Build of OpenConnect 7.05+ for EL6?

Oliver Hernandez mr.oliver.hernandez at gmail.com
Fri Jul 8 07:34:14 PDT 2016


I'd be happy to help test this.

I'm very new to building C/C++ on Linux, so please bear with me.

I've installed the scratch builds of libp11 for EL6 you posted David,
both the release and devel packages.  I've also installed the
p11-kit-devel package, and verified I have p11-kit installed.

Right now I'm stuck on the configure step of building OpenConnect.
Now, I'm building src rpm from the link you posted Nikos with the EL6
release of OpenConnect, if that makes a difference.  I'm getting
warnings that my version of GnuTLS is too old, and that my version of
OpenSSL is known to be broken with Cisco DTLS.  I'm running RHEL6
configured to use a local repo on our corporate network, and there are
no updates to either of these packages.  Am I required to have to find
updated versions of one of these packages to proceed?

Thanks!

On Fri, Jul 8, 2016 at 7:43 AM, David Woodhouse <dwmw2 at infradead.org> wrote:
> On Fri, 2016-07-08 at 13:38 +0200, Nikos Mavrogiannopoulos wrote:
>>
>> I have never tested. Are you sure that engine_pkcs11 and libp11 are
>> sufficient in el6? Oliver could you test that?
>
> We don't use engine_pkcs11; we use libp11 directly (and that means we
> have our own copy of the PKCS#11 URI handling too).
>
> As noted, libp11 is completely absent from EL6 so would need to be
> packaged — but just rebuilding the latest Fedora package appears to be
> fine.
>
> Note that OpenSC in EL6 doesn't ship with a p11-kit module file, so
> isn't loaded by default. That probably wants to get fixed too.
>
> --
> dwmw2



More information about the openconnect-devel mailing list