nsd users - Sep 2021 - xfrd error when building

Am 11.09.21 um 18:12 scrunchie alain hubert via
nsd-users:
> I am beginning with NSD, and I get this error when running the make command
: ?struct xfrd_tcp_set? has no member named ?ssl_ctx?.
> $ yum list installed | egrep -i 'openssl|flex|bison|libevent'
> openssl.x86_64 ? ? ? ? ? ? ? ? ? ? ? ? 1:1.0.2k-19.el7 ? ? ? ? ? ? ? ?@base
> openssl-devel.x86_64 ? ? ? ? ? ? ? ? ? 1:1.0.2k-19.el7 ? ? ? ? ? ? ? ?@base
> openssl-libs.x86_64 ? ? ? ? ? ? ? ? ? ?1:1.0.2k-19.el7 ? ? ? ? ? ? ? ?@base
Hi,

your distribution is old. It gives you openssl-1.0.2, which is no longer
supported by the openssl team.
I expect, the current nsd source is not optimized to build against old,
unsupported openssl version.


from https://www.openssl.org/policies/releasestrat.html:
>    The next version of OpenSSL will be 3.0.0.
>    Version 1.1.1 will be supported until 2023-09-11 (LTS).
>    Version 1.0.2 is no longer supported. Extended support for 1.0.2 to gain
access to security fixes for that version is available.
>    Versions 1.1.0, 1.0.1, 1.0.0 and 0.9.8 are no longer supported.
Andreas

Hi,

Yes, that was the issue, the older version did not have TLS 1.3 and this
caused the compile failure. The issue is fixed in commit
https://github.com/NLnetLabs/nsd/commit/222d6406ec2740037006687320ac811008c048b2

Best regards, Wouter

On 12/09/2021 19:01, A. Schulze via nsd-users wrote:
> 
> 
> Am 11.09.21 um 18:12 scrunchie alain hubert via nsd-users:
>> I am beginning with NSD, and I get this error when running the make
command : ?struct xfrd_tcp_set? has no member named ?ssl_ctx?.
> 
>> $ yum list installed | egrep -i 'openssl|flex|bison|libevent'
>> openssl.x86_64 ? ? ? ? ? ? ? ? ? ? ? ? 1:1.0.2k-19.el7 ? ? ? ? ? ? ?
?@base
>> openssl-devel.x86_64 ? ? ? ? ? ? ? ? ? 1:1.0.2k-19.el7 ? ? ? ? ? ? ?
?@base
>> openssl-libs.x86_64 ? ? ? ? ? ? ? ? ? ?1:1.0.2k-19.el7 ? ? ? ? ? ? ?
?@base
> 
> Hi,
> 
> your distribution is old. It gives you openssl-1.0.2, which is no longer
supported by the openssl team.
> I expect, the current nsd source is not optimized to build against old,
unsupported openssl version.
> 
> 
> from https://www.openssl.org/policies/releasestrat.html:
>>    The next version of OpenSSL will be 3.0.0.
>>    Version 1.1.1 will be supported until 2023-09-11 (LTS).
>>    Version 1.0.2 is no longer supported. Extended support for 1.0.2 to
gain access to security fixes for that version is available.
>>    Versions 1.1.0, 1.0.1, 1.0.0 and 0.9.8 are no longer supported.
> 
> Andreas
> 
> _______________________________________________
> nsd-users mailing list
> nsd-users at lists.nlnetlabs.nl
> https://lists.nlnetlabs.nl/mailman/listinfo/nsd-users
>