Default Camellia Encryption Support in Build

[Arpit Srivastava]

Thanks Nate AND Tom.

1. Can you tell me which version of OpenSSL has been integrated in Krb5
1.11.3.
2. If I replace the /lib/crypto folder of Krb5 1.11.3 with the /lib/crypto
of Krb5 1.10.6, the build is successful. Will "Krb5 1.11.3 library" built
with "old crypto source files" be stable ?

Best,
Arpit



On Fri, Jun 21, 2013 at 7:54 PM, Tom Yu <tlyu at mit.edu> wrote:

> Arpit Srivastava <arpit.orb at gmail.com> writes:
>
> > Thanks for replies. I am getting following errors AND unable to identify
> > the root cause:
> >
> >
> /home/arpit.srivastava/standalone-ndk-toolchain-9/bin/../lib/gcc/arm-linux-androideabi/4.6/../../../../arm-linux-androideabi/bin/ld:
> > ../../../lib/libk5crypto.a(camellia.o): in function
> map_mode:camellia.c:78:
> > error: undefined reference to 'EVP_camellia_128_cbc'
> >
> /home/arpit.srivastava/standalone-ndk-toolchain-9/bin/../lib/gcc/arm-linux-androideabi/4.6/../../../../arm-linux-androideabi/bin/ld:
> > ../../../lib/libk5crypto.a(camellia.o): in function
> map_mode:camellia.c:80:
> > error: undefined reference to 'EVP_camellia_256_cbc'
> >
> /home/arpit.srivastava/standalone-ndk-toolchain-9/bin/../lib/gcc/arm-linux-androideabi/4.6/../../../../arm-linux-androideabi/bin/ld:
> > ../../../lib/libk5crypto.a(camellia.o): in function
> > cts_encr:camellia.c:182: error: undefined reference to 'Camellia_set_key'
> >
> /home/arpit.srivastava/standalone-ndk-toolchain-9/bin/../lib/gcc/arm-linux-androideabi/4.6/../../../../arm-linux-androideabi/bin/ld:
> > ../../../lib/libk5crypto.a(camellia.o): in function
> > cts_encr:camellia.c:203: error: undefined reference to
> > 'Camellia_cbc_encrypt'
> >
> /home/arpit.srivastava/standalone-ndk-toolchain-9/bin/../lib/gcc/arm-linux-androideabi/4.6/../../../../arm-linux-androideabi/bin/ld:
> > ../../../lib/libk5crypto.a(camellia.o): in function
> > cts_decr:camellia.c:236: error: undefined reference to 'Camellia_set_key'
> >
> /home/arpit.srivastava/standalone-ndk-toolchain-9/bin/../lib/gcc/arm-linux-androideabi/4.6/../../../../arm-linux-androideabi/bin/ld:
> > ../../../lib/libk5crypto.a(camellia.o): in function
> > cts_decr:camellia.c:259: error: undefined reference to
> > 'Camellia_cbc_encrypt'
> >
> /home/arpit.srivastava/standalone-ndk-toolchain-9/bin/../lib/gcc/arm-linux-androideabi/4.6/../../../../arm-linux-androideabi/bin/ld:
> > ../../../lib/libk5crypto.a(camellia.o): in function
> > krb5int_camellia_cbc_mac:camellia.c:327: error: undefined reference to
> > 'Camellia_set_key'
> >
> /home/arpit.srivastava/standalone-ndk-toolchain-9/bin/../lib/gcc/arm-linux-androideabi/4.6/../../../../arm-linux-androideabi/bin/ld:
> > ../../../lib/libk5crypto.a(camellia.o): in function
> > krb5int_camellia_cbc_mac:camellia.c:346: error: undefined reference to
> > 'Camellia_ecb_encrypt'
>
> It looks like for some reason or other, the version of OpenSSL that
> you have lacks support for Camellia.  (Or it implements Camellia using
> a different API that we don't know about.)
>
> > On Thu, Jun 20, 2013 at 9:03 PM, Nate Rosenblum <nater at maginatics.com
> >wrote:
>
> >> I ran into this back in May and emailed the list about it. There are
> only
> >> three colliding symbols (Camellia_{Ekeygen, EncryptBlock,
> DecryptBlock}),
> >> and you can easily patch them out of the header as they're only used
> within
> >> the translation unit. I didn't send a pull request for this because
> it's a
> >> bit hacky; renaming the symbols is probably the way to go.
>
> That patch is already in 1.11.3.  I think this is a different problem.
>