Trying to build openconnect 8.20 on ubuntu 20

[Dimitri Papadopoulos]

Hi,

I cannot reproduce this error on my Ubuntu 20.04 workstation. Note that 
it doesn't really make sense to run "make check" before "make", but 
anyway, "make check" does work for me:

$ cat openconnect-8.20/tests/test-suite.log
============================================
    openconnect 8.20: tests/test-suite.log
============================================

# TOTAL: 4
# PASS:  4
# SKIP:  0
# XFAIL: 0
# FAIL:  0
# XPASS: 0
# ERROR: 0

.. contents:: :depth: 2

$



What software do you have installed under /usr/local?

What if you remove these commands from the script?
	export LD_RUN_PATH=/usr/local/lib
	export LD_LIBRARY_PATH=/usr/local/lib

Is your Ubuntu 20.04 machine up-to-date?

The following error message is typical of too restrictive 
crypto-policies. Have you modified them in any way? I may have modified 
them myself on my side, I really cannot recall.
	routines:tls_construct_client_hello:no protocols 
available:../ssl/statem/statem_clnt.c:1112: Unexpected handshake result 
at initial call!

Best Regards,
Dimitri

Le 04/03/2022 à 15:24, Eveno, Manuel a écrit :
>   Hi,
> 
> I need to test the fortinet protocol.
> I'm trying to build openconnect for the downloaded package.
> 
> But when running the "make" command it fails on tests.
> 
> Here is my install script :
> ------------- Install script : --------------------
> 
> #/bin/bash
> set -euo pipefail
> 
> OPENCONNECT_VERSION=8.20
> 
> # Cleanup
> rm -rf openconnect-$OPENCONNECT_VERSION.tar.gz
> rm -rf openconnect-$OPENCONNECT_VERSION
> sudo rm -f /etc/vpnc/vpnc-script
> 
> # Get vpn-script
> sudo mkdir -p /etc/vpnc/
> sudo wget https://gitlab.com/openconnect/vpnc-scripts/raw/master/vpnc-script
> -O /etc/vpnc/vpnc-script
> sudo chmod a+x /etc/vpnc/vpnc-script
> 
> # Get openconnect
> wget https://www.infradead.org/openconnect/download/openconnect-$OPENCONNECT_VERSION.tar.gz
> 
> tar xzvf openconnect-$OPENCONNECT_VERSION.tar.gz
> cd openconnect-$OPENCONNECT_VERSION
> 
> sudo apt install -y libxml2-dev libssl-dev gettext zlib1g-dev
> pkg-config libp11-dev p11-kit
> 
> export LD_RUN_PATH=/usr/local/lib
> export LD_LIBRARY_PATH=/usr/local/lib
> 
> ./configure
> make check
> make
> 
> 
> $ cat openconnect-8.20/tests/test-suite.log
> ------------- Output : --------------------
> FAIL: bad_dtls_test
> ===================
> 
> 139960338883904:error:141E70BF:SSL
> routines:tls_construct_client_hello:no protocols
> available:../ssl/statem/statem_clnt.c:1112:
> Unexpected handshake result at initial call!
> Cisco BadDTLS test: FAILED
> FAIL bad_dtls_test (exit status: 1)
> 
> Regards
> Manuel EVENO
> 
> _______________________________________________
> openconnect-devel mailing list
> openconnect-devel at lists.infradead.org
> http://lists.infradead.org/mailman/listinfo/openconnect-devel

-- 
Dimitri Papadopoulos
Université Paris-Saclay, CEA, NeuroSpin
91191 Gif-sur-Yvette
France
+33 (0)1 69 08 79 12