SSL Solaris 9 compile errors

I am trying to compile kermit 8.0.211 with Solaris 9 (Sparc). My
openssl ver is 0.9.8d

Makeline: make solaris9g+openssl+shadow+pam+zlib

make "MAKE=make" solaris2xg+openssl+zlib+pam+shadow \
KTARGET=${KTARGET:-solaris9g+openssl+shadow+pam+zlib} \
"KFLAGS=-DSOLARIS9 -DHDBUUCP -DDIRENT -DZLIB -DCK_PAM -DCK_SHADOW \
-DLIBDES " "LIBS= -lpam -ldes425 -lz "
make[1]: Entering directory `/u/local/src/kermitssl'
Making C-Kermit "8.0.211" for Solaris 2.x with gcc, OpenSSL...
Please read the comments that accompany the solaris2xg target.
make xermit KTARGET=${KTARGET:-solaris2xg+openssl+zlib+pam+shadow}
CC=gcc CC2=gc
c \
"CFLAGS = -g -O -Usun -DSVR4 -DSOLARIS -DSTERMIOX -DSELECT -DFNFLOAT \
-DCK_CURSES -DCK_NEWTERM -DDIRENT -DHDBUUCP -DTCPSOCKET \
-DCK_AUTHENTICATION -DCK_SSL -DCK_PAM -DCK_SHADOW -DZLIB \
-DBIGBUFOK -I/usr/local/ssl/include -DSOLARIS9 -DHDBUUCP -DDIRENT -
DZLIB -DCK_PA
M -DCK_SHADOW -DLIBDES " \
"LIBS= -L/usr/local/ssl/lib -ltermlib \
-lsocket -lnsl -lm -lresolv -lssl -lcrypto -lpam -lz"
make[2]: Entering directory `/u/local/src/kermitssl'
gcc -g -O -Usun -DSVR4 -DSOLARIS -DSTERMIOX -DSELECT -DFNFLOAT -
DCK_CURSES -DCK
_NEWTERM -DDIRENT -DHDBUUCP -DTCPSOCKET -DCK_AUTHENTICATION -DCK_SSL -
DCK_PAM -
DCK_SHADOW -DZLIB -DBIGBUFOK -I/usr/local/ssl/include -DSOLARIS9 -
DHDBUUCP -DD
IRENT -DZLIB -DCK_PAM -DCK_SHADOW -DLIBDES -DKTARGET=\"solaris9g
+openssl+shado
w+pam+zlib\" -c ckcmai.c
In file included from /usr/local/ssl/include/openssl/x509.h:96,
from /usr/local/ssl/include/openssl/ssl.h:183,
from ck_ssl.h:43,
from ckcmai.c:607:
/usr/local/ssl/include/openssl/rsa.h:335: error: parse error before
numeric cons
tant
/usr/local/ssl/include/openssl/rsa.h:336: error: parse error before
numeric cons
tant

Thanks
Gary Quiring

On 2007-02-14, Gary Quiring <gquiring@gmail.com> wrote:
: I am trying to compile kermit 8.0.211 with Solaris 9 (Sparc). My
: openssl ver is 0.9.8d
:
: Makeline: make solaris9g+openssl+shadow+pam+zlib
:...
: /usr/local/ssl/include/openssl/rsa.h:336: error: parse error before
: numeric constant
:
Like it says in the makefile in the comments on that makefile target:

#Add -DOPENSSL_097 for OpenSSL 0.9.7 or later.

So use:

make solaris9g+openssl+shadow+pam+zlib KFLAGS=-DOPENSSL_097

If somebody knows a way to get the OpenSSL version number from the shell
command line, we could have the makefile figure this out automatically.

- Frank

On Feb 14, 10:47 am, Frank Da Cruz <f...@panix.com> wrote:[color=blue]
> On 2007-02-14, Gary Quiring <gquir...@gmail.com> wrote:
> : I am trying to compile kermit 8.0.211 with Solaris 9 (Sparc). My
> : openssl ver is 0.9.8d
> :
> : Makeline: make solaris9g+openssl+shadow+pam+zlib
> :...
> : /usr/local/ssl/include/openssl/rsa.h:336: error: parse error before
> : numeric constant
> :
> Like it says in the makefile in the comments on that makefile target:
>
> #Add -DOPENSSL_097 for OpenSSL 0.9.7 or later.
>
> So use:
>
> make solaris9g+openssl+shadow+pam+zlib KFLAGS=-DOPENSSL_097
>
> If somebody knows a way to get the OpenSSL version number from the shell
> command line, we could have the makefile figure this out automatically.
>
> - Frank[/color]

I tried the above make line but I get the exact same error.

Thanks
Gary

On 2007-02-14, Gary Quiring <gquiring@gmail.com> wrote:
: On Feb 14, 10:47 am, Frank da Cruz <f...@panix.com> wrote:
:> On 2007-02-14, Gary Quiring <gquir...@gmail.com> wrote:
:> : I am trying to compile kermit 8.0.211 with Solaris 9 (Sparc). My
:> : openssl ver is 0.9.8d
:> :
:> : Makeline: make solaris9g+openssl+shadow+pam+zlib
:> :...
:> : /usr/local/ssl/include/openssl/rsa.h:336: error: parse error before
:> : numeric constant
:> :
:> Like it says in the makefile in the comments on that makefile target:
:>
:> #Add -DOPENSSL_097 for OpenSSL 0.9.7 or later.
:>
:> So use:
:>
:> make solaris9g+openssl+shadow+pam+zlib KFLAGS=-DOPENSSL_097
:>
:> If somebody knows a way to get the OpenSSL version number from the shell
:> command line, we could have the makefile figure this out automatically.
:>
:> - Frank
:
: I tried the above make line but I get the exact same error.
:
I have Solaris 9 here, with OpenSSL 0.9.8d, and "It Works For Me" (TM).

To build C-Kermit with OpenSSL, you need to use one of the appropriate
makefile targets (which you did), plus:

. If the OpenSSL version is 0.9.7 or greater (a point where the API
changed), you have to add -DOPENSSL_097 to CFLAGS (which can be
done as shown above);

. If the OpenSSL header files are not in /usr/local/ssl/include, you
have to change or override the definitions of "prefix" or "sslroot"
or SSLINCL in the makefile.

. If the OpenSSL libraries are not in /usr/local/ssl/lib, you
have to change or override the definitions of "prefix" or "sslroot"
or SSLLIB in the makefile.

At Columbia, we have to do all these things, because around here (or maybe in
Solaris in general) "/usr/local" is "deprecated": Here is the procedure:

export SSLINC=-I/opt/openssl-0.9.8d/include
export SSLLIB=-L/opt/openssl-0.9.8d/lib
export "KFLAGS=-DOPENSSL_097 -DCK_FORWARD_X -D_FILE_OFFSET_BITS=64"
make -e solaris9g+openssl+shadow+pam+zlib

- Frank

On Feb 15, 12:22 pm, Frank da Cruz <f...@panix.com> wrote:[color=blue]
> On 2007-02-14, Gary Quiring <gquir...@gmail.com> wrote:
> : On Feb 14, 10:47 am, Frank da Cruz <f...@panix.com> wrote:
> :> On 2007-02-14, Gary Quiring <gquir...@gmail.com> wrote:
> :> : I am trying to compile kermit 8.0.211 with Solaris 9 (Sparc). My
> :> : openssl ver is 0.9.8d
> :> :
> :> : Makeline: make solaris9g+openssl+shadow+pam+zlib
> :> :...
> :> : /usr/local/ssl/include/openssl/rsa.h:336: error: parse error before
> :> : numeric constant
> :> :
> :> Like it says in the makefile in the comments on that makefile target:
> :>
> :> #Add -DOPENSSL_097 for OpenSSL 0.9.7 or later.
> :>
> :> So use:
> :>
> :> make solaris9g+openssl+shadow+pam+zlib KFLAGS=-DOPENSSL_097
> :>
> :> If somebody knows a way to get the OpenSSL version number from the shell
> :> command line, we could have the makefile figure this out automatically.
> :>
> :> - Frank
> :
> : I tried the above make line but I get the exact same error.
> :
> I have Solaris 9 here, with OpenSSL 0.9.8d, and "It Works For Me" (TM).
>
> To build C-Kermit with OpenSSL, you need to use one of the appropriate
> makefile targets (which you did), plus:
>
> . If the OpenSSL version is 0.9.7 or greater (a point where the API
> changed), you have to add -DOPENSSL_097 to CFLAGS (which can be
> done as shown above);
>
> . If the OpenSSL header files are not in /usr/local/ssl/include, you
> have to change or override the definitions of "prefix" or "sslroot"
> or SSLINCL in the makefile.
>
> . If the OpenSSL libraries are not in /usr/local/ssl/lib, you
> have to change or override the definitions of "prefix" or "sslroot"
> or SSLLIB in the makefile.
>
> At Columbia, we have to do all these things, because around here (or maybe in
> Solaris in general) "/usr/local" is "deprecated": Here is the procedure:
>
> export SSLINC=-I/opt/openssl-0.9.8d/include
> export SSLLIB=-L/opt/openssl-0.9.8d/lib
> export "KFLAGS=-DOPENSSL_097 -DCK_FORWARD_X -D_FILE_OFFSET_BITS=64"
> make -e solaris9g+openssl+shadow+pam+zlib
>
> - Frank[/color]

Still no luck. My SSL location is /usr/local/ssl. I set the
following:

export SSLINC="-l/usr/local/ssl/include"
export SSLLIB="-L/usr/local/ssl/lib"
export KFLAGS="-DOPENSSL_097 -DCK_FORWARD_X -D_FILE_OFFSET_BITS=64"

Why is ck_ssl.h hardcoded for openssl directory? I made a link for
openssl -> ssl in /usr/local but it still didn't work.

Thanks
Gary

make -e solaris9g+openssl+shadow+pam+zlib
make "MAKE=make" solaris2xg+openssl+zlib+pam+shadow \
KTARGET=${KTARGET:-solaris9g+openssl+shadow+pam+zlib} \
"KFLAGS=-DSOLARIS9 -DHDBUUCP -DDIRENT -DZLIB -DCK_PAM -DCK_SHADOW \
-DLIBDES -DOPENSSL_097 -DCK_FORWARD_X -D_FILE_OFFSET_BITS=64" "LIBS= -
lpam -ldes
425 -lz "
make[1]: Entering directory `/u/local/src/kermitssl'
Making C-Kermit "8.0.211" for Solaris 2.x with gcc, OpenSSL...
Please read the comments that accompany the solaris2xg target.
make xermit KTARGET=${KTARGET:-solaris2xg+openssl+zlib+pam+shadow}
CC=gcc CC2=gc
c \
"CFLAGS = -g -O -Usun -DSVR4 -DSOLARIS -DSTERMIOX -DSELECT -DFNFLOAT \
-DCK_CURSES -DCK_NEWTERM -DDIRENT -DHDBUUCP -DTCPSOCKET \
-DCK_AUTHENTICATION -DCK_SSL -DCK_PAM -DCK_SHADOW -DZLIB \
-DBIGBUFOK -l/usr/local/ssl/include -DSOLARIS9 -DHDBUUCP -DDIRENT -
DZLIB -DCK_PA
M -DCK_SHADOW -DLIBDES -DOPENSSL_097 -DCK_FORWARD_X -
D_FILE_OFFSET_BITS=64" \
"LIBS= -L/usr/local/ssl/lib -ltermlib \
-lsocket -lnsl -lm -lresolv -lssl -lcrypto -lpam -lz"
make[2]: Entering directory `/u/local/src/kermitssl'
gcc -g -O -Usun -DSVR4 -DSOLARIS -DSTERMIOX -DSELECT -DFNFLOAT -
DCK_CURSES -DCK
_NEWTERM -DDIRENT -DHDBUUCP -DTCPSOCKET -DCK_AUTHENTICATION -DCK_SSL -
DCK_PAM -
DCK_SHADOW -DZLIB -DBIGBUFOK -l/usr/local/ssl/include -DSOLARIS9 -
DHDBUUCP -DD
IRENT -DZLIB -DCK_PAM -DCK_SHADOW -DLIBDES -DOPENSSL_097 -
DCK_FORWARD_X -D_FILE
_OFFSET_BITS=64 -DKTARGET=\"solaris9g+openssl+shadow+pam+zlib\" -c
ckcmai.c
In file included from ckcmai.c:607:
ck_ssl.h:35:26: openssl/comp.h: No such file or directory
ck_ssl.h:42:25: openssl/des.h: No such file or directory
ck_ssl.h:43:25: openssl/ssl.h: No such file or directory
ck_ssl.h:44:28: openssl/x509v3.h: No such file or directory
ck_ssl.h:45:26: openssl/rand.h: No such file or directory
ck_ssl.h:46:30: openssl/x509_vfy.h: No such file or directory
ck_ssl.h:47:25: openssl/err.h: No such file or directory
ck_ssl.h:48:25: openssl/pem.h: No such file or directory
ck_ssl.h:49:24: openssl/bn.h: No such file or directory
ck_ssl.h:50:30: openssl/blowfish.h: No such file or directory
ck_ssl.h:51:24: openssl/dh.h: No such file or directory
ck_ssl.h:52:25: openssl/rc4.h: No such file or directory
ck_ssl.h:53:26: openssl/cast.h: No such file or directory
ck_ssl.h:54:25: openssl/dsa.h: No such file or directory
ck_ssl.h:55:25: openssl/rsa.h: No such file or directory
ck_ssl.h:56:25: openssl/md5.h: No such file or directory
ck_ssl.h:57:25: openssl/sha.h: No such file or directory
ck_ssl.h:58:25: openssl/evp.h: No such file or directory
ck_ssl.h:59:26: openssl/hmac.h: No such file or directory
In file included from ckcmai.c:607:
ck_ssl.h:64: error: parse error before '*' token
ck_ssl.h:64: warning: data definition has no type or storage class
ck_ssl.h:65: error: parse error before '*' token
ck_ssl.h:65: warning: data definition has no type or storage class
ck_ssl.h:66: error: parse error before '*' token
ck_ssl.h:66: warning: data definition has no type or storage class
ck_ssl.h:90: error: parse error before '*' token
ck_ssl.h:90: warning: data definition has no type or storage class
ck_ssl.h:91: error: parse error before '*' token
ck_ssl.h:91: warning: data definition has no type or storage class
ck_ssl.h:95: error: parse error before '*' token
ck_ssl.h:95: warning: data definition has no type or storage class
ck_ssl.h:98: error: parse error before '*' token
ck_ssl.h:98: warning: data definition has no type or storage class
ck_ssl.h:99: error: parse error before '*' token
ck_ssl.h:99: warning: data definition has no type or storage class
ck_ssl.h:109: error: parse error before '*' token
ck_ssl.h:110: error: parse error before "X509_STORE_CTX"
ck_ssl.h:111: error: parse error before "X509_STORE_CTX"
ck_ssl.h:116: error: parse error before '*' token
ck_ssl.h:117: error: parse error before '*' token
ck_ssl.h:118: error: parse error before '*' token
ck_ssl.h:119: error: parse error before '*' token
ck_ssl.h:120: error: parse error before '*' token
ck_ssl.h:124: error: parse error before '*' token
ck_ssl.h:125: error: parse error before '*' token
ck_ssl.h:126: error: parse error before '*' token
ck_ssl.h:127: error: parse error before "X509_STORE_CTX"
ck_ssl.h:129: error: parse error before '*' token
ck_ssl.h:130: error: parse error before '*' token
make[2]: *** [ckcmai.o] Error 1
make[2]: Leaving directory `/u/local/src/kermitssl'
make[1]: *** [solaris2xg+openssl+zlib+pam+shadow] Error 2
make[1]: Leaving directory `/u/local/src/kermitssl'
make: *** [solaris9g+openssl+shadow+pam+zlib] Error 2

On 2007-02-16, Gary Quiring <gquiring@gmail.com> wrote:
: On Feb 15, 12:22 pm, Frank da Cruz <f...@panix.com> wrote:
:> On 2007-02-14, Gary Quiring <gquir...@gmail.com> wrote:
:> : On Feb 14, 10:47 am, Frank da Cruz <f...@panix.com> wrote:
:> :> On 2007-02-14, Gary Quiring <gquir...@gmail.com> wrote:
:> :> : I am trying to compile kermit 8.0.211 with Solaris 9 (Sparc). My
:> :> : openssl ver is 0.9.8d
:> ....
:> :
:> I have Solaris 9 here, with OpenSSL 0.9.8d, and "It Works For Me" (TM).
:>
:> To build C-Kermit with OpenSSL, you need to use one of the appropriate
:> makefile targets (which you did), plus:
:>
:> . If the OpenSSL version is 0.9.7 or greater (a point where the API
:> changed), you have to add -DOPENSSL_097 to CFLAGS (which can be
:> done as shown above);
:>
:> . If the OpenSSL header files are not in /usr/local/ssl/include, you
:> have to change or override the definitions of "prefix" or "sslroot"
:> or SSLINCL in the makefile.
:>
:> . If the OpenSSL libraries are not in /usr/local/ssl/lib, you
:> have to change or override the definitions of "prefix" or "sslroot"
:> or SSLLIB in the makefile.
:>
:> At Columbia, we have to do all these things, because around here (or maybe
:> in Solaris in general) "/usr/local" is "deprecated": Here is the procedure:
:>
:> export SSLINC=-I/opt/openssl-0.9.8d/include
:> export SSLLIB=-L/opt/openssl-0.9.8d/lib
:> export "KFLAGS=-DOPENSSL_097 -DCK_FORWARD_X -D_FILE_OFFSET_BITS=64"
:> make -e solaris9g+openssl+shadow+pam+zlib
:>
:> - Frank
:
: Still no luck. My SSL location is /usr/local/ssl. I set the
: following:
:
: export SSLINC="-l/usr/local/ssl/include"
: export SSLLIB="-L/usr/local/ssl/lib"
:
Well, this should be unnecessary because it's the default.

: export KFLAGS="-DOPENSSL_097 -DCK_FORWARD_X -D_FILE_OFFSET_BITS=64"
:
: Why is ck_ssl.h hardcoded for openssl directory? I made a link for
: openssl -> ssl in /usr/local but it still didn't work.
:
See below. Not to get off on a tangent, but after decades already of dealing
with the headaches of dealing with hardwired Unix (or DOS, or Windows, for
that matter) directory names that are constantly changing makes me ever more
nostalgic for the the "logical name" concept that was so effective in TOPS-10,
TOPS-20, and to this day in VMS.

: gcc -g -O -Usun -DSVR4 -DSOLARIS -DSTERMIOX (etc etc...)
: ckcmai.c
: In file included from ckcmai.c:607:
: ck_ssl.h:35:26: openssl/comp.h: No such file or directory
: ck_ssl.h:42:25: openssl/des.h: No such file or directory
: ck_ssl.h:43:25: openssl/ssl.h: No such file or directory
: (etc etc)
:

Let's see. You've told the compiler to look for include files in
/usr/local/ssl/include. That directory should contain an openssl directory,
which, in turn, contains all the .h files. If so, the build should work for
you if you just do it like this (since your ssl tree is already in the
default location):

make KFLAGS=-DOPENSSL_097 solaris9g+openssl+shadow+pam+zlib

- Frank

On Feb 16, 3:52 pm, Frank da Cruz <f...@panix.com> wrote:[color=blue]
> On 2007-02-16, Gary Quiring <gquir...@gmail.com> wrote:
> : On Feb 15, 12:22 pm, Frank da Cruz <f...@panix.com> wrote:
> :> On 2007-02-14, Gary Quiring <gquir...@gmail.com> wrote:
> :> : On Feb 14, 10:47 am, Frank da Cruz <f...@panix.com> wrote:
> :> :> On 2007-02-14, Gary Quiring <gquir...@gmail.com> wrote:
> :> :> : I am trying to compile kermit 8.0.211 with Solaris 9 (Sparc). My
> :> :> : openssl ver is 0.9.8d
> :> ....
> :> :
> :> I have Solaris 9 here, with OpenSSL 0.9.8d, and "It Works For Me" (TM).
> :>
> :> To build C-Kermit with OpenSSL, you need to use one of the appropriate
> :> makefile targets (which you did), plus:
> :>
> :> . If the OpenSSL version is 0.9.7 or greater (a point where the API
> :> changed), you have to add -DOPENSSL_097 to CFLAGS (which can be
> :> done as shown above);
> :>
> :> . If the OpenSSL header files are not in /usr/local/ssl/include, you
> :> have to change or override the definitions of "prefix" or "sslroot"
> :> or SSLINCL in the makefile.
> :>
> :> . If the OpenSSL libraries are not in /usr/local/ssl/lib, you
> :> have to change or override the definitions of "prefix" or "sslroot"
> :> or SSLLIB in the makefile.
> :>
> :> At Columbia, we have to do all these things, because around here (or maybe
> :> in Solaris in general) "/usr/local" is "deprecated": Here is the procedure:
> :>
> :> export SSLINC=-I/opt/openssl-0.9.8d/include
> :> export SSLLIB=-L/opt/openssl-0.9.8d/lib
> :> export "KFLAGS=-DOPENSSL_097 -DCK_FORWARD_X -D_FILE_OFFSET_BITS=64"
> :> make -e solaris9g+openssl+shadow+pam+zlib
> :>
> :> - Frank
> :
> : Still no luck. My SSL location is /usr/local/ssl. I set the
> : following:
> :
> : export SSLINC="-l/usr/local/ssl/include"
> : export SSLLIB="-L/usr/local/ssl/lib"
> :
> Well, this should be unnecessary because it's the default.
>
> : export KFLAGS="-DOPENSSL_097 -DCK_FORWARD_X -D_FILE_OFFSET_BITS=64"
> :
> : Why is ck_ssl.h hardcoded for openssl directory? I made a link for
> : openssl -> ssl in /usr/local but it still didn't work.
> :
> See below. Not to get off on a tangent, but after decades already of dealing
> with the headaches of dealing with hardwired Unix (or DOS, or Windows, for
> that matter) directory names that are constantly changing makes me ever more
> nostalgic for the the "logical name" concept that was so effective in TOPS-10,
> TOPS-20, and to this day in VMS.
>
> : gcc -g -O -Usun -DSVR4 -DSOLARIS -DSTERMIOX (etc etc...)
> : ckcmai.c
> : In file included from ckcmai.c:607:
> : ck_ssl.h:35:26: openssl/comp.h: No such file or directory
> : ck_ssl.h:42:25: openssl/des.h: No such file or directory
> : ck_ssl.h:43:25: openssl/ssl.h: No such file or directory
> : (etc etc)
> :
>
> Let's see. You've told the compiler to look for include files in
> /usr/local/ssl/include. That directory should contain an openssl directory,
> which, in turn, contains all the .h files. If so, the build should work for
> you if you just do it like this (since your ssl tree is already in the
> default location):
>
> make KFLAGS=-DOPENSSL_097 solaris9g+openssl+shadow+pam+zlib
>
> - Frank[/color]

Same error:

make KFLAGS=-DOPENSSL_097 solaris9g+openssl+shadow+pam+zlib
make "MAKE=make" solaris2xg+openssl+zlib+pam+shadow \
KTARGET=${KTARGET:-solaris9g+openssl+shadow+pam+zlib} \
"KFLAGS=-DSOLARIS9 -DHDBUUCP -DDIRENT -DZLIB -DCK_PAM -DCK_SHADOW \
-DLIBDES -DOPENSSL_097" "LIBS= -lpam -ldes425 -lz "
make[1]: Entering directory `/u/local/src/kerm'
Making C-Kermit "8.0.211" for Solaris 2.x with gcc, OpenSSL...
Please read the comments that accompany the solaris2xg target.
make xermit KTARGET=${KTARGET:-solaris2xg+openssl+zlib+pam+shadow}
CC=gcc CC2=gc
c \
"CFLAGS = -g -O -Usun -DSVR4 -DSOLARIS -DSTERMIOX -DSELECT -DFNFLOAT \
-DCK_CURSES -DCK_NEWTERM -DDIRENT -DHDBUUCP -DTCPSOCKET \
-DCK_AUTHENTICATION -DCK_SSL -DCK_PAM -DCK_SHADOW -DZLIB \
-DBIGBUFOK -I/usr/local/ssl/include -DSOLARIS9 -DHDBUUCP -DDIRENT -
DZLIB -DCK_PA
M -DCK_SHADOW -DLIBDES -DOPENSSL_097" \
"LIBS= -L/usr/local/ssl/lib -ltermlib \
-lsocket -lnsl -lm -lresolv -lssl -lcrypto -lpam -lz"
make[2]: Entering directory `/u/local/src/kerm'
gcc -g -O -Usun -DSVR4 -DSOLARIS -DSTERMIOX -DSELECT -DFNFLOAT -
DCK_CURSES -DCK
_NEWTERM -DDIRENT -DHDBUUCP -DTCPSOCKET -DCK_AUTHENTICATION -DCK_SSL -
DCK_PAM -
DCK_SHADOW -DZLIB -DBIGBUFOK -I/usr/local/ssl/include -DSOLARIS9 -
DHDBUUCP -DD
IRENT -DZLIB -DCK_PAM -DCK_SHADOW -DLIBDES -DOPENSSL_097 -DKTARGET=
\"solaris9g+
openssl+shadow+pam+zlib\" -c ckcmai.c
In file included from /usr/local/ssl/include/openssl/x509.h:96,
from /usr/local/ssl/include/openssl/ssl.h:183,
from ck_ssl.h:43,
from ckcmai.c:607:
/usr/local/ssl/include/openssl/rsa.h:335: error: parse error before
numeric constant
/usr/local/ssl/include/openssl/rsa.h:336: error: parse error before
numeric constant
make[2]: *** [ckcmai.o] Error 1
make[2]: Leaving directory `/u/local/src/kerm'
make[1]: *** [solaris2xg+openssl+zlib+pam+shadow] Error 2
make[1]: Leaving directory `/u/local/src/kerm'
make: *** [solaris9g+openssl+shadow+pam+zlib] Error 2

: Same error:
:
There are two things to consider:

1. Where are the SSL header files and libs?
2. What version of SSL is it?

The Kermit makefile has defaults which, like all defaults, don't work
for everybody. It gives you a means to override the defaults. But I can't
see your Solaris system, I don't know what is what, or where. You have to:

1. Indicate to the makefile where to find the SSL header files and libs.
2. Include the -DOPENSSL_097 defintion if these header files and
libs are OpenSSL 0.9.7 or later.

Here is the relevant section of the makefile:

# You can build these targets if you have the Kermit source files and the
# required libraries (Kerberos, OpenSSL, SRP, etc) and header files. See:
# [url]http://www.columbia.edu/kermit/security.html[/url]
# for specific details regarding supported versions.
#
# NOTE: OpenSSL 0.9.6 and earlier are not compatible with 0.9.7 and later.
# C-Kermit code is designed for 0.9.6. To build with 0.9.7 you must add
# -DOPENSSL_097 to avoid missing symbols in the DES library and to use the
# entry points that were renamed to avoid conflict with Kerberos 4.
#
# In OpenSSL builds add -ldl if you get unresolved references for
# dlopen, dlclose, dlsym, and/or dlerror.
#
# The following symbols are used to specify library and header file locations
# Redefine them to the values used on your system by:
# . editing this file
# . defining the values on the command line
# . defining the values in the environment and use the -e option
#
prefix = /usr/local
srproot = $(prefix)
sslroot = $(prefix)
manroot = $(prefix)

K4LIB=-L/usr/kerberos/lib
K4INC=-I/usr/kerberos/include
K5LIB=-L/usr/kerberos/lib
K5INC=-I/usr/kerberos/include
SRPLIB=-L$(srproot)/lib
SRPINC=-I$(srproot)/include
SSLLIB=-L$(sslroot)/ssl/lib
SSLINC=-I$(sslroot)/ssl/include

- Frank

On Feb 21, 12:54 pm, Frank Da Cruz <f...@panix.com> wrote:[color=blue]
> : Same error:
> :
> There are two things to consider:
>
> 1. Where are the SSL header files and libs?
> 2. What version of SSL is it?
>
> The Kermit makefile has defaults which, like all defaults, don't work
> for everybody. It gives you a means to override the defaults. But I can't
> see your Solaris system, I don't know what is what, or where. You have to:
>
> 1. Indicate to the makefile where to find the SSL header files and libs.
> 2. Include the -DOPENSSL_097 defintion if these header files and
> libs are OpenSSL 0.9.7 or later.
>
> Here is the relevant section of the makefile:
>
> # You can build these targets if you have the Kermit source files and the
> # required libraries (Kerberos, OpenSSL, SRP, etc) and header files. See:
> # [url]http://www.columbia.edu/kermit/security.html[/url]
> # for specific details regarding supported versions.
> #
> # NOTE: OpenSSL 0.9.6 and earlier are not compatible with 0.9.7 and later.
> # C-Kermit code is designed for 0.9.6. To build with 0.9.7 you must add
> # -DOPENSSL_097 to avoid missing symbols in the DES library and to use the
> # entry points that were renamed to avoid conflict with Kerberos 4.
> #
> # In OpenSSL builds add -ldl if you get unresolved references for
> # dlopen, dlclose, dlsym, and/or dlerror.
> #
> # The following symbols are used to specify library and header file locations
> # Redefine them to the values used on your system by:
> # . editing this file
> # . defining the values on the command line
> # . defining the values in the environment and use the -e option
> #
> prefix = /usr/local
> srproot = $(prefix)
> sslroot = $(prefix)
> manroot = $(prefix)
>
> K4LIB=-L/usr/kerberos/lib
> K4INC=-I/usr/kerberos/include
> K5LIB=-L/usr/kerberos/lib
> K5INC=-I/usr/kerberos/include
> SRPLIB=-L$(srproot)/lib
> SRPINC=-I$(srproot)/include
> SSLLIB=-L$(sslroot)/ssl/lib
> SSLINC=-I$(sslroot)/ssl/include
>
> - Frank[/color]

I am 100% confused. Are you saying it can't find my SSL include and
header files? Because the errors says it can't parse the contents of
the file which means it is finding the stuff right?

My SSL (0.9.8d) directory structure (/usr/local/ssl):

bin
certs
include/openssl
lib
man
misc
private

Thanks
Gary

On 2007-02-21, Gary Quiring <gquiring@gmail.com> wrote:
: I am 100% confused. Are you saying it can't find my SSL include and
: header files? Because the errors says it can't parse the contents of
: the file which means it is finding the stuff right?
:
It is finding SOME ssl header files and getting parse errors. The only
reasons I know of that this would happen are:

1. The files are from OpenSSL 0.9.7 or later but you have not included
-DOPENSSL_097 in the compiler flags; or:

2. The files are from OpenSSL 0.9.6 or earlier but you have included
the -DOPENSSL_097 flag.

: My SSL (0.9.8d) directory structure (/usr/local/ssl):
:
: bin
: certs
: include/openssl
: lib
: man
: misc
: private
:
So the question is, which SSL files is the makefile finding? If indeed
these files are where you say they are, and indeed they are the SSL version
you say they are, and indeed you have included the -DOPENSSL_097 flag in
the compilation, and indeed you have not pointed the makefile at some other
SSL directory tree, it should work (but there will be a few unavoidable but
harmless warnings in the security modules).

It should work because /usr/local/ is the makefile variable "sslroot"
is defined by default as "/usr/local", which it uses unless you redefine
sslroot, SSLINC, or SSLLIB.

If it doesn't work, then something is not as you described it.

We know that the makefile is finding *some* SSL header files, but cpp
is having a problem with them. What do you see when you do this:

ce /usr/local/ssl/include/openssl
grep OPENSSL_VERSION_TEXT opensslv.h

What happens if you omit the -DOPENSSL_097 flag, but leave everything else the
same?

Anyway, it will take some trial and error. You have to make the compiler
flags (presence or absence of -DOPENSSL_097) agree with the OpenSSL version of
the header files that are actually being read by cpp.

- Frank

> cd /usr/local/ssl/include/openssl[color=blue]
> grep OPENSSL_VERSION_TEXT opensslv.h
>[/color]

#define OPENSSL_VERSION_TEXT "OpenSSL 0.9.8d-fips 28 Sep 2006"
#define OPENSSL_VERSION_TEXT "OpenSSL 0.9.8d 28 Sep 2006"
#define OPENSSL_VERSION_PTEXT " part of " OPENSSL_VERSION_TEXT
[color=blue]
> What happens if you omit the -DOPENSSL_097 flag, but leave everything else the
> same?[/color]

With KFLAGS or without KFLAGS I get the exact same error:
In file included from /usr/local/ssl/include/openssl/x509.h:96,
from /usr/local/ssl/include/openssl/ssl.h:183,
from ck_ssl.h:43,
from ckcmai.c:607:
/usr/local/ssl/include/openssl/rsa.h:335: error: parse error before
numeric constant
/usr/local/ssl/include/openssl/rsa.h:336: error: parse error before
numeric constant

Frank there has to be some compat issue with Kermit, I got this answer
from someone on the Solaris forum who also had issues:

i've done this with kermit 2.0.11 and openssl 0.9.7l. i don't know
if
openssl 0.9.8 is supported with kermit 2.0.11. seems like i found
something on the kermit web site that indicated it was not.

i used the Sun C compiler to do all of the builds.


after building openssl and installing in /usr/local/openssl, here's
what i did to get SSL support in kermit:


In the kermit makefile, uncomment the LNKFLAGS= line.


In the kermit makefile, change the make target named
solaris2xg32+openssl+zlib+pam+shadow as shown


solaris2xg32+openssl+zlib+pam+shadow:
@echo 'Making C-Kermit $(CKVER) for Solaris 2.x with SUNWspro
cc, OpenSSL...'
@echo 'Please read the comments that accompany the solaris2xg
target.'
$(MAKE) xermit KTARGET=$${KTARGET:-$(@)} \
"CFLAGS = -g -O -Usun -DOPENSSL_097 -DSVR4 -DSOLARIS9 -
DSTERMIOX -DSELECT -DFNFLOAT \
-DCK_CURSES -DCK_NEWTERM -DDIRENT -DHDBUUCP -DTCPSOCKET \
-DCK_AUTHENTICATION -DCK_SSL -DCK_PAM -DCK_SHADOW -DZLIB \
-DBIGBUFOK -I/usr/local/openssl/include" \
"LIBS= -L/usr/local/openssl/lib -ltermlib \
-lsocket -lnsl -lm -lresolv -lssl -lcrypto -lpam -lz"


Edit the file ck_ssl.h and add the line:


#undef EM


in the following location (the newly added line should be line number
42 in the file):


#define OPENSSL_NO_MDC2
#undef EM
#include <openssl/des.h>
#include <openssl/ssl.h>

What does that EM line do?

By including the 'undef EM' line in ck_ssl.h kermit compiles clean
once I changed openssl to use shared vs static libs. With shared libs
Kermit still does not compile unless I use the 'undef EM' line. So
the million dollar question, what does that 'undef EM' do?

On 2007-02-26, Gary Quiring <gquiring@gmail.com> wrote:
: By including the 'undef EM' line in ck_ssl.h kermit compiles clean
: once I changed openssl to use shared vs static libs. With shared libs
: Kermit still does not compile unless I use the 'undef EM' line. So
: the million dollar question, what does that 'undef EM' do?
:
Honestly, I have no idea. Again, I have Solaris 9 and OpenSSL 0.9.8d here
too, just like you, and I'm building it with Sun CC (not gcc), just like you,
and C-Kermit/SSL builds with no problem. There is no #define EM anywhere in
the C-Kermit source code, so the #undef must be to undo some conflict between
OpenSSL and Solaris headers. But in that case, why do you see the problem and
I don't -- nor, as far as I know, anybody else?

I notice that the suggested location for the #undef is right after this:

#ifdef ZLIB
#include <openssl/comp.h>
#endif /* ZLIB */

Maybe comp.h, or something it includes (such as crypto.h), or something
crypto.h includes, or something that one of those includes, and on and on,
is the culprit.

You can build Kermit with SSL but without compression. Just omit the
-DZLIB switch. See if that makes a difference.

- Frank