On 28/04/11 06:58, Ming Fu wrote:
> Hi,
>
> I was trying to investigate if the sslBump problem recently reported by Will Metcalf is a result of bug 1991 that SSL does not work well with FreeBSD kqueue.
>
Hmm, interesting idea. That might be involved.
We have had several independent mentions about the 3.2.0.7 and
3.1.12.1 failure of SslBump. I was thinking it was probably due to the
I/O handling changes we made to CONNECT in those releases.
I am awaiting some kind of fix from someone interested.
For the record the developers working on and with SslBump do not read
this list so everybody who is reporting beta code bugs here (instead of
squid-dev mailing list where such reports are supposed to go) is not
getting anything close to expert attention.
> So I tried to test the same setting on a Linux. The system is a
> RedHat Fedora 14. Gcc version 4.5.1. 20100924, and OpenSSL 1.0.0d-fips 8 Feb 2011
>
> ./configure '--disable-loadable-modules' '--disable-esi' '--enable-icap_client' '--enable-ssl' '--enable-auth' '--enable-ssl-crtd' --enable-ltdl-convenience
>
> However I was blocked by the compile error:
>
> make[3]: Entering directory `/home/fming/squid-3.2.0.7/src/ssl'
> g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib -I../../src -I../../include -Wall -Wpointer-arith -Wwrite-strings -Wcomments -Werror -pipe -D_REENTRANT -g -O2 -MT ssl_crtd.o -MD -MP -MF .deps/ssl_crtd.Tpo -c -o ssl_crtd.o ssl_crtd.cc
> In file included from ssl_crtd.cc:9:0:
> ../../src/ssl/certificate_db.h: In static member function 'static long unsigned int Ssl::CertificateDb::index_serial_hash_LHASH_HASH(const void*)':
> ../../src/ssl/certificate_db.h:113:12: error: duplicate 'const'
> ../../src/ssl/certificate_db.h:113:12: error: invalid conversion from 'const void*' to 'const char***'
> ../../src/ssl/certificate_db.h:113:12: error: 'index_serial_hash_hash' was not declared in this scope
Interesting. This is the compiler complaining about the OpenSSL header
definition of IMPLEMENT_LHASH_HASH_FN.
I'm not sure where these "char***" or double const are coming from. The
Squid definition is char** and the OpenSSL (0.9.8o) macro I can see does
not add any reference or pointer or const to the parameters.
Amos
-- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.12 Beta testers wanted for 3.2.0.7 and 3.1.12.1Received on Thu Apr 28 2011 - 04:25:54 MDT
This archive was generated by hypermail 2.2.0 : Thu Apr 28 2011 - 12:00:03 MDT