Re: [openssl-dev] Is a "no next protocol negotiation" (no-npn) a supported option?

[Michel]

Hi Jeff, 

In case it may still be usefull, I have updated the patch against today's git 
repo.
I was able to build OpenSSL VC-WIN32 configured with no-nextprotoneg option.
 
Regards,

Michel.


no-nextproto-1.1.0.patch
Description: Binary data
-- 
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] Is a "no next protocol negotiation" (no-npn) a supported option?

[Michel]

Hi Jeff,

Just for information, I send a patch and had a previous exchange about this 
with Rich :

http://openssl.6102.n7.nabble.com/openssl-org-4178-patch-OpenSSL-1-1-0-fails-when-configure-with-no-nextproto-td61662.html

Regards,

Michel.

-Message d'origine-
De : openssl-dev [mailto:openssl-dev-boun...@openssl.org] De la part de Jeffrey 
Walton
Envoyé : lundi 21 mars 2016 09:42
À : OpenSSL Developer ML
Objet : Re: [openssl-dev] Is a "no next protocol negotiation" (no-npn) a 
supported option?

On Mon, Mar 21, 2016 at 4:02 AM, Richard Levitte  wrote:
> Yes, there is such a configuration option: no-nextprotoneg
>

Thank you very much. That leads to:

gcc -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_THREADS -DOPENSSL_NO_DYNAMIC_ENGINE 
-DOPENSSL_PIC -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 
-DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM 
-DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPOLY1305_ASM 
-DOPENSSLDIR="\"/usr/local/ssl\""
-DENGINESDIR="\"/usr/local/lib64/engines\"" -Wall -O3 -pthread -m64 -DL_ENDIAN  
-Wa,--noexecstack -fPIC -Iinclude -I. -MMD -MF ssl/t1_ext.d.tmp -MT 
ssl/t1_ext.o -c -o ssl/t1_ext.o ssl/t1_ext.c
ssl/t1_ext.c: In function  SSL_extension_supported :
ssl/t1_ext.c:303:10: error:  TLSEXT_TYPE_next_proto_neg  undeclared (first use 
in this function)
 case TLSEXT_TYPE_next_proto_neg:
  ^
ssl/t1_ext.c:303:10: note: each undeclared identifier is reported only once for 
each function it appears in
Makefile:5954: recipe for target 'ssl/t1_ext.o' failed
--
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

-- 
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] Is a "no next protocol negotiation" (no-npn) a supported option?

[Jeffrey Walton]

On Mon, Mar 21, 2016 at 4:02 AM, Richard Levitte  wrote:
> Yes, there is such a configuration option: no-nextprotoneg
>

Thank you very much. That leads to:

gcc -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_THREADS
-DOPENSSL_NO_DYNAMIC_ENGINE -DOPENSSL_PIC -DOPENSSL_IA32_SSE2
-DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m
-DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM
-DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPOLY1305_ASM
-DOPENSSLDIR="\"/usr/local/ssl\""
-DENGINESDIR="\"/usr/local/lib64/engines\"" -Wall -O3 -pthread -m64
-DL_ENDIAN  -Wa,--noexecstack -fPIC -Iinclude -I. -MMD -MF
ssl/t1_ext.d.tmp -MT ssl/t1_ext.o -c -o ssl/t1_ext.o ssl/t1_ext.c
ssl/t1_ext.c: In function ‘SSL_extension_supported’:
ssl/t1_ext.c:303:10: error: ‘TLSEXT_TYPE_next_proto_neg’ undeclared
(first use in this function)
 case TLSEXT_TYPE_next_proto_neg:
  ^
ssl/t1_ext.c:303:10: note: each undeclared identifier is reported only
once for each function it appears in
Makefile:5954: recipe for target 'ssl/t1_ext.o' failed
-- 
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] Is a "no next protocol negotiation" (no-npn) a supported option?

[Richard Levitte]

Yes, there is such a configuration option: no-nextprotoneg

In message 

[openssl-dev] Is a "no next protocol negotiation" (no-npn) a supported option?

[Jeffrey Walton]

Is no-npn a supported configuration option for 1.1.0?

Its causing a test script to fail:

Testing no next protocol negotiation
Operating system: x86_64-whatever-linux2
Configuring for linux-x86_64
Configuring OpenSSL version 1.1.0-pre5-dev (0x0x1015L)
* Unsupported options: no-npn
  FAILED: config no protocol negotiation

And:

Testing shared object with no next protocol negotiation
Operating system: x86_64-whatever-linux2
Configuring for linux-x86_64
Configuring OpenSSL version 1.1.0-pre5-dev (0x0x1015L)
* Unsupported options: no-npn
  FAILED: config shared object with no protocol negotiation
-- 
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev