Messages in this thread | | | Date | Tue, 15 Sep 2015 15:01:23 -0700 | Subject | Re: Linux 4.3-rc1 build error on CentOS 5.11 "scripts/sign-file.c:23:25: fatal error: openssl/cms.h: No such file or directory" | From | Vinson Lee <> |
| |
On Tue, Sep 15, 2015 at 6:40 AM, David Howells <dhowells@redhat.com> wrote: > Does this patch fix the problem? > > David > --- > commit 8c8ed9de80bc1bbfd0f1e9a018a0feffcf3c11f8 > Author: David Howells <dhowells@redhat.com> > Date: Tue Sep 15 13:57:08 2015 +0100 > > MODSIGN: Change from CMS to PKCS#7 signing if the openssl is too old > > The sign-file.c program actually uses CMS rather than PKCS#7 to sign a file > since that allows the target X.509 certificate to be specified by > subjectKeyId rather than by issuer + serialNumber. > > However, older versions of the OpenSSL crypto library (such as may be found > in CentOS 5.11) don't support CMS. Assume everything prior to OpenSSL-1.0.0 > doesn't support CMS and switch to using PKCS#7 in that case. > > The compiler gives the following error: > > HOSTCC scripts/sign-file > scripts/sign-file.c:23:25: fatal error: openssl/cms.h: No such file or directory > #include <openssl/cms.h> > > Reported-by: Vinson Lee <vlee@twopensource.com> > Signed-off-by: David Howells <dhowells@redhat.com> > Acked-by: David Woodhouse <David.Woodhouse@intel.com> >
This patch results in this build error on CentOS 5.11.
HOSTCC scripts/sign-file scripts/sign-file.c: In function ‘main’: scripts/sign-file.c:255:23: error: ‘PKCS7_PARTIAL’ undeclared (first use in this function) PKCS7_NOCERTS | PKCS7_PARTIAL | PKCS7_BINARY | ^ scripts/sign-file.c:255:23: note: each undeclared identifier is reported only once for each function it appears in scripts/sign-file.c:259:2: warning: implicit declaration of function ‘PKCS7_sign_add_signer’ [-Wimplicit-function-declaration] ERR(!PKCS7_sign_add_signer(pkcs7, x509, private_key, digest_algo, ^ scripts/sign-file.c:263:2: warning: implicit declaration of function ‘PKCS7_final’ [-Wimplicit-function-declaration] ERR(PKCS7_final(pkcs7, bm, PKCS7_NOCERTS | PKCS7_BINARY) < 0, ^ scripts/sign-file.c:278:3: warning: implicit declaration of function ‘i2d_PKCS7_bio_stream’ [-Wimplicit-function-declaration] ERR(i2d_PKCS7_bio_stream(b, pkcs7, NULL, 0) < 0, ^
| |