| View previous topic :: View next topic |
| Author |
Message |
javeree
Guru
Joined: 29 Jan 2006
Posts: 453
|
 Posted: Mon Mar 10, 2014 9:41 am Post subject: [solved] problem compiling p11-kit |
 |
|
I try to compile the ebuild app-crypt/p11-kit-0.20.2 with use flag 'trust' (the error does not happen using
During configuration file, I get the following error:
checking for trust module paths... configure: error: could not find. Use --with-trust-paths=/path to set, or --without-trust-paths to disable.
I think this means it does not find the repository with trusted ssl keys, but I don't know what the default path is, nor how I should tell the ebuild what the path on my PC is (maybe some environment value needs to be set ?)
Any advise would be appreciated.
Last edited by javeree on Mon Mar 24, 2014 5:21 pm; edited 1 time in total |
|
| Back to top |
|
 |
VoidMage
Watchman
Joined: 14 Oct 2006
Posts: 6196
|
| Posted: Wed Mar 12, 2014 11:01 am Post subject: |
|
|
Next time pastebin whole build log or at least paste the whole error.
Anyway, it seems to be a genuine ebuild bug - a REQUIRED_USE case, likely; if 'trust' is set, 'asn1' needs to be set too.
...or perhaps just a dependency on app-misc/ca-certificates is required for 'trust'...:sweatdrop: |
|
| Back to top |
|
|
javeree
Guru
Joined: 29 Jan 2006
Posts: 453
|
| Posted: Sun Mar 16, 2014 7:47 am Post subject: |
|
|
ca-certificates is installed
| Quote: | equery l app-misc/ca-certificates
* Searching for ca-certificates in app-misc ...
[IP-] [ ] app-misc/ca-certificates-20130906:0
|
use flags asn1 and trust are both set
| Quote: | emerge -1av app-crypt/p11-kit
* IMPORTANT: 1 news items need reading for repository 'gentoo'.
* Use eselect news to read news items.
These are the packages that would be merged, in order:
Calculating dependencies... done!
[ebuild U ] app-crypt/p11-kit-0.20.2 [0.13] USE="asn1%* trust%* -debug" 0 kB
Total: 1 package (1 upgrade), Size of downloads: 0 kB |
The emerge log is now in pastebin: http://pastebin.com/6f4symcb
There is not much more contaxt there but the error itself  |
|
| Back to top |
|
|
VoidMage
Watchman
Joined: 14 Oct 2006
Posts: 6196
|
| Posted: Sun Mar 16, 2014 2:09 pm Post subject: |
|
|
There's something fishy here...
Does 'test -f /etc/ssl/certs/ca-certificates.crt; echo $?' print '0' ? |
|
| Back to top |
|
|
javeree
Guru
Joined: 29 Jan 2006
Posts: 453
|
| Posted: Sun Mar 16, 2014 5:52 pm Post subject: |
|
|
yes, it does.
Both run as root and as ordinary user. |
|
| Back to top |
|
|
javeree
Guru
Joined: 29 Jan 2006
Posts: 453
|
| Posted: Sun Mar 16, 2014 5:58 pm Post subject: |
|
|
ls - l /etc/ssl/certs/
gives
| Quote: |
-rw-r--r-- 1 root root 6677 17 feb 15:45 100001.pem
-rw-r--r-- 1 root root 6684 17 feb 17:28 100002.pem
lrwxrwxrwx 1 root root 10 19 feb 18:11 297a3dab.0 -> 100001.pem
lrwxrwxrwx 1 root root 10 19 feb 18:13 c8d31744.0 -> cacert.pem
-rw-r--r-- 1 root root 257135 25 feb 17:56 ca-certificates.crt
-rw-r--r-- 1 root root 2325 19 feb 18:13 cacert.pem
lrwxrwxrwx 1 root root 10 19 feb 18:11 d9b8fe1e.0 -> 100002.pem
|
and lots of symbolic links such as
| Quote: | lrwxrwxrwx 1 root root 107 25 feb 17:56 Verisign_Class_1_Public_Primary_Certification_Authority_-_G3.pem -> ../../../usr/share/ca-certificates/mozilla/Verisign_Class_1_Public_Primary_Certification_Authority_-_G3.crt
lrwxrwxrwx 1 root root 102 25 feb 17:56 Verisign_Class_1_Public_Primary_Certification_Authority.pem -> ../../../usr/share/ca-certificates/mozilla/Verisign_Class_1_Public_Primary_Certification_Authority.crt
lrwxrwxrwx 1 root root 107 25 feb 17:56 Verisign_Class_2_Public_Primary_Certification_Authority_-_G2.pem -> ../../../usr/share/ca-certificates/mozilla/Verisign_Class_2_Public_Primary_Certification_Authority_-_G2.crt
lrwxrwxrwx 1 root root 107 25 feb 17:56 Verisign_Class_2_Public_Primary_Certification_Authority_-_G3.pem -> ../../../usr/share/ca-certificates/mozilla/Verisign_Class_2_Public_Primary_Certification_Authority_-_G3.crt
lrwxrwxrwx 1 root root 107 25 feb 17:56 Verisign_Class_3_Public_Primary_Certification_Authority_-_G2.pem -> ../../../usr/share/ca-certificates/mozilla/Verisign_Class_3_Public_Primary_Certification_Authority_-_G2.crt
lrwxrwxrwx 1 root root 107 25 feb 17:56 Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.pem -> ../../../usr/share/ca-certificates/mozilla/Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.crt
lrwxrwxrwx 1 root root 107 25 feb 17:56 VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.pem -> ../../../usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.crt
lrwxrwxrwx 1 root root 107 25 feb 17:56 VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.pem -> ../../../usr/share/ca-certificates/mozilla/VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.crt
|
|
|
| Back to top |
|
|
javeree
Guru
Joined: 29 Jan 2006
Posts: 453
|
| Posted: Thu Mar 20, 2014 12:30 pm Post subject: ebuild configure fails, manual configure succeeds |
|
|
This is even getting stranger. I did the following:
ebuild /mnt/portage/portage/app-crypt/p11-kit/p11-kit-0.20.2.ebuild prepare
ebuild /mnt/portage/portage/app-crypt/p11-kit/p11-kit-0.20.2.ebuild configure
=> the configure run starts with
| Quote: | >>> Checking p11-kit-0.20.2.tar.gz's mtime...
>>> WORKDIR is up-to-date, keeping...
* checking ebuild checksums  ... [ ok ]
* checking auxfile checksums ... [ ok ]
* checking miscfile checksums ... [ ok ]
>>> It appears that 'pretend' has already executed for 'p11-kit-0.20.2'; skipping.
>>> Remove '/var/tmp/portage/app-crypt/p11-kit-0.20.2/.pretended' to force pretend.
>>> It appears that 'setup' has already executed for 'p11-kit-0.20.2'; skipping.
>>> Remove '/var/tmp/portage/app-crypt/p11-kit-0.20.2/.setuped' to force setup.
>>> It appears that 'unpack' has already executed for 'p11-kit-0.20.2'; skipping.
>>> Remove '/var/tmp/portage/app-crypt/p11-kit-0.20.2/.unpacked' to force unpack.
>>> It appears that 'prepare' has already executed for 'p11-kit-0.20.2'; skipping.
>>> Remove '/var/tmp/portage/app-crypt/p11-kit-0.20.2/.prepared' to force prepare.
>>> Configuring source in /var/tmp/portage/app-crypt/p11-kit-0.20.2/work/p11-kit-0.20.2 ...
* econf: updating p11-kit-0.20.2/build/aux/config.sub with /usr/share/gnuconfig/config.sub
* econf: updating p11-kit-0.20.2/build/aux/config.guess with /usr/share/gnuconfig/config.guess
./configure --prefix=/usr --build=i686-pc-linux-gnu --host=i686-pc-linux-gnu --mandir=/usr/share/man --infodir=/usr/share/info --datadir=/usr/share --sysconfdir=/etc --localstatedir=/var/lib --disable-silent-rules --disable-dependency-tracking --enable-trust-module --disable-debug --with-libtasn1 |
and fails with
| Quote: | | checking for trust module paths... configure: error: could not find. Use --with-trust-paths=/path to set, or --without-trust-paths to disable |
then I do
| Quote: | cd /var/tmp/portage/app-crypt/p11-kit-0.20.2/work/p11-kit-0.20.2
# next copy and paste the command from the output from ebuild ... configure
./configure --prefix=/usr --build=i686-pc-linux-gnu --host=i686-pc-linux-gnu --mandir=/usr/share/man --infodir=/usr/share/info --datadir=/usr/share --sysconfdir=/etc --localstatedir=/var/lib --disable-silent-rules --disable-dependency-tracking --enable-trust-module --disable-debug --with-libtasn1 |
This command succeeds !!
I also sent the output from both the ebuild configure and the ./configure to log files and diffed them:
diff ebuildconfigure.log manualconfigure.log
| Quote: | 1,17d0
< >>> Checking p11-kit-0.20.2.tar.gz's mtime...
< >>> WORKDIR is up-to-date, keeping...
< * checking ebuild checksums ... [ ok ]
< * checking auxfile checksums ... [ ok ]
< * checking miscfile checksums ... [ ok ]
< >>> It appears that 'pretend' has already executed for 'p11-kit-0.20.2'; skipping.
< >>> Remove '/var/tmp/portage/app-crypt/p11-kit-0.20.2/.pretended' to force pretend.
< >>> It appears that 'setup' has already executed for 'p11-kit-0.20.2'; skipping.
< >>> Remove '/var/tmp/portage/app-crypt/p11-kit-0.20.2/.setuped' to force setup.
< >>> It appears that 'unpack' has already executed for 'p11-kit-0.20.2'; skipping.
< >>> Remove '/var/tmp/portage/app-crypt/p11-kit-0.20.2/.unpacked' to force unpack.
< >>> It appears that 'prepare' has already executed for 'p11-kit-0.20.2'; skipping.
< >>> Remove '/var/tmp/portage/app-crypt/p11-kit-0.20.2/.prepared' to force prepare.
< >>> Configuring source in /var/tmp/portage/app-crypt/p11-kit-0.20.2/work/p11-kit-0.20.2 ...
< * econf: updating p11-kit-0.20.2/build/aux/config.sub with /usr/share/gnuconfig/config.sub
< * econf: updating p11-kit-0.20.2/build/aux/config.guess with /usr/share/gnuconfig/config.guess
< ./configure --prefix=/usr --build=i686-pc-linux-gnu --host=i686-pc-linux-gnu --mandir=/usr/share/ma n --infodir=/usr/share/info --datadir=/usr/share --sysconfdir=/etc --localstatedir=/var/lib --disable -silent-rules --disable-dependency-tracking --enable-trust-module --disable-debug --with-libtasn1
164c147,201
< checking for trust module paths... configure: error: could not find. Use --with-trust-paths=/path t o set, or --without-trust-paths to disable
---
> checking for trust module paths... /etc/ssl/certs/ca-certificates.crt
> checking for gtkdoc-check... no
> checking for gtkdoc-rebase... /usr/bin/gtkdoc-rebase
> checking for gtkdoc-mkpdf... no
> checking for gtkdoc-scan... no
> checking for xsltproc... /usr/bin/xsltproc
> checking whether to build documentation... no
> checking for debug mode... no (no debug output, NDEBUG)
> checking for more warnings... checking whether gcc understands -Wmissing-include-dirs... yes
> checking whether gcc understands -Wundef... yes
> checking build strict... no
> checking whether to build with gcov testing... no
> checking that generated files are newer than configure... done
> checking that generated files are newer than configure... done
> configure: creating ./config.status
> config.status: creating Makefile
> config.status: creating common/Makefile
> config.status: creating common/tests/Makefile
> config.status: creating doc/Makefile
> config.status: creating doc/manual/Makefile
> config.status: creating po/Makefile.in
> config.status: creating p11-kit/Makefile
> config.status: creating p11-kit/tests/Makefile
> config.status: creating p11-kit/p11-kit-1.pc
> config.status: creating p11-kit/pkcs11.conf.example
> config.status: creating trust/Makefile
> config.status: creating trust/trust-extract-compat
> config.status: creating trust/tests/Makefile
> config.status: creating trust/tests/test-extract
> config.status: creating config.h
> config.status: executing depfiles commands
> config.status: executing libtool commands
> config.status: executing po-directories commands
> config.status: creating po/POTFILES
> config.status: creating po/Makefile
> configure: build options:
>
> Host: i686-pc-linux-gnu
> Debug build: no (no debug output, NDEBUG)
> Strict build: no
> Build documentation: no (no manual or reference)
> System global config: /etc/pkcs11/pkcs11.conf
> System module config directory: /etc/pkcs11/modules
> Package module config directory: ${pkgdatadir}/modules
> User global config: ~/.config/pkcs11/pkcs11.conf
> User module config directory: ~/.config/pkcs11/modules
> Load relative module paths from: ${exec_prefix}/lib/pkcs11
>
> With libtasn1 dependency: yes
> With libffi: yes
> With hash implementation: internal
>
> Build trust module: yes
> Trust module paths: /etc/ssl/certs/ca-certificates.crt
>
166,183d202
< !!! Please attach the following file when seeking support:
< !!! /var/tmp/portage/app-crypt/p11-kit-0.20.2/work/p11-kit-0.20.2/config.log
< * ERROR: app-crypt/p11-kit-0.20.2::gentoo failed (configure phase):
< * econf failed
< *
< * Call stack:
< * ebuild.sh, line 93: Called src_configure
< * environment, line 1822: Called econf '--enable-trust-module' '--disable-debug' '--with-l ibtasn1'
< * phase-helpers.sh, line 584: Called die
< * The specific snippet of code:
< * die "econf failed"
< *
< * If you need support, post the output of `emerge --info '=app-crypt/p11-kit-0.20.2::gentoo'`,
< * the complete build log and the output of `emerge -pqv '=app-crypt/p11-kit-0.20.2::gentoo'`.
< * The complete build log is located at '/var/tmp/portage/app-crypt/p11-kit-0.20.2/temp/build.log'.
< * The ebuild environment file is located at '/var/tmp/portage/app-crypt/p11-kit-0.20.2/temp/enviro nment'.
< * Working directory: '/var/tmp/portage/app-crypt/p11-kit-0.20.2/work/p11-kit-0.20.2'
< * S: '/var/tmp/portage/app-crypt/p11-kit-0.20.2/work/p11-kit-0.20.2' |
I have no idea what the difference between doing the ebuild configure and the manual configure could be |
|
| Back to top |
|
|
javeree
Guru
Joined: 29 Jan 2006
Posts: 453
|
| Posted: Thu Mar 20, 2014 12:34 pm Post subject: |
|
|
I think you might want to see emerge --info:
| Quote: | Portage 2.2.8-r1 (default/linux/x86/13.0/desktop, gcc-4.7.3, glibc-2.17, 3.10.7-gentoo-r1 i686)
=================================================================
System uname: Linux-3.10.7-gentoo-r1-i686-Intel-R-_Atom-TM-_CPU_N280_@_1.66GHz-with-gentoo-2.2
KiB Mem: 2005912 total, 505584 free
KiB Swap: 0 total, 0 free
Timestamp of tree: Thu, 20 Mar 2014 11:30:01 +0000
ld GNU ld (GNU Binutils) 2.23.2
distcc 3.1 i686-pc-linux-gnu [enabled]
app-shells/bash: 4.2_p45
dev-lang/python: 2.7.5-r3, 3.2.5-r3, 3.3.3
dev-util/cmake: 2.8.11.2
dev-util/pkgconfig: 0.28
sys-apps/baselayout: 2.2
sys-apps/openrc: 0.12.4
sys-apps/sandbox: 2.6-r1
sys-devel/autoconf: 2.13, 2.69
sys-devel/automake: 1.11.6, 1.12.6, 1.13.4
sys-devel/binutils: 2.23.2
sys-devel/gcc: 4.7.3-r1
sys-devel/gcc-config: 1.7.3
sys-devel/libtool: 2.4.2
sys-devel/make: 3.82-r4
sys-kernel/linux-headers: 3.9 (virtual/os-headers)
sys-libs/glibc: 2.17
Repositories: gentoo portage-overlay-for-all-PCs
ACCEPT_KEYWORDS="x86"
ACCEPT_LICENSE="* -@EULA"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-march=atom -O2 -pipe -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt /usr/share/xsessions"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.5/ext-active/ /etc/php/cgi-php5.5/ext-active/ /etc/php/cli-php5.5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CPPFLAGS=" -D_FILE_OFFSET_BITS=64"
CXXFLAGS="-march=atom -O2 -pipe -fomit-frame-pointer"
DISTDIR="/mnt/portage/distfiles"
EMERGE_DEFAULT_OPTS="--keep-going"
FCFLAGS="-O2 -march=i686 -pipe"
FEATURES="assume-digests binpkg-logs config-protect-if-modified distcc distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch parallel-install preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync"
FFLAGS="-O2 -march=i686 -pipe"
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LANG="nl_BE.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu -Wl,--sort-common"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/mnt/portage/portage"
PORTDIR_OVERLAY="/mnt/portage/overlay"
USE="X a52 aac acpi alsa avahi bash-completion berkdb bluetooth branding bzip2 cairo caps cdda cdr classic cli consolekit cracklib crypt cups cxx dbus dri dts dv dvd dvdr emboss encode exif fam fat ffmpeg firefox flac fortran gallium gdbm gif glibc-omitfp gnutls gtk gtk3 iconv icu id3tag inotify ipod jpeg lame lcms libnotify lirc mad matroska mmap mmx mmxext mng modules moznopango mp3 mp4 mpeg mtp ncurses nfsv4 nls nokia nptl ntfs ogg opengl openmp pam pango pcre pdf png policykit ppds pulseaudio qt3support qt4 readline rtmp samba scanner session smp sndfile spell sse sse2 sse3 ssl ssse3 startup-notification svg syslog system-sqlite systray tcpd threads thumbnail tiff truetype udev udisks unicode upower usb vaapi vim-syntax vorbis wma wxwidgets x264 x86 xcb xml xv xvid zlib" ABI_X86="32" ALSA_CARDS="intel8x0" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="canon ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="evdev" KERNEL="linux" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="en en_US en_UK en_GB nl" LIRC_DEVICES="atiusb" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_3" RUBY_TARGETS="ruby20" SANE_BACKENDS="mustek_pp" USERLAND="GNU" VIDEO_CARDS="vesa intel" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset: CTARGET, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, SYNC, USE_PYTHON
|
|
|
| Back to top |
|
|
javeree
Guru
Joined: 29 Jan 2006
Posts: 453
|
| Posted: Mon Mar 24, 2014 5:20 pm Post subject: |
|
|
I have found the cause of the issue:
ls -ld /etc/ssl
was set to
drwxr-xr-- 5 root root 4096 18 feb 17:41 /etc/ssl
due to this, test -f /etc/ssl/certs/ca-certificates.crt, when run as portage fails.
chown o+x /etc/ssl
resolved the issue. |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
Portage & Programming
