>> Great! Now sounds like you’re possibly compiling and linking against different versions of OpenSSL.
>> 
>>>> util_shib.cpp:150:28: error: cannot initialize a parameter of type 'const xmltooling::XMLObject *' with an rvalue of type
>>>>    'gss_buffer_desc *' (aka 'gss_buffer_desc_struct *')
>>>>      resolver->addToken(&mechName);
>>> 
>>> Following Luke's message, I've rebuilt shibresolver with GSSAPI support and this goes away. Nearly there... now just getting some undefined symbols errors:
>>> 
>>> Undefined symbols for architecture x86_64:
>>> "_ERR_remove_thread_state", referenced from:
>>>     _tls_deinit in libeap.a(tls_openssl.o)
>>> "_SSL_CTX_clear_extra_chain_certs", referenced from:
>>>     _tls_connection_client_cert in libeap.a(tls_openssl.o)
>>>     _tls_parse_pkcs12 in libeap.a(tls_openssl.o)
>>> "_SSL_cache_hit", referenced from:
>>>     _tls_connection_resumed in libeap.a(tls_openssl.o)
>>> "_SSL_export_keying_material", referenced from:
>>>     _tls_connection_export_key in libeap.a(tls_openssl.o)
>>> ld: symbol(s) not found for architecture x86_64
> 
> Sorry Luke, but I'm still getting this... and this is after I explicitly set OpenSSL directives to point to /usr/lib (where openssl 0.9.8zh that is shipped is installed).

I just re-ran the Makefile in libeap (after explicitly declaring a link to /usr/lib/libcrypto.dylib et al) and got this:

src/crypto/tls_openssl.c:1057:3: warning: implicit declaration of function 'ERR_remove_thread_state' is invalid in C99 [-Wimplicit-function-declaration]
                ERR_remove_thread_state(NULL);
                ^
src/crypto/tls_openssl.c:2368:2: warning: implicit declaration of function 'SSL_CTX_clear_extra_chain_certs' is invalid in C99 [-Wimplicit-function-declaration]
        SSL_CTX_clear_extra_chain_certs(conn->ssl_ctx);
        ^
src/crypto/tls_openssl.c:3192:6: warning: implicit declaration of function 'SSL_export_keying_material' is invalid in C99 [-Wimplicit-function-declaration]
            SSL_export_keying_material(conn->ssl, out, out_len, label,
            ^
src/crypto/tls_openssl.c:3534:16: warning: implicit declaration of function 'SSL_cache_hit' is invalid in C99 [-Wimplicit-function-declaration]
        return conn ? SSL_cache_hit(conn->ssl) : 0;
                      ^
That corresponds to the errors...

And searching further I find that SSL_CTX_clear_extra_chain_certs is an OpenSSL 1.0.0 and later thing, ditto SSL_export_keying_material. So I guess the MacOS version of OpenSSL is ancient enough not to have this... Looks like we'll need to install OpenSSL 1.0.0 or later. :-/

Does that tally?

Stefan Paetow
Moonshot Industry & Research Liaison Coordinator

t: +44 (0)1235 822 125
gpg: 0x3FCE5142
xmpp: [log in to unmask]
skype: stefan.paetow.janet

jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.