[stunnel-users] Stunnel 5.17 build on AIX - libssp missing

[Michal Trojnara]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Rob,

On 07.05.2015 23:54, Rob Lockhart wrote:
> /bin/sh ../libtool  --tag=CC    --mode=link gcc  -g -O2 
> -D_THREAD_SAFE  -Wall -Wextra -Wformat=2 -Wconversion
> -Wno-long-long -Wno-deprecated-declarations -fstack-protector -fPIE
> -D_FORTIFY_SOURCE=2 -L/home/lockharr/openssl/lib64
> -L/home/lockharr/openssl/lib -lssl -lcrypto  -o stunnel
> stunnel-tls.o stunnel-str.o  stunnel-file.o stunnel-client.o
> stunnel-log.o stunnel-options.o  stunnel-protocol.o 
> stunnel-network.o  stunnel-resolver.o stunnel-ssl.o  stunnel-ctx.o 
> stunnel-verify.o  stunnel-sthreads.o stunnel-fd.o
> stunnel-stunnel.o stunnel-pty.o stunnel-libwrap.o
> stunnel-ui_unix.o  -lpthreads libtool: link: gcc -g -O2
> -D_THREAD_SAFE -Wall -Wextra -Wformat=2 -Wconversion -Wno-long-long
> -Wno-deprecated-declarations -fstack-protector -fPIE
> -D_FORTIFY_SOURCE=2 -o stunnel stunnel-tls.o stunnel-str.o
> stunnel-file.o stunnel-client.o stunnel-log.o stunnel-options.o
> stunnel-protocol.o stunnel-network.o stunnel-resolver.o
> stunnel-ssl.o stunnel-ctx.o stunnel-verify.o stunnel-sthreads.o
> stunnel-fd.o stunnel-stunnel.o stunnel-pty.o stunnel-libwrap.o
> stunnel-ui_unix.o  -L/home/lockharr/openssl/lib64 
> -L/home/lockharr/openssl/lib -lssl -lcrypto -lpthreads collect2:
> library libssp_nonshared not found

- -fstack-protector gcc feature needs needs libssp library to work.
stunnel automatically detected that your gcc claims to support this
feature.  Unfortunately the support seems to be broken, as you don't
have the required library.

The workaround is to remove -fstack-protector from src/Makefile, and
rebuild stunnel (make clean && make).

http://aconole.brad-x.com/papers/exploits/ssp/intro

Mike
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=4rUs
-----END PGP SIGNATURE-----