Re: [squid-dev] [PATCH] auth_schemes directive

2016-12-08 Thread Amos Jeffries
On 9/12/2016 2:39 p.m., Amos Jeffries wrote:
> On 6/12/2016 10:57 a.m., Eduard Bagdasaryan wrote:
>>
>> Attached two patches for v5 after splitting. Please apply
>> SQUID-242-refactor-custom-acl-actions-cfg-t1.patch first.
>>
> 
> Thank you. Custom actions patch applied as squid-5-14971.
> 

PS, also applied for 4.0.17 so the main patch which changes UI can be
ported easier if you need to do that for customers.

Amos

___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev


Re: [squid-dev] [PATCH] auth_schemes directive

2016-12-08 Thread Amos Jeffries
On 9/12/2016 5:03 p.m., Alex Rousskov wrote:
> On 12/08/2016 06:39 PM, Amos Jeffries wrote:
>> On 6/12/2016 10:57 a.m., Eduard Bagdasaryan wrote:
>>>
>>> Attached two patches for v5 after splitting. Please apply
>>> SQUID-242-refactor-custom-acl-actions-cfg-t1.patch first.
>>>
>>
>> Thank you. Custom actions patch applied as squid-5-14971.
> 
> If there are no objections, I will apply the primary patch as well.
> 
> Alex.
> 

Nod, sure. I have no outstanding objections.

Amos

___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev


Re: [squid-dev] [PATCH] auth_schemes directive

2016-12-08 Thread Alex Rousskov
On 12/08/2016 06:39 PM, Amos Jeffries wrote:
> On 6/12/2016 10:57 a.m., Eduard Bagdasaryan wrote:
>>
>> Attached two patches for v5 after splitting. Please apply
>> SQUID-242-refactor-custom-acl-actions-cfg-t1.patch first.
>>
> 
> Thank you. Custom actions patch applied as squid-5-14971.

If there are no objections, I will apply the primary patch as well.

Alex.

___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev


[squid-dev] Build failed in Jenkins: 4-matrix » gcc,d-debian-unstable #14

2016-12-08 Thread noc
http://build.squid-cache.org/job/4-matrix/compiler=gcc,label=d-debian-unstable/14/--
[...truncated 34536 lines...]
../../../../src/ssl/support.cc:473:96: error: invalid conversion from 'int 
(*)(CRYPTO_EX_DATA*, CRYPTO_EX_DATA*, void*, int, long int, void*) {aka int 
(*)(crypto_ex_data_st*, crypto_ex_data_st*, void*, int, long int, void*)}' to 
'int (*)(CRYPTO_EX_DATA*, const CRYPTO_EX_DATA*, void*, int, long int, void*) 
{aka int (*)(crypto_ex_data_st*, const crypto_ex_data_st*, void*, int, long 
int, void*)}' [-fpermissive]
 ssl_ex_index_cert_error_check = SSL_get_ex_new_index(0, (void *) 
"cert_error_check", NULL, &ssl_dupAclChecklist, &ssl_freeAclChecklist);

^~
In file included from ../../../../src/security/LockingPointer.h:16:0,
 from ../../../../src/security/Context.h:13,
 from ../../../../src/security/forward.h:13,
 from ../../../../src/security/KeyData.h:13,
 from ../../../../src/security/PeerOptions.h:14,
 from ../../../../src/security/ServerOptions.h:13,
 from ../../../../src/anyp/PortCfg.h:17,
 from ../../../../src/AccessLogEntry.h:12,
 from ../../../../src/acl/FilledChecklist.h:12,
 from ../../../../src/ssl/support.cc:18:
/usr/include/openssl/crypto.h:178:12: note:   initializing argument 5 of 'int 
CRYPTO_get_ex_new_index(int, long int, void*, void (*)(void*, void*, 
CRYPTO_EX_DATA*, int, long int, void*), int (*)(CRYPTO_EX_DATA*, const 
CRYPTO_EX_DATA*, void*, int, long int, void*), void (*)(void*, void*, 
CRYPTO_EX_DATA*, int, long int, void*))'
 __owur int CRYPTO_get_ex_new_index(int class_index, long argl, void *argp,
^~~
../../../../src/ssl/support.cc: In function 'void ssl_info_cb(const SSL*, int, 
int)':
../../../../src/ssl/support.cc:489:12: error: invalid use of incomplete type 
'const SSL {aka const struct ssl_st}'
 ssl->s3->flags |= SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS;
^~
In file included from /usr/include/openssl/crypto.h:31:0,
 from ../../../../src/security/LockingPointer.h:16,
 from ../../../../src/security/Context.h:13,
 from ../../../../src/security/forward.h:13,
 from ../../../../src/security/KeyData.h:13,
 from ../../../../src/security/PeerOptions.h:14,
 from ../../../../src/security/ServerOptions.h:13,
 from ../../../../src/anyp/PortCfg.h:17,
 from ../../../../src/AccessLogEntry.h:12,
 from ../../../../src/acl/FilledChecklist.h:12,
 from ../../../../src/ssl/support.cc:18:
/usr/include/openssl/ossl_typ.h:144:16: note: forward declaration of 'SSL {aka 
struct ssl_st}'
 typedef struct ssl_st SSL;
^~
../../../../src/ssl/support.cc: In function 'const char* 
hasAuthorityInfoAccessCaIssuers(X509*)':
../../../../src/ssl/support.cc:1117:56: error: 'unsigned char* 
ASN1_STRING_data(ASN1_STRING*)' is deprecated [-Werror=deprecated-declarations]
 xstrncpy(uri, reinterpret_cast(ASN1_STRING_data(ad->location->d.uniformResourceIdentifier)), sizeof(uri));
^~~~
In file included from /usr/include/openssl/bn.h:31:0,
 from /usr/include/openssl/asn1.h:24,
 from /usr/include/openssl/objects.h:916,
 from /usr/include/openssl/evp.h:27,
 from /usr/include/openssl/x509.h:23,
 from /usr/include/openssl/ssl.h:50,
 from ../../../../src/security/Context.h:17,
 from ../../../../src/security/forward.h:13,
 from ../../../../src/security/KeyData.h:13,
 from ../../../../src/security/PeerOptions.h:14,
 from ../../../../src/security/ServerOptions.h:13,
 from ../../../../src/anyp/PortCfg.h:17,
 from ../../../../src/AccessLogEntry.h:12,
 from ../../../../src/acl/FilledChecklist.h:12,
 from ../../../../src/ssl/support.cc:18:
/usr/include/openssl/asn1.h:553:1: note: declared here
 DEPRECATEDIN_1_1_0(unsigned char *ASN1_STRING_data(ASN1_STRING *x))
 ^
../../../../src/ssl/support.cc:1117:114: error: 'unsigned char* 
ASN1_STRING_data(ASN1_STRING*)' is deprecated [-Werror=deprecated-declarations]
 xstrncpy(uri, reinterpret_cast(ASN1_STRING_data(ad->location->d.uniformResourceIdentifier)), sizeof(uri));

  ^
In file included from /usr/include/openssl/bn.h:31:0,
 from /usr/include/openssl/asn1.h:24,
 from /usr/include/openssl/objects.h:916,
   

[squid-dev] Build failed in Jenkins: 5-matrix » gcc,d-debian-unstable #33

2016-12-08 Thread noc
http://build.squid-cache.org/job/5-matrix/compiler=gcc,label=d-debian-unstable/33/--
[...truncated 34536 lines...]
../../../../src/ssl/support.cc:472:96: error: invalid conversion from 'int 
(*)(CRYPTO_EX_DATA*, CRYPTO_EX_DATA*, void*, int, long int, void*) {aka int 
(*)(crypto_ex_data_st*, crypto_ex_data_st*, void*, int, long int, void*)}' to 
'int (*)(CRYPTO_EX_DATA*, const CRYPTO_EX_DATA*, void*, int, long int, void*) 
{aka int (*)(crypto_ex_data_st*, const crypto_ex_data_st*, void*, int, long 
int, void*)}' [-fpermissive]
 ssl_ex_index_cert_error_check = SSL_get_ex_new_index(0, (void *) 
"cert_error_check", NULL, &ssl_dupAclChecklist, &ssl_freeAclChecklist);

^~
In file included from ../../../../src/security/LockingPointer.h:16:0,
 from ../../../../src/security/Context.h:13,
 from ../../../../src/security/forward.h:13,
 from ../../../../src/security/KeyData.h:13,
 from ../../../../src/security/PeerOptions.h:14,
 from ../../../../src/security/ServerOptions.h:13,
 from ../../../../src/anyp/PortCfg.h:17,
 from ../../../../src/AccessLogEntry.h:12,
 from ../../../../src/acl/FilledChecklist.h:12,
 from ../../../../src/ssl/support.cc:18:
/usr/include/openssl/crypto.h:178:12: note:   initializing argument 5 of 'int 
CRYPTO_get_ex_new_index(int, long int, void*, void (*)(void*, void*, 
CRYPTO_EX_DATA*, int, long int, void*), int (*)(CRYPTO_EX_DATA*, const 
CRYPTO_EX_DATA*, void*, int, long int, void*), void (*)(void*, void*, 
CRYPTO_EX_DATA*, int, long int, void*))'
 __owur int CRYPTO_get_ex_new_index(int class_index, long argl, void *argp,
^~~
../../../../src/ssl/support.cc: In function 'void ssl_info_cb(const SSL*, int, 
int)':
../../../../src/ssl/support.cc:488:12: error: invalid use of incomplete type 
'const SSL {aka const struct ssl_st}'
 ssl->s3->flags |= SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS;
^~
In file included from /usr/include/openssl/crypto.h:31:0,
 from ../../../../src/security/LockingPointer.h:16,
 from ../../../../src/security/Context.h:13,
 from ../../../../src/security/forward.h:13,
 from ../../../../src/security/KeyData.h:13,
 from ../../../../src/security/PeerOptions.h:14,
 from ../../../../src/security/ServerOptions.h:13,
 from ../../../../src/anyp/PortCfg.h:17,
 from ../../../../src/AccessLogEntry.h:12,
 from ../../../../src/acl/FilledChecklist.h:12,
 from ../../../../src/ssl/support.cc:18:
/usr/include/openssl/ossl_typ.h:144:16: note: forward declaration of 'SSL {aka 
struct ssl_st}'
 typedef struct ssl_st SSL;
^~
../../../../src/ssl/support.cc: In function 'const char* 
hasAuthorityInfoAccessCaIssuers(X509*)':
../../../../src/ssl/support.cc:1116:56: error: 'unsigned char* 
ASN1_STRING_data(ASN1_STRING*)' is deprecated [-Werror=deprecated-declarations]
 xstrncpy(uri, reinterpret_cast(ASN1_STRING_data(ad->location->d.uniformResourceIdentifier)), sizeof(uri));
^~~~
In file included from /usr/include/openssl/bn.h:31:0,
 from /usr/include/openssl/asn1.h:24,
 from /usr/include/openssl/objects.h:916,
 from /usr/include/openssl/evp.h:27,
 from /usr/include/openssl/x509.h:23,
 from /usr/include/openssl/ssl.h:50,
 from ../../../../src/security/Context.h:17,
 from ../../../../src/security/forward.h:13,
 from ../../../../src/security/KeyData.h:13,
 from ../../../../src/security/PeerOptions.h:14,
 from ../../../../src/security/ServerOptions.h:13,
 from ../../../../src/anyp/PortCfg.h:17,
 from ../../../../src/AccessLogEntry.h:12,
 from ../../../../src/acl/FilledChecklist.h:12,
 from ../../../../src/ssl/support.cc:18:
/usr/include/openssl/asn1.h:553:1: note: declared here
 DEPRECATEDIN_1_1_0(unsigned char *ASN1_STRING_data(ASN1_STRING *x))
 ^
../../../../src/ssl/support.cc:1116:114: error: 'unsigned char* 
ASN1_STRING_data(ASN1_STRING*)' is deprecated [-Werror=deprecated-declarations]
 xstrncpy(uri, reinterpret_cast(ASN1_STRING_data(ad->location->d.uniformResourceIdentifier)), sizeof(uri));

  ^
In file included from /usr/include/openssl/bn.h:31:0,
 from /usr/include/openssl/asn1.h:24,
 from /usr/include/openssl/objects.h:916,
   

Re: [squid-dev] [PATCH] auth_schemes directive

2016-12-08 Thread Amos Jeffries
On 6/12/2016 10:57 a.m., Eduard Bagdasaryan wrote:
> 
> Attached two patches for v5 after splitting. Please apply
> SQUID-242-refactor-custom-acl-actions-cfg-t1.patch first.
> 

Thank you. Custom actions patch applied as squid-5-14971.

Amos

___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev


Re: [squid-dev] [PATCH] Fixed Write.cc:41 "!ccb->active()" assertion

2016-12-08 Thread Amos Jeffries
On 17/11/2016 11:47 p.m., Christos Tsantilas wrote:
> I am also attaching the t4 patch for squid-3.5.
> This is include all fixes.
> 

Thanks. The relevant versions of these patches have now been applied to
v5, v4, and v3.5 and will be included in the next releases. I have
updated the commit message title on teh backports to reference them as a
(partial) fix for bug 4174.

Amos

___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev


Re: [squid-dev] Automake bug workaround

2016-12-08 Thread Eliezer Croitoru
What happen with this?

Eliezer


Eliezer Croitoru
Linux System Administrator
Mobile: +972-5-28704261
Email: elie...@ngtech.co.il


-Original Message-
From: squid-dev [mailto:squid-dev-boun...@lists.squid-cache.org] On Behalf Of 
Alex Rousskov
Sent: Sunday, December 4, 2016 12:17 AM
To: Squid Developers 
Subject: [squid-dev] Automake bug workaround

Hello,

Squid build produces lots of warnings in modern build environments such as 
Ubuntu 16.04:

> make > /dev/null
> /usr/bin/ar: `u' modifier ignored since `D' is the default (see `U')
> /usr/bin/ar: `u' modifier ignored since `D' is the default (see `U')
...
> /usr/bin/ar: `u' modifier ignored since `D' is the default (see `U')
> ar: `u' modifier ignored since `D' is the default (see `U')
> ar: `u' modifier ignored since `D' is the default (see `U')
> /usr/bin/ar: `u' modifier ignored since `D' is the default (see `U')
> /usr/bin/ar: `u' modifier ignored since `D' is the default (see `U')
...

These benign warnings is most likely an ancient Automake bug awaken by recent 
environmental changes. It is becoming a well-known issue among many projects 
AFAICT. The attached Web Polygraph patch works around this problem. The patch 
preamble has more technical references.

If you think Squid should do something like this, please consider adopting and 
adjusting this patch as needed for Squid.


Thank you,

Alex.

___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev


[squid-dev] Build failed in Jenkins: 5-matrix » gcc,d-debian-unstable #32

2016-12-08 Thread noc
http://build.squid-cache.org/job/5-matrix/compiler=gcc,label=d-debian-unstable/32/--
[...truncated 34536 lines...]
 from ../../../../src/ssl/support.cc:18:
/usr/include/openssl/asn1.h:553:1: note: declared here
 DEPRECATEDIN_1_1_0(unsigned char *ASN1_STRING_data(ASN1_STRING *x))
 ^
../../../../src/ssl/support.cc: In function 'void 
completeIssuers(X509_STORE_CTX*, stack_st_X509*)':
../../../../src/ssl/support.cc:1245:20: error: invalid use of incomplete type 
'X509_STORE_CTX {aka struct x509_store_ctx_st}'
 int depth = ctx->param->depth;
^~
In file included from /usr/include/openssl/crypto.h:31:0,
 from ../../../../src/security/LockingPointer.h:16,
 from ../../../../src/security/Context.h:13,
 from ../../../../src/security/forward.h:13,
 from ../../../../src/security/KeyData.h:13,
 from ../../../../src/security/PeerOptions.h:14,
 from ../../../../src/security/ServerOptions.h:13,
 from ../../../../src/anyp/PortCfg.h:17,
 from ../../../../src/AccessLogEntry.h:12,
 from ../../../../src/acl/FilledChecklist.h:12,
 from ../../../../src/ssl/support.cc:18:
/usr/include/openssl/ossl_typ.h:127:16: note: forward declaration of 
'X509_STORE_CTX {aka struct x509_store_ctx_st}'
 typedef struct x509_store_ctx_st X509_STORE_CTX;
^
../../../../src/ssl/support.cc:1246:24: error: invalid use of incomplete type 
'X509_STORE_CTX {aka struct x509_store_ctx_st}'
 X509 *current = ctx->cert;
^~
In file included from /usr/include/openssl/crypto.h:31:0,
 from ../../../../src/security/LockingPointer.h:16,
 from ../../../../src/security/Context.h:13,
 from ../../../../src/security/forward.h:13,
 from ../../../../src/security/KeyData.h:13,
 from ../../../../src/security/PeerOptions.h:14,
 from ../../../../src/security/ServerOptions.h:13,
 from ../../../../src/anyp/PortCfg.h:17,
 from ../../../../src/AccessLogEntry.h:12,
 from ../../../../src/acl/FilledChecklist.h:12,
 from ../../../../src/ssl/support.cc:18:
/usr/include/openssl/ossl_typ.h:127:16: note: forward declaration of 
'X509_STORE_CTX {aka struct x509_store_ctx_st}'
 typedef struct x509_store_ctx_st X509_STORE_CTX;
^
../../../../src/ssl/support.cc: In function 'int 
untrustedToStoreCtx_cb(X509_STORE_CTX*, void*)':
../../../../src/ssl/support.cc:1280:39: error: invalid use of incomplete type 
'X509_STORE_CTX {aka struct x509_store_ctx_st}'
 STACK_OF(X509) *oldUntrusted = ctx->untrusted;
   ^~
In file included from /usr/include/openssl/crypto.h:31:0,
 from ../../../../src/security/LockingPointer.h:16,
 from ../../../../src/security/Context.h:13,
 from ../../../../src/security/forward.h:13,
 from ../../../../src/security/KeyData.h:13,
 from ../../../../src/security/PeerOptions.h:14,
 from ../../../../src/security/ServerOptions.h:13,
 from ../../../../src/anyp/PortCfg.h:17,
 from ../../../../src/AccessLogEntry.h:12,
 from ../../../../src/acl/FilledChecklist.h:12,
 from ../../../../src/ssl/support.cc:18:
/usr/include/openssl/ossl_typ.h:127:16: note: forward declaration of 
'X509_STORE_CTX {aka struct x509_store_ctx_st}'
 typedef struct x509_store_ctx_st X509_STORE_CTX;
^
../../../../src/ssl/support.cc: In function 'int store_session_cb(SSL*, 
SSL_SESSION*)':
../../../../src/ssl/support.cc:1467:32: error: invalid use of incomplete type 
'SSL_SESSION {aka struct ssl_session_st}'
 unsigned char *id = session->session_id;
^~
In file included from ../../../../src/security/Context.h:17:0,
 from ../../../../src/security/forward.h:13,
 from ../../../../src/security/KeyData.h:13,
 from ../../../../src/security/PeerOptions.h:14,
 from ../../../../src/security/ServerOptions.h:13,
 from ../../../../src/anyp/PortCfg.h:17,
 from ../../../../src/AccessLogEntry.h:12,
 from ../../../../src/acl/FilledChecklist.h:12,
 from ../../../../src/ssl/support.cc:18:
/usr/include/openssl/ssl.h:228:16: note: forward declaration of 'SSL_SESSION 
{aka struct ssl_session_st}'
 typedef struct ssl_session_st SSL_SESSION;
^~
../../../../src/ssl/support.cc:1468:33: error: invalid use of incomplete type 
'SSL_SESSION {aka struct ssl_session_st}'
 unsigned int idlen = session->session_id_length;

Re: [squid-dev] Broken SSL build

2016-12-08 Thread Alex Rousskov
On 12/08/2016 11:40 AM, Christos Tsantilas wrote:
> The unstable debian should use openssl-1.1.0 releases.
> This is the bug 4599.
> 
> We had make some progress on supporting openSSL-1.1.0, also I am having
> in my laptop some more fixes, but it is not finished yet.

Understood. Thank you. I will ignore these build failures until bug 4599
is closed.

Alex.


> On 08/12/2016 08:07 μμ, Alex Rousskov wrote:
>> Hello,
>>
>> Jenkins has been complaining for a while about SSL-related
>> compilation problems such as
>>
>>> http://build.squid-cache.org/job/5-matrix/compiler=gcc,label=d-debian-unstable/
>>>
>>
>>> ../../../../src/ssl/support.cc:473:96: error: invalid conversion from
>>> 'int (*)(CRYPTO_EX_DATA*, CRYPTO_EX_DATA*, void*, int, long int,
>>> void*) {aka int (*)(crypto_ex_data_st*, crypto_ex_data_st*, void*,
>>> int, long int, void*)}' to 'int (*)(CRYPTO_EX_DATA*, const
>>> CRYPTO_EX_DATA*, void*, int, long int, void*) {aka int
>>> (*)(crypto_ex_data_st*, const crypto_ex_data_st*, void*, int, long
>>> int, void*)}' [-fpermissive]
>>>  ssl_ex_index_cert_error_check = SSL_get_ex_new_index(0, (void *)
>>> "cert_error_check", NULL, &ssl_dupAclChecklist, &ssl_freeAclChecklist);
>>
>>
>> and
>>
>>> http://build.squid-cache.org/job/4-matrix/compiler=gcc,label=d-debian-unstable/
>>>
>>
>>> ../../../../src/ssl/support.cc: In function 'void
>>> completeIssuers(X509_STORE_CTX*, stack_st_X509*)':
>>> ../../../../src/ssl/support.cc:1246:20: error: invalid use of
>>> incomplete type 'X509_STORE_CTX {aka struct x509_store_ctx_st}'
>>>  int depth = ctx->param->depth;
>>
>> and many more.
>>
>>
>> Does anybody know which commit(s) broke the build? Perhaps Jenkins
>> contains that info?
>>
>> Or should we ignore these build failures for some reason?
>>
>>
>> Thank you,
>>
>> Alex.
>>
>> ___
>> squid-dev mailing list
>> squid-dev@lists.squid-cache.org
>> http://lists.squid-cache.org/listinfo/squid-dev
>>
> 
> ___
> squid-dev mailing list
> squid-dev@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-dev

___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev


Re: [squid-dev] Broken SSL build

2016-12-08 Thread Christos Tsantilas

The unstable debian should use openssl-1.1.0 releases.
This is the bug 4599.

We had make some progress on supporting openSSL-1.1.0, also I am having 
in my laptop some more fixes, but it is not finished yet.




On 08/12/2016 08:07 μμ, Alex Rousskov wrote:

Hello,

Jenkins has been complaining for a while about SSL-related
compilation problems such as


http://build.squid-cache.org/job/5-matrix/compiler=gcc,label=d-debian-unstable/



../../../../src/ssl/support.cc:473:96: error: invalid conversion from 'int 
(*)(CRYPTO_EX_DATA*, CRYPTO_EX_DATA*, void*, int, long int, void*) {aka int 
(*)(crypto_ex_data_st*, crypto_ex_data_st*, void*, int, long int, void*)}' to 
'int (*)(CRYPTO_EX_DATA*, const CRYPTO_EX_DATA*, void*, int, long int, void*) 
{aka int (*)(crypto_ex_data_st*, const crypto_ex_data_st*, void*, int, long 
int, void*)}' [-fpermissive]
 ssl_ex_index_cert_error_check = SSL_get_ex_new_index(0, (void *) 
"cert_error_check", NULL, &ssl_dupAclChecklist, &ssl_freeAclChecklist);



and


http://build.squid-cache.org/job/4-matrix/compiler=gcc,label=d-debian-unstable/



../../../../src/ssl/support.cc: In function 'void 
completeIssuers(X509_STORE_CTX*, stack_st_X509*)':
../../../../src/ssl/support.cc:1246:20: error: invalid use of incomplete type 
'X509_STORE_CTX {aka struct x509_store_ctx_st}'
 int depth = ctx->param->depth;


and many more.


Does anybody know which commit(s) broke the build? Perhaps Jenkins
contains that info?

Or should we ignore these build failures for some reason?


Thank you,

Alex.

___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev



___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev


[squid-dev] Broken SSL build

2016-12-08 Thread Alex Rousskov
Hello,

Jenkins has been complaining for a while about SSL-related
compilation problems such as

> http://build.squid-cache.org/job/5-matrix/compiler=gcc,label=d-debian-unstable/

> ../../../../src/ssl/support.cc:473:96: error: invalid conversion from 'int 
> (*)(CRYPTO_EX_DATA*, CRYPTO_EX_DATA*, void*, int, long int, void*) {aka int 
> (*)(crypto_ex_data_st*, crypto_ex_data_st*, void*, int, long int, void*)}' to 
> 'int (*)(CRYPTO_EX_DATA*, const CRYPTO_EX_DATA*, void*, int, long int, void*) 
> {aka int (*)(crypto_ex_data_st*, const crypto_ex_data_st*, void*, int, long 
> int, void*)}' [-fpermissive]
>  ssl_ex_index_cert_error_check = SSL_get_ex_new_index(0, (void *) 
> "cert_error_check", NULL, &ssl_dupAclChecklist, &ssl_freeAclChecklist);


and

> http://build.squid-cache.org/job/4-matrix/compiler=gcc,label=d-debian-unstable/

> ../../../../src/ssl/support.cc: In function 'void 
> completeIssuers(X509_STORE_CTX*, stack_st_X509*)':
> ../../../../src/ssl/support.cc:1246:20: error: invalid use of incomplete type 
> 'X509_STORE_CTX {aka struct x509_store_ctx_st}'
>  int depth = ctx->param->depth;

and many more.


Does anybody know which commit(s) broke the build? Perhaps Jenkins
contains that info?

Or should we ignore these build failures for some reason?


Thank you,

Alex.

___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev


[squid-dev] Build failed in Jenkins: 4-matrix » gcc,d-debian-unstable #13

2016-12-08 Thread noc
http://build.squid-cache.org/job/4-matrix/compiler=gcc,label=d-debian-unstable/13/--
[...truncated 34531 lines...]
 from ../../../../src/ssl/support.cc:18:
/usr/include/openssl/asn1.h:553:1: note: declared here
 DEPRECATEDIN_1_1_0(unsigned char *ASN1_STRING_data(ASN1_STRING *x))
 ^
../../../../src/ssl/support.cc: In function 'void 
completeIssuers(X509_STORE_CTX*, stack_st_X509*)':
../../../../src/ssl/support.cc:1246:20: error: invalid use of incomplete type 
'X509_STORE_CTX {aka struct x509_store_ctx_st}'
 int depth = ctx->param->depth;
^~
In file included from /usr/include/openssl/crypto.h:31:0,
 from ../../../../src/security/LockingPointer.h:16,
 from ../../../../src/security/Context.h:13,
 from ../../../../src/security/forward.h:13,
 from ../../../../src/security/KeyData.h:13,
 from ../../../../src/security/PeerOptions.h:14,
 from ../../../../src/security/ServerOptions.h:13,
 from ../../../../src/anyp/PortCfg.h:17,
 from ../../../../src/AccessLogEntry.h:12,
 from ../../../../src/acl/FilledChecklist.h:12,
 from ../../../../src/ssl/support.cc:18:
/usr/include/openssl/ossl_typ.h:127:16: note: forward declaration of 
'X509_STORE_CTX {aka struct x509_store_ctx_st}'
 typedef struct x509_store_ctx_st X509_STORE_CTX;
^
../../../../src/ssl/support.cc:1247:24: error: invalid use of incomplete type 
'X509_STORE_CTX {aka struct x509_store_ctx_st}'
 X509 *current = ctx->cert;
^~
In file included from /usr/include/openssl/crypto.h:31:0,
 from ../../../../src/security/LockingPointer.h:16,
 from ../../../../src/security/Context.h:13,
 from ../../../../src/security/forward.h:13,
 from ../../../../src/security/KeyData.h:13,
 from ../../../../src/security/PeerOptions.h:14,
 from ../../../../src/security/ServerOptions.h:13,
 from ../../../../src/anyp/PortCfg.h:17,
 from ../../../../src/AccessLogEntry.h:12,
 from ../../../../src/acl/FilledChecklist.h:12,
 from ../../../../src/ssl/support.cc:18:
/usr/include/openssl/ossl_typ.h:127:16: note: forward declaration of 
'X509_STORE_CTX {aka struct x509_store_ctx_st}'
 typedef struct x509_store_ctx_st X509_STORE_CTX;
^
../../../../src/ssl/support.cc: In function 'int 
untrustedToStoreCtx_cb(X509_STORE_CTX*, void*)':
../../../../src/ssl/support.cc:1281:39: error: invalid use of incomplete type 
'X509_STORE_CTX {aka struct x509_store_ctx_st}'
 STACK_OF(X509) *oldUntrusted = ctx->untrusted;
   ^~
In file included from /usr/include/openssl/crypto.h:31:0,
 from ../../../../src/security/LockingPointer.h:16,
 from ../../../../src/security/Context.h:13,
 from ../../../../src/security/forward.h:13,
 from ../../../../src/security/KeyData.h:13,
 from ../../../../src/security/PeerOptions.h:14,
 from ../../../../src/security/ServerOptions.h:13,
 from ../../../../src/anyp/PortCfg.h:17,
 from ../../../../src/AccessLogEntry.h:12,
 from ../../../../src/acl/FilledChecklist.h:12,
 from ../../../../src/ssl/support.cc:18:
/usr/include/openssl/ossl_typ.h:127:16: note: forward declaration of 
'X509_STORE_CTX {aka struct x509_store_ctx_st}'
 typedef struct x509_store_ctx_st X509_STORE_CTX;
^
../../../../src/ssl/support.cc: In function 'int store_session_cb(SSL*, 
SSL_SESSION*)':
../../../../src/ssl/support.cc:1468:32: error: invalid use of incomplete type 
'SSL_SESSION {aka struct ssl_session_st}'
 unsigned char *id = session->session_id;
^~
In file included from ../../../../src/security/Context.h:17:0,
 from ../../../../src/security/forward.h:13,
 from ../../../../src/security/KeyData.h:13,
 from ../../../../src/security/PeerOptions.h:14,
 from ../../../../src/security/ServerOptions.h:13,
 from ../../../../src/anyp/PortCfg.h:17,
 from ../../../../src/AccessLogEntry.h:12,
 from ../../../../src/acl/FilledChecklist.h:12,
 from ../../../../src/ssl/support.cc:18:
/usr/include/openssl/ssl.h:228:16: note: forward declaration of 'SSL_SESSION 
{aka struct ssl_session_st}'
 typedef struct ssl_session_st SSL_SESSION;
^~
../../../../src/ssl/support.cc:1469:33: error: invalid use of incomplete type 
'SSL_SESSION {aka struct ssl_session_st}'
 unsigned int idlen = session->session_id_length;