Re: Linux 4.3-rc1 build error on CentOS 5.11 "scripts/sign-file.c:23:25: fatal error: openssl/cms.h: No such file or directory"

[David Howells]

Vinson Lee <vlee@xxxxxxxxxxxxxxxx> wrote:

> This patch results in this build error on CentOS 5.11.
> 
>   HOSTCC  scripts/sign-file
> scripts/sign-file.c: In function âmainâ:
> scripts/sign-file.c:255:23: error: âPKCS7_PARTIALâ undeclared (first
> use in this function)
>        PKCS7_NOCERTS | PKCS7_PARTIAL | PKCS7_BINARY |
>                        ^
> scripts/sign-file.c:255:23: note: each undeclared identifier is
> reported only once for each function it appears in
> scripts/sign-file.c:259:2: warning: implicit declaration of function
> âPKCS7_sign_add_signerâ [-Wimplicit-function-declaration]
>   ERR(!PKCS7_sign_add_signer(pkcs7, x509, private_key, digest_algo,
>   ^
> scripts/sign-file.c:263:2: warning: implicit declaration of function
> âPKCS7_finalâ [-Wimplicit-function-declaration]
>   ERR(PKCS7_final(pkcs7, bm, PKCS7_NOCERTS | PKCS7_BINARY) < 0,
>   ^
> scripts/sign-file.c:278:3: warning: implicit declaration of function
> âi2d_PKCS7_bio_streamâ [-Wimplicit-function-declaration]
>    ERR(i2d_PKCS7_bio_stream(b, pkcs7, NULL, 0) < 0,
>    ^

Hmmm...  Tricky.  I'll have to think about it.  I'm using PKCS7_NOCERTS with
PKCS7_sign_add_signer() (or the CMS equivalents) to leave the cert list out of
the message - but it's then necessary to manually specify the signers - at
least so I recall.

David
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/