From criley at ERADIMAGEMEDICAL.COM Thu Apr 7 23:41:12 2005 From: criley at ERADIMAGEMEDICAL.COM (Charles Riley) Date: Thu, 7 Apr 2005 23:41:12 +0200 Subject: [PYTHON-CRYPTO] Problem building m2crypto on RHEL 3 Message-ID: Hi, I'm having a problem building m2crypto on RHEL 3. I think I have all the prerequisite stuff installed, as described on the m2crypto page: openssl-devel-0.9.7a-33.12 openssl-0.9.7a-33.12 python 2.3.5 SWIG-1.3.21 Any help would be greatly appreciated. I'd like to access zope via SSL, and running a webserver in front of zope just seems like such an ugly solution. Build output follows: [root at criley m2crypto-0.13]# python2.3 setup.py build running build running build_py running build_ext building '__m2crypto' extension swig -python -ISWIG -o SWIG/_m2crypto.c SWIG/_m2crypto.i gcc -pthread -fno-strict-aliasing -DNDEBUG -g -O3 -Wall -Wstrict- prototypes -fPIC -I/home/zope/m2crypto-0.13/SWIG -I/usr/include - I/usr/include/python2.3 -c SWIG/_m2crypto.c -o build/temp.linux-i686- 2.3/SWIG/_m2crypto.o -DTHREADING In file included from /usr/include/openssl/ssl.h:179, from SWIG/_m2crypto.c:863: /usr/include/openssl/kssl.h:72:18: krb5.h: No such file or directory In file included from /usr/include/openssl/ssl.h:179, from SWIG/_m2crypto.c:863: /usr/include/openssl/kssl.h:134: syntax error before "krb5_enctype" /usr/include/openssl/kssl.h:136: syntax error before '*' token /usr/include/openssl/kssl.h:137: syntax error before '}' token /usr/include/openssl/kssl.h:149: syntax error before "kssl_ctx_setstring" /usr/include/openssl/kssl.h:149: syntax error before '*' token /usr/include/openssl/kssl.h:150: syntax error before '*' token /usr/include/openssl/kssl.h:151: syntax error before '*' token /usr/include/openssl/kssl.h:151: syntax error before '*' token /usr/include/openssl/kssl.h:152: syntax error before '*' token /usr/include/openssl/kssl.h:153: syntax error before "kssl_ctx_setprinc" /usr/include/openssl/kssl.h:153: syntax error before '*' token /usr/include/openssl/kssl.h:155: syntax error before "kssl_cget_tkt" /usr/include/openssl/kssl.h:155: syntax error before '*' token /usr/include/openssl/kssl.h:157: syntax error before "kssl_sget_tkt" /usr/include/openssl/kssl.h:157: syntax error before '*' token /usr/include/openssl/kssl.h:159: syntax error before "kssl_ctx_setkey" /usr/include/openssl/kssl.h:159: syntax error before '*' token /usr/include/openssl/kssl.h:161: syntax error before "context" /usr/include/openssl/kssl.h:162: syntax error before "kssl_build_principal_2" /usr/include/openssl/kssl.h:162: syntax error before "context" /usr/include/openssl/kssl.h:165: syntax error before "kssl_validate_times" /usr/include/openssl/kssl.h:165: syntax error before "atime" /usr/include/openssl/kssl.h:167: syntax error before "kssl_check_authent" /usr/include/openssl/kssl.h:167: syntax error before '*' token /usr/include/openssl/kssl.h:169: syntax error before "enctype" In file included from SWIG/_m2crypto.c:863: /usr/include/openssl/ssl.h:909: syntax error before "KSSL_CTX" /usr/include/openssl/ssl.h:931: syntax error before '}' token SWIG/_m2crypto.c: In function `sign_final': SWIG/_m2crypto.c:1925: warning: unused variable `ret' SWIG/_m2crypto.c: In function `ssl_session_read_pem': SWIG/_m2crypto.c:3443: warning: function declaration isn't a prototype SWIG/_m2crypto.c: In function `ssl_session_write_pem': SWIG/_m2crypto.c:3447: warning: function declaration isn't a prototype SWIG/_m2crypto.c: At top level: SWIG/_m2crypto.c:3497: warning: function declaration isn't a prototype SWIG/_m2crypto.c:4450: warning: function declaration isn't a prototype SWIG/_m2crypto.c:4898: warning: function declaration isn't a prototype SWIG/_m2crypto.c:5660: warning: function declaration isn't a prototype SWIG/_m2crypto.c:6481: warning: function declaration isn't a prototype SWIG/_m2crypto.c:6903: warning: function declaration isn't a prototype SWIG/_m2crypto.c:7638: warning: function declaration isn't a prototype SWIG/_m2crypto.c:9327: warning: function declaration isn't a prototype SWIG/_m2crypto.c:11392: warning: function declaration isn't a prototype SWIG/_m2crypto.c:12497: warning: function declaration isn't a prototype SWIG/_m2crypto.c:12518: warning: function declaration isn't a prototype SWIG/_m2crypto.c:13142: warning: function declaration isn't a prototype SWIG/_m2crypto.c:734: warning: `RCS_id' defined but not used error: command 'gcc' failed with exit status 1 From gvanrossum at GMAIL.COM Fri Apr 8 00:00:42 2005 From: gvanrossum at GMAIL.COM (Guido van Rossum) Date: Thu, 7 Apr 2005 14:00:42 -0800 Subject: [PYTHON-CRYPTO] Problem building m2crypto on RHEL 3 In-Reply-To: References: Message-ID: I had similar issues (but I'm not sure if they are the same). I found that RHE 3 comes with a different version of openssl (0.9.6?) pre-installed, and compiling with it gave compilation errors. I installed openssl 0.9.7 from source in /usr/local/ssl, so I had to edit the lines in M2crypto's setup.py that point to /usr/include and /usr/lib to /usr/local/ssl/include and /usr/local/ssl/lib. Do you know where the openssl RPMs you mention below install their stuff? On Apr 7, 2005 1:41 PM, Charles Riley wrote: > Hi, > > I'm having a problem building m2crypto on RHEL 3. I think I have all the > prerequisite stuff installed, as described on the m2crypto page: > > openssl-devel-0.9.7a-33.12 > openssl-0.9.7a-33.12 > python 2.3.5 > SWIG-1.3.21 > > Any help would be greatly appreciated. I'd like to access zope via SSL, > and running a webserver in front of zope just seems like such an ugly > solution. > > Build output follows: > > [root at criley m2crypto-0.13]# python2.3 setup.py build > running build > running build_py > running build_ext > building '__m2crypto' extension > swig -python -ISWIG -o SWIG/_m2crypto.c SWIG/_m2crypto.i > gcc -pthread -fno-strict-aliasing -DNDEBUG -g -O3 -Wall -Wstrict- > prototypes -fPIC -I/home/zope/m2crypto-0.13/SWIG -I/usr/include - > I/usr/include/python2.3 -c SWIG/_m2crypto.c -o build/temp.linux-i686- > 2.3/SWIG/_m2crypto.o -DTHREADING > In file included from /usr/include/openssl/ssl.h:179, > from SWIG/_m2crypto.c:863: > /usr/include/openssl/kssl.h:72:18: krb5.h: No such file or directory > In file included from /usr/include/openssl/ssl.h:179, > from SWIG/_m2crypto.c:863: > /usr/include/openssl/kssl.h:134: syntax error before "krb5_enctype" > /usr/include/openssl/kssl.h:136: syntax error before '*' token > /usr/include/openssl/kssl.h:137: syntax error before '}' token > /usr/include/openssl/kssl.h:149: syntax error before "kssl_ctx_setstring" > /usr/include/openssl/kssl.h:149: syntax error before '*' token > /usr/include/openssl/kssl.h:150: syntax error before '*' token > /usr/include/openssl/kssl.h:151: syntax error before '*' token > /usr/include/openssl/kssl.h:151: syntax error before '*' token > /usr/include/openssl/kssl.h:152: syntax error before '*' token > /usr/include/openssl/kssl.h:153: syntax error before "kssl_ctx_setprinc" > /usr/include/openssl/kssl.h:153: syntax error before '*' token > /usr/include/openssl/kssl.h:155: syntax error before "kssl_cget_tkt" > /usr/include/openssl/kssl.h:155: syntax error before '*' token > /usr/include/openssl/kssl.h:157: syntax error before "kssl_sget_tkt" > /usr/include/openssl/kssl.h:157: syntax error before '*' token > /usr/include/openssl/kssl.h:159: syntax error before "kssl_ctx_setkey" > /usr/include/openssl/kssl.h:159: syntax error before '*' token > /usr/include/openssl/kssl.h:161: syntax error before "context" > /usr/include/openssl/kssl.h:162: syntax error > before "kssl_build_principal_2" > /usr/include/openssl/kssl.h:162: syntax error before "context" > /usr/include/openssl/kssl.h:165: syntax error before "kssl_validate_times" > /usr/include/openssl/kssl.h:165: syntax error before "atime" > /usr/include/openssl/kssl.h:167: syntax error before "kssl_check_authent" > /usr/include/openssl/kssl.h:167: syntax error before '*' token > /usr/include/openssl/kssl.h:169: syntax error before "enctype" > In file included from SWIG/_m2crypto.c:863: > /usr/include/openssl/ssl.h:909: syntax error before "KSSL_CTX" > /usr/include/openssl/ssl.h:931: syntax error before '}' token > SWIG/_m2crypto.c: In function `sign_final': > SWIG/_m2crypto.c:1925: warning: unused variable `ret' > SWIG/_m2crypto.c: In function `ssl_session_read_pem': > SWIG/_m2crypto.c:3443: warning: function declaration isn't a prototype > SWIG/_m2crypto.c: In function `ssl_session_write_pem': > SWIG/_m2crypto.c:3447: warning: function declaration isn't a prototype > SWIG/_m2crypto.c: At top level: > SWIG/_m2crypto.c:3497: warning: function declaration isn't a prototype > SWIG/_m2crypto.c:4450: warning: function declaration isn't a prototype > SWIG/_m2crypto.c:4898: warning: function declaration isn't a prototype > SWIG/_m2crypto.c:5660: warning: function declaration isn't a prototype > SWIG/_m2crypto.c:6481: warning: function declaration isn't a prototype > SWIG/_m2crypto.c:6903: warning: function declaration isn't a prototype > SWIG/_m2crypto.c:7638: warning: function declaration isn't a prototype > SWIG/_m2crypto.c:9327: warning: function declaration isn't a prototype > SWIG/_m2crypto.c:11392: warning: function declaration isn't a prototype > SWIG/_m2crypto.c:12497: warning: function declaration isn't a prototype > SWIG/_m2crypto.c:12518: warning: function declaration isn't a prototype > SWIG/_m2crypto.c:13142: warning: function declaration isn't a prototype > SWIG/_m2crypto.c:734: warning: `RCS_id' defined but not used > error: command 'gcc' failed with exit status 1 > -- --Guido van Rossum (home page: http://www.python.org/~guido/) From criley at ERADIMAGEMEDICAL.COM Fri Apr 8 16:02:35 2005 From: criley at ERADIMAGEMEDICAL.COM (Charles Riley) Date: Fri, 8 Apr 2005 10:02:35 -0400 Subject: [PYTHON-CRYPTO] Problem building m2crypto on RHEL 3 In-Reply-To: Message-ID: <001401c53c43$9de19810$7a19a8c0@attilla> Thanks for the tip! I thought for sure the paths in setup.py would be the problem, but alas no luck =( As it turns out, there are actually two versions of openssl installed on this machine: openssl096b-0.9.6b-16 openssl-perl-0.9.7a-33.12 openssl-0.9.7a-33.12 pyOpenSSL-0.5.1-8 openssl-devel-0.9.7a-33.12 The older version's libs are named differently though: [root at criley m2crypto-0.13]# rpm -ql openssl096b-0.9.6b-16 /lib/libcrypto.so.0.9.6b /lib/libssl.so.0.9.6b versus (in the 0.9.7a package) /usr/lib/libcrypto.a /usr/lib/libcrypto.so /usr/lib/libssl.a /usr/lib/libssl.so Given that it's been renamed, the older lib shouldn't cause a conflict should it? openssl-devel-0.9.7a-33.12 is the only package that contains headers, and it puts it's stuff in /usr/lib and /usr/include/openssl, which setup.py seems to find (but just doesn't like). Maybe I will try backing out the rpm and installing openssl from source as you did. Charles > -----Original Message----- > From: Guido van Rossum [mailto:gvanrossum at gmail.com] > Sent: Thursday, April 07, 2005 6:01 PM > To: Charles Riley > Cc: PYTHON-CRYPTO at nic.surfnet.nl > Subject: Re: Problem building m2crypto on RHEL 3 > > > I had similar issues (but I'm not sure if they are the same). > I found that RHE 3 comes with a different version of openssl > (0.9.6?) pre-installed, and compiling with it gave compilation errors. > > I installed openssl 0.9.7 from source in /usr/local/ssl, so I > had to edit the lines in M2crypto's setup.py that point to > /usr/include and /usr/lib to /usr/local/ssl/include and > /usr/local/ssl/lib. Do you know where the openssl RPMs you > mention below install their stuff? > > On Apr 7, 2005 1:41 PM, Charles Riley > wrote: > > Hi, > > > > I'm having a problem building m2crypto on RHEL 3. I think > I have all > > the prerequisite stuff installed, as described on the m2crypto page: > > > > openssl-devel-0.9.7a-33.12 > > openssl-0.9.7a-33.12 > > python 2.3.5 > > SWIG-1.3.21 > > > > Any help would be greatly appreciated. I'd like to access zope via > > SSL, and running a webserver in front of zope just seems > like such an > > ugly solution. > > > > Build output follows: > > > > [root at criley m2crypto-0.13]# python2.3 setup.py build > > running build > > running build_py > > running build_ext > > building '__m2crypto' extension > > swig -python -ISWIG -o SWIG/_m2crypto.c SWIG/_m2crypto.i > > gcc -pthread -fno-strict-aliasing -DNDEBUG -g -O3 -Wall -Wstrict- > > prototypes -fPIC -I/home/zope/m2crypto-0.13/SWIG -I/usr/include - > > I/usr/include/python2.3 -c SWIG/_m2crypto.c -o > build/temp.linux-i686- > > 2.3/SWIG/_m2crypto.o -DTHREADING In file included from > > /usr/include/openssl/ssl.h:179, > > from SWIG/_m2crypto.c:863: > > /usr/include/openssl/kssl.h:72:18: krb5.h: No such file or > directory > > In file included from /usr/include/openssl/ssl.h:179, > > from SWIG/_m2crypto.c:863: > > /usr/include/openssl/kssl.h:134: syntax error before "krb5_enctype" > > /usr/include/openssl/kssl.h:136: syntax error before '*' token > > /usr/include/openssl/kssl.h:137: syntax error before '}' token > > /usr/include/openssl/kssl.h:149: syntax error before > > "kssl_ctx_setstring" > > /usr/include/openssl/kssl.h:149: syntax error before '*' token > > /usr/include/openssl/kssl.h:150: syntax error before '*' token > > /usr/include/openssl/kssl.h:151: syntax error before '*' token > > /usr/include/openssl/kssl.h:151: syntax error before '*' token > > /usr/include/openssl/kssl.h:152: syntax error before '*' token > > /usr/include/openssl/kssl.h:153: syntax error before > "kssl_ctx_setprinc" > > /usr/include/openssl/kssl.h:153: syntax error before '*' token > > /usr/include/openssl/kssl.h:155: syntax error before "kssl_cget_tkt" > > /usr/include/openssl/kssl.h:155: syntax error before '*' token > > /usr/include/openssl/kssl.h:157: syntax error before "kssl_sget_tkt" > > /usr/include/openssl/kssl.h:157: syntax error before '*' token > > /usr/include/openssl/kssl.h:159: syntax error before > "kssl_ctx_setkey" > > /usr/include/openssl/kssl.h:159: syntax error before '*' token > > /usr/include/openssl/kssl.h:161: syntax error before "context" > > /usr/include/openssl/kssl.h:162: syntax error > > before "kssl_build_principal_2" > > /usr/include/openssl/kssl.h:162: syntax error before "context" > > /usr/include/openssl/kssl.h:165: syntax error before > "kssl_validate_times" > > /usr/include/openssl/kssl.h:165: syntax error before "atime" > > /usr/include/openssl/kssl.h:167: syntax error before > "kssl_check_authent" > > /usr/include/openssl/kssl.h:167: syntax error before '*' token > > /usr/include/openssl/kssl.h:169: syntax error before "enctype" > > In file included from SWIG/_m2crypto.c:863: > > /usr/include/openssl/ssl.h:909: syntax error before "KSSL_CTX" > > /usr/include/openssl/ssl.h:931: syntax error before '}' token > > SWIG/_m2crypto.c: In function `sign_final': > > SWIG/_m2crypto.c:1925: warning: unused variable `ret' > > SWIG/_m2crypto.c: In function `ssl_session_read_pem': > > SWIG/_m2crypto.c:3443: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c: In function `ssl_session_write_pem': > > SWIG/_m2crypto.c:3447: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c: At top level: > > SWIG/_m2crypto.c:3497: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:4450: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:4898: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:5660: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:6481: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:6903: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:7638: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:9327: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:11392: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:12497: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:12518: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:13142: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:734: warning: `RCS_id' defined but not used > > error: command 'gcc' failed with exit status 1 > > > > > -- > --Guido van Rossum (home page: http://www.python.org/~guido/) > From criley at ERADIMAGEMEDICAL.COM Mon Apr 11 16:01:42 2005 From: criley at ERADIMAGEMEDICAL.COM (Charles Riley) Date: Mon, 11 Apr 2005 10:01:42 -0400 Subject: [PYTHON-CRYPTO] Problem building m2crypto on RHEL 3 In-Reply-To: Message-ID: <002e01c53e9e$fd38cc40$6619a8c0@attilla> Hello, Thanks for your help. I installed openssl from source into /usr/local, changed setup.py to point to the correct places, and it resolved my problem. It appears that contrary to the install instructions, m2crypto does not like openssl-0.9.7a-33.12 (at least as installed on a stock RHEL build.) Thanks again, Charles > -----Original Message----- > From: generic crypto class API for Python > [mailto:PYTHON-CRYPTO at NIC.SURFNET.NL] On Behalf Of Guido van Rossum > Sent: Thursday, April 07, 2005 6:01 PM > To: PYTHON-CRYPTO at NIC.SURFNET.NL > Subject: Re: Problem building m2crypto on RHEL 3 > > > I had similar issues (but I'm not sure if they are the same). > I found that RHE 3 comes with a different version of openssl > (0.9.6?) pre-installed, and compiling with it gave compilation errors. > > I installed openssl 0.9.7 from source in /usr/local/ssl, so I > had to edit the lines in M2crypto's setup.py that point to > /usr/include and /usr/lib to /usr/local/ssl/include and > /usr/local/ssl/lib. Do you know where the openssl RPMs you > mention below install their stuff? > > On Apr 7, 2005 1:41 PM, Charles Riley > wrote: > > Hi, > > > > I'm having a problem building m2crypto on RHEL 3. I think > I have all > > the prerequisite stuff installed, as described on the m2crypto page: > > > > openssl-devel-0.9.7a-33.12 > > openssl-0.9.7a-33.12 > > python 2.3.5 > > SWIG-1.3.21 > > > > Any help would be greatly appreciated. I'd like to access zope via > > SSL, and running a webserver in front of zope just seems > like such an > > ugly solution. > > > > Build output follows: > > > > [root at criley m2crypto-0.13]# python2.3 setup.py build > > running build > > running build_py > > running build_ext > > building '__m2crypto' extension > > swig -python -ISWIG -o SWIG/_m2crypto.c SWIG/_m2crypto.i > > gcc -pthread -fno-strict-aliasing -DNDEBUG -g -O3 -Wall -Wstrict- > > prototypes -fPIC -I/home/zope/m2crypto-0.13/SWIG -I/usr/include - > > I/usr/include/python2.3 -c SWIG/_m2crypto.c -o > build/temp.linux-i686- > > 2.3/SWIG/_m2crypto.o -DTHREADING In file included from > > /usr/include/openssl/ssl.h:179, > > from SWIG/_m2crypto.c:863: > > /usr/include/openssl/kssl.h:72:18: krb5.h: No such file or > directory > > In file included from /usr/include/openssl/ssl.h:179, > > from SWIG/_m2crypto.c:863: > > /usr/include/openssl/kssl.h:134: syntax error before "krb5_enctype" > > /usr/include/openssl/kssl.h:136: syntax error before '*' token > > /usr/include/openssl/kssl.h:137: syntax error before '}' token > > /usr/include/openssl/kssl.h:149: syntax error before > > "kssl_ctx_setstring" > > /usr/include/openssl/kssl.h:149: syntax error before '*' token > > /usr/include/openssl/kssl.h:150: syntax error before '*' token > > /usr/include/openssl/kssl.h:151: syntax error before '*' token > > /usr/include/openssl/kssl.h:151: syntax error before '*' token > > /usr/include/openssl/kssl.h:152: syntax error before '*' token > > /usr/include/openssl/kssl.h:153: syntax error before > "kssl_ctx_setprinc" > > /usr/include/openssl/kssl.h:153: syntax error before '*' token > > /usr/include/openssl/kssl.h:155: syntax error before "kssl_cget_tkt" > > /usr/include/openssl/kssl.h:155: syntax error before '*' token > > /usr/include/openssl/kssl.h:157: syntax error before "kssl_sget_tkt" > > /usr/include/openssl/kssl.h:157: syntax error before '*' token > > /usr/include/openssl/kssl.h:159: syntax error before > "kssl_ctx_setkey" > > /usr/include/openssl/kssl.h:159: syntax error before '*' token > > /usr/include/openssl/kssl.h:161: syntax error before "context" > > /usr/include/openssl/kssl.h:162: syntax error > > before "kssl_build_principal_2" > > /usr/include/openssl/kssl.h:162: syntax error before "context" > > /usr/include/openssl/kssl.h:165: syntax error before > "kssl_validate_times" > > /usr/include/openssl/kssl.h:165: syntax error before "atime" > > /usr/include/openssl/kssl.h:167: syntax error before > "kssl_check_authent" > > /usr/include/openssl/kssl.h:167: syntax error before '*' token > > /usr/include/openssl/kssl.h:169: syntax error before "enctype" > > In file included from SWIG/_m2crypto.c:863: > > /usr/include/openssl/ssl.h:909: syntax error before "KSSL_CTX" > > /usr/include/openssl/ssl.h:931: syntax error before '}' token > > SWIG/_m2crypto.c: In function `sign_final': > > SWIG/_m2crypto.c:1925: warning: unused variable `ret' > > SWIG/_m2crypto.c: In function `ssl_session_read_pem': > > SWIG/_m2crypto.c:3443: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c: In function `ssl_session_write_pem': > > SWIG/_m2crypto.c:3447: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c: At top level: > > SWIG/_m2crypto.c:3497: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:4450: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:4898: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:5660: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:6481: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:6903: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:7638: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:9327: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:11392: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:12497: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:12518: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:13142: warning: function declaration isn't > a prototype > > SWIG/_m2crypto.c:734: warning: `RCS_id' defined but not used > > error: command 'gcc' failed with exit status 1 > > > > > -- > --Guido van Rossum (home page: http://www.python.org/~guido/) > From heikki at OSAFOUNDATION.ORG Thu Apr 14 01:49:36 2005 From: heikki at OSAFOUNDATION.ORG (Heikki Toivonen) Date: Wed, 13 Apr 2005 16:49:36 -0700 Subject: [PYTHON-CRYPTO] M2Crypto sprint for Europython? Message-ID: <425DB010.50301@osafoundation.org> I am pondering about attending Europython (http://www.europython.org/) in late July, and was wondering if there is any interest in having an M2Crypto sprint there. I would like to see M2Crypto API cleaned to be consistent, and to fill in any missing holes. Also there have been reports from Guido etc. about difficulties in using M2Crypto, and having memory leaks, so we could take care all of that in the sprint. Anybody else interested? -- Heikki Toivonen -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 249 bytes Desc: OpenPGP digital signature URL: From heikki at OSAFOUNDATION.ORG Thu Apr 14 01:43:53 2005 From: heikki at OSAFOUNDATION.ORG (Heikki Toivonen) Date: Wed, 13 Apr 2005 16:43:53 -0700 Subject: [PYTHON-CRYPTO] Added M2Crypto wrapper for Twisted, some significant changes Message-ID: <425DAEB9.6030800@osafoundation.org> I just checked in changes that make it possible to use M2Crypto[1] with Twisted[2] so that M2Crypto takes care of the SSL part in communications. This code has been in use in Chandler[3], in IMAP and SMTP code. I have also done a trivial WebDAV HTTP test with this wrapper. This has only been tested in a client, so I would be surprised if it worked in a server without some additional tweaks. Some changes were required in other parts of M2Crypto, changing existing functionality, so take note. Also the new code has a bunch of XXX comments where I am not sure what the best course of action would be. The use of Checker especially really grates on me, but I decided to check this in now rather than leave this in limbo indefinitely (it has been in Chandler tree for over 4 months). We'd need some samples on how to use this as well. Let me know if you experience any trouble. Thanks to Trevor Perrin for blazing the way with his TLS Lite[4] package: it showed me how to write an SSL wrapper for Twisted. Trevor's code is for server, and I was unable to get it to work for client. ChangeLog: - X509.get_ext raises LookupError if extension not found - SSL.Checker and SSL.TwistedProtocolWrapper are new files that provide checking SSL connection and the actual Twisted wrapper - Wrapped BIO_s_bio(), bio_ctrl_wpending(), bio_ctrl_get_write_guarantee(), bio_make_bio_pair(), bio_set_write_buf_size(), bio_should_retry(), bio_should_read(), bio_should_write() methods - bio_read, bio_write, bio_gets now raise exceptions on error (were silent before) - provided constants SSL_MODE_ENABLE_PARTIAL_WRITE, SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER, SSL_MODE_AUTO_RETRY - wrapped methods ssl_set_mode(), ssl_get_mode(), ssl_is_init_finished() - added and modified some tests (need samples on using the twisted wrapper, though) [1]: http://sandbox.rulemaker.net/ngps/m2/ [2]: http://twistedmatrix.com/ [3]: http://www.osafoundation.org/ [4]: http://trevp.net/tlslite/ -- Heikki Toivonen -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 249 bytes Desc: OpenPGP digital signature URL: From KRJackson at LBL.GOV Fri Apr 15 00:35:34 2005 From: KRJackson at LBL.GOV (Keith Jackson) Date: Thu, 14 Apr 2005 15:35:34 -0700 Subject: [PYTHON-CRYPTO] M2Crypto sprint for Europython? In-Reply-To: <425DB010.50301@osafoundation.org> References: <425DB010.50301@osafoundation.org> Message-ID: <69f25b290cb38a7332bc2735297d29ed@lbl.gov> Heikki, None of my group can make Europython, but we're certainly willing to help in anyway we can from California. We've been really frustrated with the lack of a standard, full-featured, robust set of OpenSSL wrappers. To enable session resumption support in Twisted we contributed patches back to PyOpenSSL but no one seems to be maintaining the code any longer. At least none of our mail has been responded to. I'd love to see one package emerge as the standard Python OpenSSL interface. Getting M2Crypto up to speed seems like a good place to start. I'm willing to help get a good task list together to help organize what needs done, or anything else that might help move this forward. thanks, --keith On Apr 13, 2005, at 4:49 PM, Heikki Toivonen wrote: > I am pondering about attending Europython (http://www.europython.org/) > in late July, and was wondering if there is any interest in having an > M2Crypto sprint there. I would like to see M2Crypto API cleaned to be > consistent, and to fill in any missing holes. Also there have been > reports from Guido etc. about difficulties in using M2Crypto, and > having > memory leaks, so we could take care all of that in the sprint. Anybody > else interested? > > -- > Heikki Toivonen > From conrad at HEP.CALTECH.EDU Fri Apr 15 00:50:34 2005 From: conrad at HEP.CALTECH.EDU (Conrad Steenberg) Date: Thu, 14 Apr 2005 17:50:34 -0500 Subject: [PYTHON-CRYPTO] M2Crypto sprint for Europython? In-Reply-To: <69f25b290cb38a7332bc2735297d29ed@lbl.gov> References: <425DB010.50301@osafoundation.org> <69f25b290cb38a7332bc2735297d29ed@lbl.gov> Message-ID: <1113519034.4798.9.camel@localhost.localdomain> Hi all I'm also more than willing to resend my patches and help with their integration. Cheers Conrad On Thu, 2005-04-14 at 15:35 -0700, Keith Jackson wrote: > Heikki, > None of my group can make Europython, but we're certainly willing to > help in anyway we can from California. We've been really frustrated > with the lack of a standard, full-featured, robust set of OpenSSL > wrappers. To enable session resumption support in Twisted we > contributed patches back to PyOpenSSL but no one seems to be > maintaining the code any longer. At least none of our mail has been > responded to. > > I'd love to see one package emerge as the standard Python OpenSSL > interface. Getting M2Crypto up to speed seems like a good place to > start. I'm willing to help get a good task list together to help > organize what needs done, or anything else that might help move this > forward. > thanks, > --keith > > > On Apr 13, 2005, at 4:49 PM, Heikki Toivonen wrote: > > > I am pondering about attending Europython (http://www.europython.org/) > > in late July, and was wondering if there is any interest in having an > > M2Crypto sprint there. I would like to see M2Crypto API cleaned to be > > consistent, and to fill in any missing holes. Also there have been > > reports from Guido etc. about difficulties in using M2Crypto, and > > having > > memory leaks, so we could take care all of that in the sprint. Anybody > > else interested? > > > > -- > > Heikki Toivonen > > -- ----------------------------------------------------------------------------- Conrad D. Steenberg, Ph. D. California Institute of Technology Research Scientist MC 356-48 High Energy Physics 1200 E. California Blvd. E-mail: conrad at hep.caltech.edu Pasadena, CA Voice : +1 (626) 395-8758 91125 Fax : +1 (626) 584-9304 USA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Conrad Steenberg [conrad at hep.caltech.edu] . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3740 bytes Desc: not available URL: From heikki at OSAFOUNDATION.ORG Fri Apr 15 08:16:26 2005 From: heikki at OSAFOUNDATION.ORG (Heikki Toivonen) Date: Thu, 14 Apr 2005 23:16:26 -0700 Subject: [PYTHON-CRYPTO] M2Crypto bugs Message-ID: <425F5C3A.3040709@osafoundation.org> I think I have now filed all bugs from http://www.artima.com/forums/flat.jsp?forum=106&thread=95863 into M2Crypto's Bugzilla. I'm inviting everyone to file M2Crypto bugs directly into our Bugzilla so that we'll have one central place to track them (http://bugzilla.osafoundation.org/). Buglist as tinyurl: http://tinyurl.com/5mrho I've also provided a patch for the leaks in the swig files mentioned in the forum post. The comments about _rand.i did not seem to match the version of the file I have so I hope I found and fixed the right issues in the right way... see http://bugzilla.osafoundation.org/attachment.cgi?id=741&action=diff -- Heikki Toivonen -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 249 bytes Desc: OpenPGP digital signature URL: From conrad at HEP.CALTECH.EDU Fri Apr 15 20:56:47 2005 From: conrad at HEP.CALTECH.EDU (Conrad Steenberg) Date: Fri, 15 Apr 2005 13:56:47 -0500 Subject: [PYTHON-CRYPTO] Bugs filed (with patches :-) Message-ID: <1113591407.4892.3.camel@localhost.localdomain> Hello I filed a few bug-tracker items to implement some features that I found useful in M2C: [Bug 2843] New: [PATCH] get an RSA object from an EVP_PKEY object [Bug 2844] New: [PATCH] Verify an X509 object using the public key that signed it [Bug 2845] New: [PATCH] m2.asn1_integer_set to set the value of an ASN integer [Bug 2846] New: [PATCH] obtain a PEM-encoded version of an RSA private key as a string Cheers Conrad . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Conrad Steenberg [conrad at hep.caltech.edu] . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3740 bytes Desc: not available URL: From m.bizzarri at ICUBE.IT Sat Apr 16 01:47:15 2005 From: m.bizzarri at ICUBE.IT (Marco Bizzarri) Date: Sat, 16 Apr 2005 01:47:15 +0200 Subject: [PYTHON-CRYPTO] m2crypto use inside Zope Message-ID: <42605283.20403@icube.it> Hi all. We're using m2crypto inside a Zope application. We experiment sometime a crash in the Zope server, which is probably due to our bad use of m2crypto. The "incriminated" code is attached to this mail. I remember some months ago there was some discussion on some possible bad use of functions, which could lead to an abnormal exit, but I was unable to find the email. Any suggestion is welcome. Regards Marco -------------- next part -------------- A non-text attachment was scrubbed... Name: Signature.py Type: text/x-python Size: 5594 bytes Desc: not available URL: