Hello there, There are build issues with the latest snapshot and both RHEL 5 and 6 versions, since they don't support ECDH fully due patent limits or whatever [1]. The same problems described here [2] and here [3]. Some info is also here [4] (but in Russian).
We definitely need to test ECDH support with checking `OPENSSL_NO_ECDH` presence in sources, or trigger using EC features with a `configure` script switch. ------------ < cut here > ------------ gcc -DHAVE_CONFIG_H -I. -I../.. -I../../smtpd -I../../openbsd-compat -I../../contrib/lib/libc/asr -I. -DSMTPD_CONFDIR=\"/etc/opensmtpd\" -DPATH_SMTPCTL=\"/usr/sbin/smtpctl\" -DPATH_MAILLOCAL=\"/usr/libexec/mail.local\" -DPATH_FILTERS=\"/usr/libexec/opensmtpd\" -DPATH_TABLES=\"/usr/libexec/opensmtpd\" -DHAVE_CONFIG_H -DIO_SSL -DASR_OPT_THREADSAFE=0 -DCA_FILE=\"/etc/ssl/cert.pem\" -O2 -g -Wall -Wpointer-arith -Wuninitialized -Wsign-compare -Wformat-security -Wno-pointer-sign -fno-strict-aliasing -D_FORTIFY_SOURCE=2 -fno-builtin-memset -D_GNU_SOURCE -MT smtpd-ssl.o -MD -MP -MF .deps/smtpd-ssl.Tpo -c -o smtpd-ssl.o `test -f '../../smtpd/ssl.c' || echo './'`../../smtpd/ssl.c ../../smtpd/ssl.c: In function 'ssl_set_ecdh_curve': ../../smtpd/ssl.c:424: error: 'EC_KEY' undeclared (first use in this function) ../../smtpd/ssl.c:424: error: (Each undeclared identifier is reported only once ../../smtpd/ssl.c:424: error: for each function it appears in.) ../../smtpd/ssl.c:424: error: 'ecdh' undeclared (first use in this function) ../../smtpd/ssl.c:432: warning: implicit declaration of function 'EC_KEY_new_by_curve_name' ../../smtpd/ssl.c:440: warning: implicit declaration of function 'EC_KEY_free' make[3]: *** [smtpd-ssl.o] Error 1 make[3]: *** Waiting for unfinished jobs.... mv -f .deps/smtpd-smtpd.Tpo .deps/smtpd-smtpd.Po make[3]: Leaving directory `/home/mock/rpmbuild/BUILD/opensmtpd-201307091512p1/mk/smtpd' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/home/mock/rpmbuild/BUILD/opensmtpd-201307091512p1/mk' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/home/mock/rpmbuild/BUILD/opensmtpd-201307091512p1' make: *** [all] Error 2 ------------ < cut here > ------------ [1] https://bugzilla.redhat.com/show_bug.cgi?id=319901 [2] https://bitcointalk.org/index.php?topic=85228 [3] http://redmine.lighttpd.net/boards/2/topics/4335 [4] http://forum.rutoken.ru/topic/1639/page/6/ --- wbr, Denis.
