Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FS#1411 - OpenVPN build fails with --enable-pkcs11 in the Makefile #6366

Closed
openwrt-bot opened this issue Mar 5, 2018 · 4 comments
Closed
Labels

Comments

@openwrt-bot
Copy link

Telefonorosso:

Problem Description
On Lede image builder under Debian i686 with 4.9.0 kernel, if I edit package/network/services/openvpn/Makefile and change:

--enable-pkcs11

build fails. The configure script cannot find pkcs11-helper dependency.

Proposed Resolution
Add the pkcs11-helper software in Lede

Steps to reproduce
nano [BUILD_DIR]/package/network/services/openvpn/Makefile
make package/openvpn/compile

Hardware is Dragino DT01 AR7xxx/AR9xxx based system.

@openwrt-bot
Copy link
Author

mkresin:

So, you change --disable-pkcs11 to --enable-pkcs11 and the build fails. To be honest, I'm not surprised. pcks11 is most likely disabled for a reason and more changes are required to get it working.

It's nothing I would call a bug. It should be either a Feature Request to enable pkcs11 by default/create a build variant with pkcs11 enabled. But such a Feature Request should explain why pkcs11 support is required.

You might want to ask for help in the forum to get pkcs11 working and send a patch afterwards.

@openwrt-bot
Copy link
Author

Telefonorosso:

Hello Mathias, thanks for adressing this... feature request.
I believe that IOT / embedded support for security hardware tokens should be fully implemented. It opens quite a lot of possibilities.
For example premises access control with smart card, etc.
Could you kindly point me the right forum section where I can seek help with this?
Regards,
Francesco

@openwrt-bot
Copy link
Author

mkresin:

Feel free to add a new task here and set the type to feature request.

But don't expect to much. I haven't seen anyone to have a look at the feature requests or implement requested stuff. As you most likely know, OpenWrt is a community project and depends on contributions. The best would be if you implement the feature on your own and provide a patch for inclusion.

support for security hardware tokens should be fully implemented

Ah, here we have the reason for the required pkcs11 support. No idea how it really works, but you should always mention what you are trying to archieve.

@openwrt-bot
Copy link
Author

Telefonorosso:

Thank you very much Mathias.
Hope the community will see the potential and produce some output!
Here's the new feature request:
https://bugs.lede-project.org/index.php?do=details&task_id=1413

Best regards,
Francesco

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant