On 28/04/11 16:25, Amos Jeffries wrote:
> On 28/04/11 06:58, Ming Fu wrote:
>> Hi,
>>
>> I was trying to investigate if the sslBump problem recently reported
>> by Will Metcalf is a result of bug 1991 that SSL does not work well
>> with FreeBSD kqueue.
>>
>
> Hmm, interesting idea. That might be involved.
> We have had several independent mentions about the 3.2.0.7 and 3.1.12.1
> failure of SslBump. I was thinking it was probably due to the I/O
> handling changes we made to CONNECT in those releases.
> I am awaiting some kind of fix from someone interested.
>
> For the record the developers working on and with SslBump do not read
> this list so everybody who is reporting beta code bugs here (instead of
> squid-dev mailing list where such reports are supposed to go) is not
> getting anything close to expert attention.
>
>> So I tried to test the same setting on a Linux. The system is a
>> RedHat Fedora 14. Gcc version 4.5.1. 20100924, and OpenSSL 1.0.0d-fips
>> 8 Feb 2011
>>
>> ./configure '--disable-loadable-modules' '--disable-esi'
>> '--enable-icap_client' '--enable-ssl' '--enable-auth'
>> '--enable-ssl-crtd' --enable-ltdl-convenience
>>
>> However I was blocked by the compile error:
>>
>> make[3]: Entering directory `/home/fming/squid-3.2.0.7/src/ssl'
>> g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib -I../../src
>> -I../../include -Wall -Wpointer-arith -Wwrite-strings -Wcomments
>> -Werror -pipe -D_REENTRANT -g -O2 -MT ssl_crtd.o -MD -MP -MF
>> .deps/ssl_crtd.Tpo -c -o ssl_crtd.o ssl_crtd.cc
>> In file included from ssl_crtd.cc:9:0:
>> ../../src/ssl/certificate_db.h: In static member function 'static long
>> unsigned int Ssl::CertificateDb::index_serial_hash_LHASH_HASH(const
>> void*)':
>> ../../src/ssl/certificate_db.h:113:12: error: duplicate 'const'
>> ../../src/ssl/certificate_db.h:113:12: error: invalid conversion from
>> 'const void*' to 'const char***'
>> ../../src/ssl/certificate_db.h:113:12: error: 'index_serial_hash_hash'
>> was not declared in this scope
>
> Interesting. This is the compiler complaining about the OpenSSL header
> definition of IMPLEMENT_LHASH_HASH_FN.
>
> I'm not sure where these "char***" or double const are coming from. The
> Squid definition is char** and the OpenSSL (0.9.8o) macro I can see does
> not add any reference or pointer or const to the parameters.
>
For the record and anyone else hitting this:
http://bugs.squid-cache.org/show_bug.cgi?id=3232
Amos
-- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.12 Beta testers wanted for 3.2.0.7 and 3.1.12.1Received on Fri May 27 2011 - 11:20:31 MDT
This archive was generated by hypermail 2.2.0 : Fri May 27 2011 - 12:00:03 MDT