openconnect with Belgian EID

[Nikos Mavrogiannopoulos]

On Fri, 2013-11-15 at 16:34 +0000, David Woodhouse wrote:

> > >> We're not. I think this ought to work though... ?
> > > I am so far failing to build the gnutls 3.2.x (commit 968299d3) branch
> > > on Fedora 19.
> > > First it dies with:
> > > make[4]: Entering directory `/home/dwmw2/git/gnutls/lib/accelerated/x86'
> > >   CC       sha-padlock.lo
> > > sha-padlock.c: In function 'padlock_sha1_update':
> > > sha-padlock.c:80:345: error: 'struct sha1_ctx' has no member named 'count_high'
> > >   MD_UPDATE(ctx, length, data, SHA1_COMPRESS, MD_INCR(ctx));
> > 
> > Which version of nettle is that? I should rule it out.
> 
> It'll be git HEAD. I saw it complaining that it needed nettle 2.7, and
> building the git repo was the easiest option.

nettle in master has broken the ABI and API. Even if you manage to
compile gnutls with you'll most probably have crashes in systems where
sizeof(size_t) != sizeof(unsigned).

I have no plans to move to the new library for now.

regards,
Nikos