OpenSCEP & OS X Server & iPhones?

[Jakob Peterhänsel-2]

Hi All,

Just found OpenSCEP and this list after reading up on Enterprice features on the new iPhone OS 3.0

It allowes for provisioning via SCEP, so I would like to dig into that.

I just downloaded the latest release, abut it fails to compile on a standard OS X 10.5.7 client - anyone have any clues?

Here is the output of ./configure & make:

JAP.local [openscep-0.4.2] >./configure 

checking build system type... i386-apple-darwin9.7.0

checking host system type... i386-apple-darwin9.7.0

checking target system type... i386-apple-darwin9.7.0

checking for a BSD compatible install... /usr/bin/install -c

checking whether build environment is sane... yes

checking whether make sets ${MAKE}... yes

checking for working aclocal... found

checking for working autoconf... found

checking for working automake... found

checking for working autoheader... found

checking for working makeinfo... found

checking for gcc... gcc

checking for C compiler default output... a.out

checking whether the C compiler works... yes

checking whether we are cross compiling... no

checking for executable suffix... 

checking for object suffix... o

checking whether we are using the GNU C compiler... yes

checking whether gcc accepts -g... yes

checking for a BSD compatible install... /usr/bin/install -c

checking for mv... /bin/mv

checking for ldapsearch... /usr/bin/ldapsearch

checking for ldapsearch... /usr/bin/ldapsearch

checking for openssl... /usr/bin/openssl

checking for gethostbyname in -lnsl... no

checking for socket in -lsocket... no

checking for res_query in -lresolv... yes

checking for ber_init in -llber... yes

checking for ldap_init in -lldap... yes

checking for date... /bin/date

checking for pkgmk... no

checking for rpm... no

checking for perl... /usr/bin/perl

checking "whether we have the altzone global variable"... no

checking for ld used by GCC... /usr/libexec/gcc/i686-apple-darwin9/4.0.1/ld

checking if the linker (/usr/libexec/gcc/i686-apple-darwin9/4.0.1/ld) is GNU ld... no

checking for /usr/libexec/gcc/i686-apple-darwin9/4.0.1/ld option to reload object files... -r

checking for BSD-compatible nm... /usr/bin/nm -p

checking whether ln -s works... yes

checking how to recognise dependant libraries... file_magic Mach-O dynamically linked shared library

checking command to parse /usr/bin/nm -p output... rm: conftest.dSYM: is a directory

rm: conftest.dSYM: is a directory

rm: conftest.dSYM: is a directory

rm: conftest.dSYM: is a directory

ok

checking how to run the C preprocessor... gcc -E

checking for dlfcn.h... yes

checking for ranlib... ranlib

checking for strip... strip

checking for objdir... .libs

checking for gcc option to produce PIC... -fno-common

checking if gcc PIC flag -fno-common works... yes

checking if gcc static flag -static works... no

checking if gcc supports -c -o file.o... yes

checking if gcc supports -c -o file.lo... yes

checking if gcc supports -fno-rtti -fno-exceptions... yes

checking whether the linker (/usr/libexec/gcc/i686-apple-darwin9/4.0.1/ld) supports shared libraries... yes

checking how to hardcode library paths into programs... unsupported

checking whether stripping libraries is possible... no

checking dynamic linker characteristics... darwin9.7.0 dyld

checking if libtool supports shared libraries... yes

checking whether to build shared libraries... yes

checking whether to build static libraries... yes

checking for shl_load... no

checking for shl_load in -ldld... no

checking for dlopen... yes

checking whether a program can dlopen itself... yes

checking whether a statically linked program can dlopen itself... yes

creating libtool

checking for dlopen in -ldl... yes

checking for ANSI C header files... rm: conftest.dSYM: is a directory

rm: conftest.dSYM: is a directory

yes

checking whether byte ordering is bigendian... no

checking for strdup... yes

configure: creating ./config.status

config.status: creating Makefile

config.status: creating include/Makefile

config.status: creating lib/Makefile

config.status: creating scep/Makefile

config.status: creating scepd/Makefile

config.status: creating cgi-bin/Makefile

config.status: creating ldap/Makefile

config.status: creating openssl/Makefile

config.status: creating doc/Makefile

config.status: creating html/Makefile

config.status: creating man/Makefile

config.status: creating package/Makefile

config.status: creating rpm/Makefile

config.status: creating config.sh

config.status: creating include/config.h

configure: configuring in libltdl

configure: running /bin/ksh './configure'  --enable-ltdl-convenience --cache-file=/dev/null --srcdir=.

loading cache /dev/null

checking for a BSD compatible install... /usr/bin/install -c

checking whether build environment is sane... yes

checking whether make sets ${MAKE}... yes

checking for working aclocal... found

checking for working autoconf... found

checking for working automake... found

checking for working autoheader... found

checking for working makeinfo... found

checking whether to enable maintainer-specific portions of Makefiles... no

checking for gcc... gcc

checking whether the C compiler (gcc  ) works... yes

checking whether the C compiler (gcc  ) is a cross-compiler... no

checking whether we are using GNU C... yes

checking whether gcc accepts -g... yes

checking for working const... yes

checking for inline... inline

checking host system type... i386-apple-darwin9.7.0

checking build system type... i386-apple-darwin9.7.0

checking for ranlib... ranlib

checking for ld used by GCC... /usr/libexec/gcc/i686-apple-darwin9/4.0.1/ld

checking if the linker (/usr/libexec/gcc/i686-apple-darwin9/4.0.1/ld) is GNU ld... no

checking for BSD-compatible nm... /usr/bin/nm -p

checking whether ln -s works... yes

updating cache /dev/null

loading cache /dev/null within ltconfig

checking for object suffix... o

checking for executable suffix... rm: conftest.dSYM: is a directory

.dSYM

checking for gcc option to produce PIC... -fPIC

checking if gcc PIC flag -fPIC works... rm: conftest.dSYM: is a directory

yes

rm: conftest.dSYM: is a directory

checking if gcc supports -c -o file.o... yes

checking if gcc supports -c -o file.lo... rm: conftest.dSYM: is a directory

yes

rm: conftest.dSYM: is a directory

checking if gcc supports -fno-rtti -fno-exceptions ... rm: conftest.dSYM: is a directory

no

rm: conftest.dSYM: is a directory

checking if gcc static flag -static works... rm: conftest.dSYM: is a directory

none

rm: conftest.dSYM: is a directory

checking if the linker (/usr/libexec/gcc/i686-apple-darwin9/4.0.1/ld) is GNU ld... no

checking whether the linker (/usr/libexec/gcc/i686-apple-darwin9/4.0.1/ld) supports shared libraries... no

checking command to parse /usr/bin/nm -p output... rm: conftest.dSYM: is a directory

rm: conftest.dSYM: is a directory

rm: conftest.dSYM: is a directory

rm: conftest.dSYM: is a directory

ok

checking how to hardcode library paths into programs... unsupported

checking for /usr/libexec/gcc/i686-apple-darwin9/4.0.1/ld option to reload object files... -r

checking dynamic linker characteristics... no

checking if libtool supports shared libraries... no

checking whether to build shared libraries... no

checking whether to build static libraries... yes

checking for objdir... .libs

creating libtool

updating cache /dev/null

loading cache /dev/null

checking which extension is used for shared libraries... 

checking which variable specifies run-time library path... 

checking for objdir... 

checking how to run the C preprocessor... rm: conftest.dSYM: is a directory

gcc -E

checking for ANSI C header files... yes

checking for malloc.h... no

checking for memory.h... yes

checking for stdlib.h... yes

checking for stdio.h... yes

checking for ctype.h... yes

checking for dlfcn.h... yes

checking for dl.h... no

checking for dld.h... no

checking for string.h... yes

checking for strchr... yes

checking for strrchr... yes

checking whether libtool supports -dlopen/-dlpreopen... no

checking for dlopen in -ldl... yes

checking for shl_load... no

checking for shl_load in -ldld... no

checking for dld_link in -ldld... no

checking for dlerror... yes

checking command to parse /usr/bin/nm -p output... yes

checking for _ prefix in compiled symbols... (cached) yes

checking whether we have to add an underscore for dlsym... no

updating cache /dev/null

creating ./config.status

creating Makefile

creating config.h

JAP.local [openscep-0.4.2] >make

Making all in libltdl

/bin/ksh ./libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I.     -g -O2 -c ltdl.c

./libtool[727]: test: argument expected

gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -c ltdl.c -o ltdl.o

echo timestamp > ltdl.lo

/bin/ksh ./libtool --mode=link gcc  -g -O2  -o libltdlc.la   ltdl.lo -ldl 

mkdir .libs

rm -fr .libs/libltdlc.la .libs/libltdlc.* .libs/libltdlc.*

ar cru .libs/libltdlc.a  ltdl.o 

ranlib .libs/libltdlc.a

creating libltdlc.la

(cd .libs && rm -f libltdlc.la && ln -s ../libltdlc.la libltdlc.la)

Making all in include

Making all in openssl

sh ../config.sh <openscepsetup.in >openscepsetup

sh ../config.sh <openscep.cnf.in >openscep.cnf

Making all in ldap

sh ../config.sh <openscep.ldif.in >openscep.ldif

sh ../config.sh <slapd.conf.in >slapd.conf

sh ../config.sh <setupldap.in >setupldap

Making all in lib

/bin/ksh ../libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I../include -I../libltdl -I../include -I/usr/local/ssl/include  -DOPENSCEPDIR=\"/usr/local/lib/openscep\"  -g -O2 -c init.c

mkdir .libs

gcc -DHAVE_CONFIG_H -I. -I. -I../include -I../libltdl -I../include -I/usr/local/ssl/include "-DOPENSCEPDIR=\"/usr/local/lib/openscep\"" -g -O2 -c init.c  -fno-common -DPIC -o .libs/init.lo

gcc -DHAVE_CONFIG_H -I. -I. -I../include -I../libltdl -I../include -I/usr/local/ssl/include "-DOPENSCEPDIR=\"/usr/local/lib/openscep\"" -g -O2 -c init.c -o init.o >/dev/null 2>&1

mv -f .libs/init.lo init.lo

/bin/ksh ../libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I../include -I../libltdl -I../include -I/usr/local/ssl/include  -DOPENSCEPDIR=\"/usr/local/lib/openscep\"  -g -O2 -c isasu.c

rm -f .libs/isasu.lo

gcc -DHAVE_CONFIG_H -I. -I. -I../include -I../libltdl -I../include -I/usr/local/ssl/include "-DOPENSCEPDIR=\"/usr/local/lib/openscep\"" -g -O2 -c isasu.c  -fno-common -DPIC -o .libs/isasu.lo

isasu.c: In function 'd2i_issuer_and_subject':

isasu.c:42: error: 'ASN1_F_D2I_PKCS7_ISSUER_AND_SERIAL' undeclared (first use in this function)

isasu.c:42: error: (Each undeclared identifier is reported only once

isasu.c:42: error: for each function it appears in.)

isasu.c: In function 'issuer_and_subject_new':

isasu.c:53: error: 'ASN1_F_PKCS7_ISSUER_AND_SERIAL_NEW' undeclared (first use in this function)

make[1]: *** [isasu.lo] Error 1

make: *** [all-recursive] Error 1

JAP.local [openscep-0.4.2] >

Venligst / Kind Regards, 

  Jakob Peterhänsel

  Konsulent - Humac A/S

  Apple Certifications: ACSP, ACTC, FCP6 L1, FCS L1

  AppleSeed/CQF member since 1998

  Kerio Messaging Partner

Tlf: [phone]

Mobil: [phone]

Web: www.humac.dk

[Andreas Mueller-9]

Quoting Jakob Peterhänsel <jap@...>:
> Just found OpenSCEP and this list after reading up on Enterprice
> features on the new iPhone OS 3.0
> It allowes for provisioning via SCEP, so I would like to dig into that.
>
> I just downloaded the latest release, abut it fails to compile on a
> standard OS X 10.5.7 client - anyone have any clues?
> Here is the output of ./configure & make:
OpenSCEP has not been worked on for a long time. It comes from a
time when openssl did not even provide some of the message formats
that SCEP requires. Lots of things could probably be removed completely
today. However, I don't expect to find the time anything soon to
work on it.

However: isn't SCEP dead anyway since MD5 has been essentially
broken?

Best regards

Andreas

--
Prof. Dr. Andreas Mueller
andreas.mueller@...
Bubental 53, 8852 Altendorf
Voice: [phone]  Fax/Data: [phone]