GnuTLS

nettle

# wget ftp://ftp.gnu.org/gnu/nettle/nettle-3.1.tar.gz

# ./configure --prefix=/usr --enable-mini-gmp

# make

# make install

 

# wget ftp://ftp.gnu.org/gnu/nettle/nettle-3.1.tar.gz

# ./configure --prefix=/usr/local/nettle-3.1

# make

# make install

 

GMP

https://gmplib.org

 

libtasn1

# wget ftp://ftp.gnu.org/gnu/libtasn1/libtasn1-2.14.tar.gz

# tar -zxvf libtasn1-2.14.tar.gz

# ./configure --prefix=/usr

# make

# make install

 

libffi

# wget https://github.com/libffi/libffi/archive/v3.2.1.tar.gz

# mv v3.2.1.tar.gz libffi-v3.2.1.tar.gz

# ./autogen.sh

# ./configure --prefix=/usr

# make install

 

p11-kit

# wget https://github.com/p11-glue/p11-kit/releases/download/0.23.11/p11-kit-0.23.11.tar.gz

 

# ./configure

configure: error: libtasn1 not found. Building without it results in significant loss of functionality. To proceed use --without-libtasn1

 

# ./configure

configure: error: Package requirements (libffi >= 3.0.0) were not met:

 

No package 'libffi' found

 

# ./configure --prefix=/usr

# make

# make install

 

expat

# wget https://github.com/libexpat/libexpat/releases/download/R_1_95_0/expat-1.95.0.tar.gz

# tar -zxvf expat-1.95.0.tar.gz

# ./configure --prefix=/usr/local/expat-1.95.0

# make

# make install

 

 

libunbound

# wget https://nlnetlabs.nl/downloads/unbound/unbound-1.5.10.tar.gz

# ./configure

 

checking for libexpat... configure: error: Could not find libexpat, expat.h

 

# ./configure --with-libexpat=/usr/local/expat-1.95.0 --prefix=/usr

# make

# make install

 

安装

# wget ftp://ftp.gnutls.org/gcrypt/gnutls/v3.4/gnutls-3.4.10.tar.xz

# ./configure --prefix=/usr/local/gnutls-3.4.10 

 

checking for NETTLE... no

configure: error: 

  ***

  *** Libnettle 3.1 was not found.

 

 

checking for HOGWEED... no

configure: error: 

  ***

  *** Libhogweed (nettle's companion library) was not found. Note that you must compile nettle with gmp support.

 

checking for LIBTASN1... no

configure: error: 

  ***

  *** Libtasn1 4.9 was not found. To use the included one, use --with-included-libtasn1

 

configure: error: 

  ***

  *** Libunistring was not found. To use the included one, use --with-included-unistring

  

checking for P11_KIT... no

configure: error: 

***

*** p11-kit >= 0.23.1 was not found. To disable PKCS #11 support

*** use --without-p11-kit, otherwise you may get p11-kit from

*** http://p11-glue.freedesktop.org/p11-kit.html

*** 

# ./configure --prefix=/usr/local/gnutls-3.4.10 --with-included-libtasn1 --with-included-unistring --without-p11-kit

 

configure: summary of build options:

 

  version:              3.6.0 shared 50:0:20

  Host/Target system:   i686-pc-linux-gnu

  Build system:         i686-pc-linux-gnu

  Install prefix:       /usr/local/gnutls-3.6.0

  Compiler:             gcc -std=gnu99

  Valgrind:             no 

  CFlags:               -g -O2

  Library types:        Shared=yes, Static=no

  Local libopts:        yes

  Local libtasn1:       yes

  Local unistring:      yes

  Use nettle-mini:      no

  Documentation:        yes (manpages: yes)

 

configure: External hardware support:

 

  /dev/crypto:          no

  Hardware accel:       x86

  Padlock accel:        yes

  Random gen. variant:  auto-detect

  PKCS#11 support:      no

  TPM support:          no

 

configure: Optional features:

(note that included applications might not compile properly

if features are disabled)

 

  SSL3.0 support:       yes

  SSL2.0 client hello:  yes

  Allow SHA1 sign:      no

  DTLS-SRTP support:    yes

  ALPN support:         yes

  OCSP support:         yes

  Ses. ticket support:  yes

  SRP support:          yes

  PSK support:          yes

  DHE support:          yes

  ECDHE support:        yes

  Anon auth support:    yes

  Heartbeat support:    yes

  IDNA support:         no

  Non-SuiteB curves:    yes

  FIPS140 mode:         no

 

configure: Optional libraries:

 

  Guile wrappers:       no

  C++ library:          yes

  DANE library:         no

  OpenSSL compat:       no

 

configure: System files:

 

  Trust store pkcs11:   

  Trust store dir:      

  Trust store file:     /etc/pki/tls/cert.pem

  Blacklist file:       

  CRL file:             

  Priority file:        /etc/gnutls/default-priorities

  DNSSEC root key file: /etc/unbound/root.key

 

configure: WARNING:

***

*** The DNSSEC root key file in /etc/unbound/root.key was not found.

*** This file is needed for the verification of DNSSEC responses.

*** Use the command: unbound-anchor -a "/etc/unbound/root.key"

*** to generate or update it.

*** 

 

# ./configure --prefix=/usr/local/gnutls-3.4.10 --with-included-libtasn1 --with-included-unistring --without-p11-kit