<div dir="auto">Tobias,<div dir="auto"><br></div><div dir="auto">Building no longer works for me either...</div><div dir="auto"><br></div><div dir="auto"><div dir="auto">When running build.linux64x64/squeak.cog.spur/build/mvm (with libssl-dev 1.1.0f-3 installed) I get the following:</div><div dir="auto"><br></div><div dir="auto">In file included from /sqvm20180210/platforms/unix/plugins/SqueakSSL/sqUnixOpenSSL.c:4:0:</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/sqUnixOpenSSL.c: In function 'sqVerifyNameInner':</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/openssl_overlay.h:120:45: warning: implicit declaration of function 'CHECKED_STACK_OF' [-Wimplicit-function-declaration]</div><div dir="auto"> #define sqo_SKM_sk_num(type, st) sqo_sk_num(CHECKED_STACK_OF(type, st))</div><div dir="auto"> ^</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/openssl_overlay.h:124:37: note: in expansion of macro 'sqo_SKM_sk_num'</div><div dir="auto"> #define sqo_sk_GENERAL_NAME_num(st) sqo_SKM_sk_num(GENERAL_NAME, (st))</div><div dir="auto"> ^~~~~~~~~~~~~~</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/sqUnixOpenSSL.c:107:18: note: in expansion of macro 'sqo_sk_GENERAL_NAME_num'</div><div dir="auto"> int sANCount = sqo_sk_GENERAL_NAME_num(sANs);</div><div dir="auto"> ^~~~~~~~~~~~~~~~~~~~~~~</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/openssl_overlay.h:124:52: error: expected expression before 'GENERAL_NAME'</div><div dir="auto"> #define sqo_sk_GENERAL_NAME_num(st) sqo_SKM_sk_num(GENERAL_NAME, (st))</div><div dir="auto"> ^</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/openssl_overlay.h:120:62: note: in definition of macro 'sqo_SKM_sk_num'</div><div dir="auto"> #define sqo_SKM_sk_num(type, st) sqo_sk_num(CHECKED_STACK_OF(type, st))</div><div dir="auto"> ^~~~</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/sqUnixOpenSSL.c:107:18: note: in expansion of macro 'sqo_sk_GENERAL_NAME_num'</div><div dir="auto"> int sANCount = sqo_sk_GENERAL_NAME_num(sANs);</div><div dir="auto"> ^~~~~~~~~~~~~~~~~~~~~~~</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/openssl_overlay.h:125:59: error: expected expression before 'GENERAL_NAME'</div><div dir="auto"> #define sqo_sk_GENERAL_NAME_value(st, i) sqo_SKM_sk_value(GENERAL_NAME, (st), (i))</div><div dir="auto"> ^</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/openssl_overlay.h:121:77: note: in definition of macro 'sqo_SKM_sk_value'</div><div dir="auto"> #define sqo_SKM_sk_value(type, st,i) ((type *)sqo_sk_value(CHECKED_STACK_OF(type, st), i))</div><div dir="auto"> ^~~~</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/sqUnixOpenSSL.c:109:30: note: in expansion of macro 'sqo_sk_GENERAL_NAME_value'</div><div dir="auto"> const GENERAL_NAME* sAN = sqo_sk_GENERAL_NAME_value(sANs, i);</div><div dir="auto"> ^~~~~~~~~~~~~~~~~~~~~~~~~</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/openssl_overlay.h:127:73: error: expected expression before 'GENERAL_NAME'</div><div dir="auto"> #define sqo_sk_GENERAL_NAME_pop_free(st, free_func) sqo_SKM_sk_pop_free(GENERAL_NAME, (st), (free_func))</div><div dir="auto"> ^</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/openssl_overlay.h:123:83: note: in definition of macro 'sqo_SKM_sk_pop_free'</div><div dir="auto"> #define sqo_SKM_sk_pop_free(type, st, free_func) sqo_sk_pop_free(CHECKED_STACK_OF(type, st), CHECKED_SK_FREE_FUNC(type, free_func))</div><div dir="auto"> ^~~~</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/sqUnixOpenSSL.c:116:3: note: in expansion of macro 'sqo_sk_GENERAL_NAME_pop_free'</div><div dir="auto"> sqo_sk_GENERAL_NAME_pop_free(sANs, (void(*)(void*))sqo_sk_free);</div><div dir="auto"> ^~~~~~~~~~~~~~~~~~~~~~~~~~~~</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/openssl_overlay.h:123:94: warning: implicit declaration of function 'CHECKED_SK_FREE_FUNC' [-Wimplicit-function-declaration]</div><div dir="auto"> #define sqo_SKM_sk_pop_free(type, st, free_func) sqo_sk_pop_free(CHECKED_STACK_OF(type, st), CHECKED_SK_FREE_FUNC(type, free_func))</div><div dir="auto"> ^</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/openssl_overlay.h:127:53: note: in expansion of macro 'sqo_SKM_sk_pop_free'</div><div dir="auto"> #define sqo_sk_GENERAL_NAME_pop_free(st, free_func) sqo_SKM_sk_pop_free(GENERAL_NAME, (st), (free_func))</div><div dir="auto"> ^~~~~~~~~~~~~~~~~~~</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/sqUnixOpenSSL.c:116:3: note: in expansion of macro 'sqo_sk_GENERAL_NAME_pop_free'</div><div dir="auto"> sqo_sk_GENERAL_NAME_pop_free(sANs, (void(*)(void*))sqo_sk_free);</div><div dir="auto"> ^~~~~~~~~~~~~~~~~~~~~~~~~~~~</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/openssl_overlay.h:127:73: error: expected expression before 'GENERAL_NAME'</div><div dir="auto"> #define sqo_sk_GENERAL_NAME_pop_free(st, free_func) sqo_SKM_sk_pop_free(GENERAL_NAME, (st), (free_func))</div><div dir="auto"> ^</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/openssl_overlay.h:123:115: note: in definition of macro 'sqo_SKM_sk_pop_free'</div><div dir="auto"> #define sqo_SKM_sk_pop_free(type, st, free_func) sqo_sk_pop_free(CHECKED_STACK_OF(type, st), CHECKED_SK_FREE_FUNC(type, free_func))</div><div dir="auto"> ^~~~</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/sqUnixOpenSSL.c:116:3: note: in expansion of macro 'sqo_sk_GENERAL_NAME_pop_free'</div><div dir="auto"> sqo_sk_GENERAL_NAME_pop_free(sANs, (void(*)(void*))sqo_sk_free);</div><div dir="auto"> ^~~~~~~~~~~~~~~~~~~~~~~~~~~~</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/sqUnixOpenSSL.c: In function 'sqSetupSSL':</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/openssl_overlay.h:119:64: error: 'SSL_CTRL_OPTIONS' undeclared (first use in this function)</div><div dir="auto"> #define sqo_SSL_CTX_set_options(ctx,op) sqo_SSL_CTX_ctrl((ctx),SSL_CTRL_OPTIONS,(op),NULL)</div><div dir="auto"> ^</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/sqUnixOpenSSL.c:235:2: note: in expansion of macro 'sqo_SSL_CTX_set_options'</div><div dir="auto"> sqo_SSL_CTX_set_options(ssl->ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3);</div><div dir="auto"> ^~~~~~~~~~~~~~~~~~~~~~~</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/openssl_overlay.h:119:64: note: each undeclared identifier is reported only once for each function it appears in</div><div dir="auto"> #define sqo_SSL_CTX_set_options(ctx,op) sqo_SSL_CTX_ctrl((ctx),SSL_CTRL_OPTIONS,(op),NULL)</div><div dir="auto"> ^</div><div dir="auto">/sqvm20180210/platforms/unix/plugins/SqueakSSL/sqUnixOpenSSL.c:235:2: note: in expansion of macro 'sqo_SSL_CTX_set_options'</div><div dir="auto"> sqo_SSL_CTX_set_options(ssl->ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3);</div><div dir="auto"> ^~~~~~~~~~~~~~~~~~~~~~~</div><div dir="auto">Makefile:193: recipe for target 'sqUnixOpenSSL.lo' failed</div><div dir="auto">make[1]: *** [sqUnixOpenSSL.lo] Error 1</div><div dir="auto">Makefile:546: recipe for target 'SqueakSSL.la' failed</div><div dir="auto">make: *** [SqueakSSL.la] Error 2</div><div dir="auto"><br></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Feb 6, 2018 7:28 PM, "Tobias Pape" <<a href="mailto:Das.Linux@gmx.de">Das.Linux@gmx.de</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
> On 07.02.2018, at 01:14, Phil B <<a href="mailto:pbpublist@gmail.com">pbpublist@gmail.com</a>> wrote:<br>
><br>
> I'll give it a shot. Really, I'm not at all surprised to be having an SSL issue on Debian as I previously went over a year not being able to use the builds specifically due to a Ubuntu/Debian SSL lib version incompatibility (I *really* wish the Linux VM builds were statically linked as out of distro shared lib builds are just begging to break. Been dealing with this sort of thing since the early 90s on Linux)<br>
<br>
That's exactly why I made some changes.<br>
SqueakSSL is now neither statically (I hd that, but there were issues and legal is unclear) nor dynamically linked agains libssl, but rather loads libssl at runtime...<br>
<br>
Best regards<br>
-Tobias<br>
<br>
<br>
><br>
> On Feb 6, 2018 7:00 PM, "Tobias Pape" <<a href="mailto:Das.Linux@gmx.de">Das.Linux@gmx.de</a>> wrote:<br>
> Hi Phil,<br>
><br>
> > On 07.02.2018, at 00:50, Phil B <<a href="mailto:pbpublist@gmail.com">pbpublist@gmail.com</a>> wrote:<br>
> ><br>
> > /usr/lib/i386-linux-gnu/<wbr>libssl.so.1.0.0<br>
> > /usr/lib/i386-linux-gnu/<wbr>libssl.so.1.0.2<br>
> > /usr/lib/i386-linux-gnu/<wbr>libssl.so.1.1<br>
> > /usr/lib/i386-linux-gnu/i586/<wbr>libssl.so.1.0.0<br>
> > /usr/lib/i386-linux-gnu/i686/<wbr>cmov/libssl.so.1.0.0<br>
><br>
> Good!<br>
> Or not, I'm puzzled ;)<br>
> Could you please compile/run a debug-vm? It has some output, maybe it helps :)<br>
><br>
> Best regards<br>
> -Tobias<br>
><br>
><br>
> ><br>
> ><br>
> > On Feb 6, 2018 5:56 PM, "Tobias Pape" <<a href="mailto:Das.Linux@gmx.de">Das.Linux@gmx.de</a>> wrote:<br>
> ><br>
> > Hi Phil,<br>
> ><br>
> > > On 06.02.2018, at 23:49, Phil B <<a href="mailto:pbpublist@gmail.com">pbpublist@gmail.com</a>> wrote:<br>
> > ><br>
> > > It never gets that far (i.e. to log anything): the error occurs in #primitiveSSLCreate and there is no log output. I've confirmed that the plugin exists in the 20180206 VM (and the image appears to be otherwise working). When I switch back to the 20171214 build with the same image, no error loading the plugin (other than the issue we're discussing re: some urls failing with -5)<br>
> ><br>
> > can you give me the output of "locate libssl.so"?<br>
> ><br>
> > Best regards<br>
> > -Tobias<br>
> ><br>
> > ><br>
> > > On Feb 6, 2018 4:43 PM, "Tobias Pape" <<a href="mailto:Das.Linux@gmx.de">Das.Linux@gmx.de</a>> wrote:<br>
> > > Hi Phil<br>
> > > > On 06.02.2018, at 22:26, Phil B <<a href="mailto:pbpublist@gmail.com">pbpublist@gmail.com</a>> wrote:<br>
> > > ><br>
> > > > Tobias,<br>
> > > ><br>
> > > > I tried the 32-bit 20180206 build and got Error: primitiveSSLCreate failed. (I'd expect the same result on 64-bit but will give it a shot) This is using Cuis on Debian 9 stable. Assuming there are no image-side changes needed, this is probably be a shared library issue as I've seen this in the past when the VM is built on/for Ubuntu which was using a different SSL lib version than Debian stable. I'll try building a VM and report back the results (it will probably be late this week before I'll have time to get into it)<br>
> > ><br>
> > > I have recently changed the SqueakSSL plugin. As long as you have libssl:i386 installed, everything should work.<br>
> > > Can you give me the console output with logLeve:1 again?<br>
> > ><br>
> > > Best regards<br>
> > > -Tobias<br>
> > ><br>
> > > ><br>
> > > > Thanks,<br>
> > > > Phil<br>
> > > ><br>
> > > > On Feb 1, 2018 1:51 PM, "Tobias Pape" <<a href="mailto:Das.Linux@gmx.de">Das.Linux@gmx.de</a>> wrote:<br>
> > > > Hi Phil,<br>
> > > ><br>
> > > ><br>
> > > > > On 22.12.2017, at 21:29, Phil B <<a href="mailto:pbpublist@gmail.com">pbpublist@gmail.com</a>> wrote:<br>
> > > > ><br>
> > > > > Tobias,<br>
> > > > ><br>
> > > > > I saw there was a recent change to the VM related to this issue so I downloaded a recent build from bintray (specifically the cogspurlinuxht 32- and 64-bit builds dated 201712142058) and tried them out on Debian 9. Unfortunately, this didn't seem to change very much for me (the majority of pages I was getting -5 on, I still do)<br>
> > > > ><br>
> > > > > Here are a few sample urls I was having problems with:<br>
> > > > > <a href="https://blog.jessfraz.com/post/containers-zones-jails-vms" rel="noreferrer" target="_blank">https://blog.jessfraz.com/<wbr>post/containers-zones-jails-<wbr>vms</a><br>
> > > > > <a href="https://blog.keras.io/the-future-of-deep-learning.html" rel="noreferrer" target="_blank">https://blog.keras.io/the-<wbr>future-of-deep-learning.html</a><br>
> > > > > <a href="https://danluu.com/cpu-bugs" rel="noreferrer" target="_blank">https://danluu.com/cpu-bugs</a><br>
> > > > ><br>
> > > ><br>
> > > > Can you try with one of the latest vms?<br>
> > > ><br>
> > > > <a href="https://bintray.com/opensmalltalk/vm/cog/" rel="noreferrer" target="_blank">https://bintray.com/<wbr>opensmalltalk/vm/cog/</a><br>
> > > ><br>
> > > > Best regards<br>
> > > > -Tobias<br>
> > > ><br>
> > > > > Thanks,<br>
> > > > > Phil<br>
> > > > ><br>
> > > > > On Aug 29, 2017 5:49 AM, "Tobias Pape" <<a href="mailto:Das.Linux@gmx.de">Das.Linux@gmx.de</a>> wrote:<br>
> > > > > Hi Phil<br>
> > > > ><br>
> > > > > > On 24.08.2017, at 22:30, Phil B <<a href="mailto:pbpublist@gmail.com">pbpublist@gmail.com</a>> wrote:<br>
> > > > > ><br>
> > > > > > Also, if you ignore the name checking of the cert (i.e. just blindly accept it... dangerous to do with anything important) I've found that you'll often either get a connection timeout or -5 error from the plugin. Not sure if this is specifically related to SAN support (i.e. is there additional negotiation that needs to be done?) or if there are some newer https features that need to be added...<br>
> > > > ><br>
> > > > > can you tell me your platform and the plugin version you are using? I'd really like to get rid of those -5's :)<br>
> > > > ><br>
> > > > > Best regard<br>
> > > > > -tobias<br>
> > > > ><br>
> > > > ><br>
> > > > > ><br>
> > > > > > On Aug 23, 2017 2:37 AM, "Marcel Taeumel" <<a href="mailto:marcel.taeumel@hpi.de">marcel.taeumel@hpi.de</a>> wrote:<br>
> > > > > > Note that due to incomplete or missing SAN support on some platforms, using alternative names can still raise a SqueakSSLCertificateError:<br>
> > > > > ><br>
> > > > > > WebClient httpGet: '<a href="https://google.com" rel="noreferrer" target="_blank">https://google.com</a>'<br>
> > > > > ><br>
> > > > > > Best,<br>
> > > > > > Marcel<br>
> > > > > >> Am <a href="tel:22.08.2017%2022" value="+12208201722">22.08.2017 22</a>:14:38 schrieb Ron Teitelbaum <<a href="mailto:ron@usmedrec.com">ron@usmedrec.com</a>>:<br>
> > > > > >><br>
> > > > > >> SqueakSSL<br>
> > > > > >><br>
> > > > > >> WebClient httpGet: '<a href="https://www.google.com" rel="noreferrer" target="_blank">https://www.google.com</a>'<br>
> > > > > >><br>
> > > > > >> Ron<br>
> > > > > >><br>
> > > > > >> On Tue, Aug 22, 2017 at 3:09 PM, Eliot Miranda <<a href="mailto:eliot.miranda@gmail.com">eliot.miranda@gmail.com</a>> wrote:<br>
> > > > > >> Hi All,<br>
> > > > > >><br>
> > > > > >> what are people using for https support?<br>
> > > > > >><br>
> > > > > >> _,,,^..^,,,_<br>
> > > > > >> best, Eliot<br>
> > > > > >><br>
> > > > > >><br>
> > > > > >><br>
> > > > > >><br>
> > > > > ><br>
> > > > > ><br>
> > > > > ><br>
> > > > > ><br>
> > > > > ><br>
> > > > ><br>
> > > > ><br>
> > > > ><br>
> > > ><br>
> > ><br>
> ><br>
> ><br>
><br>
<br>
</blockquote></div></div>