Hi all, tried to build dovecot-1.0.alpha3 with gnutls. The build stops something like: ssl-proxy-gnutls.c:420: warning: 'gnutls_dh_params_set' is \ deprecated (declared at /usr/include/gnutls/compat8.h:82) ssl-proxy-gnutls.c: In function 'read_rsa_parameters': \ ssl-proxy-gnutls.c:446: warning: 'gnutls_rsa_params_set' is \ deprecated (declared at /usr/include/gnutls/compat8.h:77) make[4]: *** [ssl-proxy-gnutls.o] Error 1 Building with openssl 0.9.8 there are connection errors: dovecot: Oct 15 22:46:48 Error: imap-login: Can't load certificate \ file /etc/ssl/certs/dovecot.pem: error:25066067:DSO support \ routines:DLFCN_LOAD:could not load the shared library Any hints? Please notice I prefer gnutls ;-) Thanks Elimar -- On the keyboard of life you have always to keep a finger at the escape key;-) -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: <http://dovecot.org/pipermail/dovecot/attachments/20051016/3409105f/attachment.bin>
Elimar Riesebieter wrote:> Building with openssl 0.9.8 there are connection errors:Some people reported problems with 0.9.8, which are gone after a downgrade to 0.9.7.> Any hints? Please notice I prefer gnutls ;-)Can't help you with this. What is with gnutls that you prefer it. Better performance, security, handling?
On Sun, 2005-10-16 at 01:34 +0200, Elimar Riesebieter wrote:> Hi all, > > tried to build dovecot-1.0.alpha3 with gnutls. The build stops > something like: > ssl-proxy-gnutls.c:420: warning: 'gnutls_dh_params_set' is \ > deprecated (declared at /usr/include/gnutls/compat8.h:82) > ssl-proxy-gnutls.c: In function 'read_rsa_parameters': \ > ssl-proxy-gnutls.c:446: warning: 'gnutls_rsa_params_set' is \ > deprecated (declared at /usr/include/gnutls/compat8.h:77) > make[4]: *** [ssl-proxy-gnutls.o] Error 1Well, it should have said instead: #error broken currently The code is basically in need of a rewrite. Very low priority for myself.> Building with openssl 0.9.8 there are connection errors: > > dovecot: Oct 15 22:46:48 Error: imap-login: Can't load certificate \ > file /etc/ssl/certs/dovecot.pem: error:25066067:DSO support \ > routines:DLFCN_LOAD:could not load the shared libraryI don't really know about this. Looks like OpenSSL 0.9.8 does something weird. Or maybe it's just Debian's bug? -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: <http://dovecot.org/pipermail/dovecot/attachments/20051016/c31a9ded/attachment.bin>
On Sun, 16 Oct 2005 the mental interface of Timo Sirainen told:> On Sun, 2005-10-16 at 01:34 +0200, Elimar Riesebieter wrote: > > Hi all, > > > > tried to build dovecot-1.0.alpha3 with gnutls. The build stops > > something like: > > ssl-proxy-gnutls.c:420: warning: 'gnutls_dh_params_set' is \ > > deprecated (declared at /usr/include/gnutls/compat8.h:82) > > ssl-proxy-gnutls.c: In function 'read_rsa_parameters': \ > > ssl-proxy-gnutls.c:446: warning: 'gnutls_rsa_params_set' is \ > > deprecated (declared at /usr/include/gnutls/compat8.h:77) > > make[4]: *** [ssl-proxy-gnutls.o] Error 1 > > Well, it should have said instead: > > #error broken currently > > The code is basically in need of a rewrite. Very low priority for > myself.Its a matter of licence. GNUTLS is LGPL'd wich make it much easier to add it to GPL'd programs like i.e. curl. There is a discussion on debian-devel, wher many developers want to make GNUTLS the default and wipe out openssl. The licence of dovecot allows to use the openssl licence though. */ just for info http://www.gnome.org/~markmc/openssl-and-the-gpl.html */> > Building with openssl 0.9.8 there are connection errors: > > > > dovecot: Oct 15 22:46:48 Error: imap-login: Can't load certificate \ > > file /etc/ssl/certs/dovecot.pem: error:25066067:DSO support \ > > routines:DLFCN_LOAD:could not load the shared library > > I don't really know about this. Looks like OpenSSL 0.9.8 does something > weird. Or maybe it's just Debian's bug?Og course it is. Thanks Elimar -- Alles was viel bedacht wird ist bedenklich!;-) Friedrich Nietzsche -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://dovecot.org/pipermail/dovecot/attachments/20051016/f5a4dc9a/attachment.pgp