option to reload object files... -r
checking for objdump... objdump
checking how to recognize dependent libraries... pass_all
checking for dlltool... no
checking how to associate runtime and link libraries... printf %s\n
checking for ar... ar
checking for archiver @FILE support... @
checking for strip... strip
checking for ranlib... ranlib
checking command to parse /usr/bin/nm -B output from gcc object... ok
checking for sysroot... no
checking for mt... no
checking if : is a manifest tool... no
checking how to run the C preprocessor... gcc -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking for dlfcn.h... yes
checking for objdir... .libs
checking if gcc supports -fno-rtti -fno-exceptions... no
checking for gcc option to produce PIC... -fPIC -DPIC
checking if gcc PIC flag -fPIC -DPIC works... yes
checking if gcc static flag -static works... no
checking if gcc supports -c -o file.o... yes
checking if gcc supports -c -o file.o... (cached) yes
checking whether the gcc linker (/usr/bin/ld -m elf_x86_64) supports
shared libraries... yes
checking whether -lc should be explicitly linked in... no
checking dynamic linker characteristics... GNU/Linux ld.so
checking how to hardcode library paths into programs... immediate
checking whether stripping libraries is possible... yes
checking if libtool supports shared libraries... yes
checking whether to build shared libraries... yes
checking whether to build static libraries... no
checking if library symbol versioning is available... yes (with
--version-script)
checking for LIBXML2... yes
checking for ZLIB... yes
checking for LIBPROXY... no
checking for libproxy... no
checking for LIBSTOKEN... no
checking for LIBOATH... no
checking if_tun.h usability... no
checking if_tun.h presence... no
checking for if_tun.h... no
checking linux/if_tun.h usability... yes
checking linux/if_tun.h presence... yes
checking for linux/if_tun.h... yes
checking for python... /usr/bin/python
checking that generated files are newer than configure... done
configure: creating ./config.status
config.status: creating Makefile
config.status: creating openconnect.pc
config.status: creating po/Makefile
config.status: creating www/Makefile
config.status: creating libopenconnect.map
config.status: creating openconnect.8
config.status: creating www/styles/Makefile
config.status: creating www/inc/Makefile
config.status: creating www/images/Makefile
config.status: executing depfiles commands
config.status: executing libtool commands
[root at wjslaptop openconnect-5.01]# make
Making all in www
make[1]: Entering directory `/home/wjs/tools/build/openconnect-5.01/www'
Making all in styles
make[2]: Entering directory `/home/wjs/tools/build/openconnect-5.01/www/styles'
make[2]: Nothing to be done for `all'.
make[2]: Leaving directory `/home/wjs/tools/build/openconnect-5.01/www/styles'
Making all in inc
make[2]: Entering directory `/home/wjs/tools/build/openconnect-5.01/www/inc'
make[2]: Nothing to be done for `all'.
make[2]: Leaving directory `/home/wjs/tools/build/openconnect-5.01/www/inc'
Making all in images
make[2]: Entering directory `/home/wjs/tools/build/openconnect-5.01/www/images'
make[2]: Nothing to be done for `all'.
make[2]: Leaving directory `/home/wjs/tools/build/openconnect-5.01/www/images'
make[2]: Entering directory `/home/wjs/tools/build/openconnect-5.01/www'
groff -t -K UTF-8 -mandoc -Txhtml ../openconnect.8 | sed -e
'1,/<body>/d' -e '/<\/body>/,$d' > openconnect.8.inc
groff: invalid option -- 'K'
usage: groff [-abceghilpstvzCENRSUVXZ] [-Fdir] [-mname] [-Tdev]
[-ffam]
       [-wname] [-Wname] [-Mdir] [-dcs] [-rcn] [-nnum] [-olist]
[-Parg]
       [-Larg] [-Idir] [files...]
groff -h gives more help
/usr/bin/python "./html.py" -d . manual.xml > manual.html || (rm
manual.html; exit 1)
make[2]: Leaving directory
`/home/wjs/tools/build/openconnect-5.01/www'
make[1]: Leaving directory
`/home/wjs/tools/build/openconnect-5.01/www'
Making all in po
make[1]: Entering directory
`/home/wjs/tools/build/openconnect-5.01/po'
make[1]: Nothing to be done for `all'.
make[1]: Leaving directory `/home/wjs/tools/build/openconnect-5.01/po'
make[1]: Entering directory `/home/wjs/tools/build/openconnect-5.01'
  CCLD     libopenconnect.la
  CCLD     openconnect
openconnect-dtls.o: In function `dtls_try_handshake':
/home/wjs/tools/build/openconnect-5.01/dtls.c:219: undefined reference
to `SSL_do_handshake'
/home/wjs/tools/build/openconnect-5.01/dtls.c:300: undefined reference
to `SSL_get_error'
/home/wjs/tools/build/openconnect-5.01/dtls.c:226: undefined reference
to `SSL_free'
/home/wjs/tools/build/openconnect-5.01/dtls.c:258: undefined reference
to `SSLeay'
/home/wjs/tools/build/openconnect-5.01/dtls.c:318: undefined reference
to `openconnect_print_err_cb'
/home/wjs/tools/build/openconnect-5.01/dtls.c:318: undefined reference
to `ERR_print_errors_cb'
/home/wjs/tools/build/openconnect-5.01/dtls.c:321: undefined reference
to `SSL_free'
/home/wjs/tools/build/openconnect-5.01/dtls.c:332: undefined reference
to `SSL_free'
openconnect-dtls.o: In function `start_dtls_handshake':
/home/wjs/tools/build/openconnect-5.01/dtls.c:173: undefined reference
to `SSL_new'
/home/wjs/tools/build/openconnect-5.01/dtls.c:174: undefined reference
to `SSL_set_connect_state'
/home/wjs/tools/build/openconnect-5.01/dtls.c:176: undefined reference
to `SSL_get_ciphers'
/home/wjs/tools/build/openconnect-5.01/dtls.c:177: undefined reference
to `sk_num'
/home/wjs/tools/build/openconnect-5.01/dtls.c:187: undefined reference
to `sk_value'
/home/wjs/tools/build/openconnect-5.01/dtls.c:194: undefined reference
to `SSL_set_session'
/home/wjs/tools/build/openconnect-5.01/dtls.c:205: undefined reference
to `BIO_new_socket'
/home/wjs/tools/build/openconnect-5.01/dtls.c:207: undefined reference
to `BIO_ctrl'
/home/wjs/tools/build/openconnect-5.01/dtls.c:208: undefined reference
to `SSL_set_bio'
/home/wjs/tools/build/openconnect-5.01/dtls.c:210: undefined reference
to `SSL_ctrl'
/home/wjs/tools/build/openconnect-5.01/dtls.c:154: undefined reference
to `SSL_SESSION_new'
/home/wjs/tools/build/openconnect-5.01/dtls.c:179: undefined reference
to `SSL_CTX_free'
/home/wjs/tools/build/openconnect-5.01/dtls.c:180: undefined reference
to `SSL_free'
/home/wjs/tools/build/openconnect-5.01/dtls.c:181: undefined reference
to `SSL_SESSION_free'
/home/wjs/tools/build/openconnect-5.01/dtls.c:128: undefined reference
to `DTLSv1_client_method'
/home/wjs/tools/build/openconnect-5.01/dtls.c:129: undefined reference
to `SSL_CTX_new'
/home/wjs/tools/build/openconnect-5.01/dtls.c:140: undefined reference
to `SSL_CTX_ctrl'
/home/wjs/tools/build/openconnect-5.01/dtls.c:142: undefined reference
to `SSL_CTX_set_cipher_list'
/home/wjs/tools/build/openconnect-5.01/dtls.c:145: undefined reference
to `SSL_CTX_free'
/home/wjs/tools/build/openconnect-5.01/dtls.c:133: undefined reference
to `openconnect_print_err_cb'
/home/wjs/tools/build/openconnect-5.01/dtls.c:133: undefined reference
to `ERR_print_errors_cb'
openconnect-dtls.o: In function `dtls_restart':
/home/wjs/tools/build/openconnect-5.01/dtls.c:602: undefined reference
to `SSL_free'
openconnect-dtls.o: In function `dtls_mainloop':
/home/wjs/tools/build/openconnect-5.01/dtls.c:709: undefined reference
to `SSL_read'
/home/wjs/tools/build/openconnect-5.01/dtls.c:835: undefined reference
to `SSL_write'
/home/wjs/tools/build/openconnect-5.01/dtls.c:837: undefined reference
to `SSL_get_error'
/home/wjs/tools/build/openconnect-5.01/dtls.c:845: undefined reference
to `openconnect_print_err_cb'
/home/wjs/tools/build/openconnect-5.01/dtls.c:845: undefined reference
to `ERR_print_errors_cb'
/home/wjs/tools/build/openconnect-5.01/dtls.c:732: undefined reference
to `SSL_write'
/home/wjs/tools/build/openconnect-5.01/dtls.c:812: undefined reference
to `SSL_write'
/home/wjs/tools/build/openconnect-5.01/dtls.c:794: undefined reference
to `SSL_write'
openconnect-cstp.o: In function `cstp_write':
/home/wjs/tools/build/openconnect-5.01/cstp.c:647: undefined reference
to `SSL_write'
/home/wjs/tools/build/openconnect-5.01/cstp.c:651: undefined reference
to `SSL_get_error'
/home/wjs/tools/build/openconnect-5.01/cstp.c:662: undefined reference
to `openconnect_print_err_cb'
/home/wjs/tools/build/openconnect-5.01/cstp.c:662: undefined reference
to `ERR_print_errors_cb'
openconnect-cstp.o: In function `cstp_read':
/home/wjs/tools/build/openconnect-5.01/cstp.c:629: undefined reference
to `SSL_read'
/home/wjs/tools/build/openconnect-5.01/cstp.c:633: undefined reference
to `SSL_get_error'
./.libs/libopenconnect.so: undefined reference to `X509_free'
./.libs/libopenconnect.so: undefined reference to `ENGINE_free'
./.libs/libopenconnect.so: undefined reference to
`ENGINE_load_builtin_engines'
./.libs/libopenconnect.so: undefined reference to `ENGINE_by_id'
collect2: ld returned 1 exit status
make[1]: *** [openconnect] Error 1
make[1]: Leaving directory `/home/wjs/tools/build/openconnect-5.01'
make: *** [all-recursive] Error 1
[root at wjslaptop openconnect-5.01]#


Any assistance you can provide is greatly appreciated!

 - Bill