[BIT-1775] X509 Plugin does not support OpenSSL 1.1 - Bro Tracker

Details

Type: Problem
Status: Closed
Priority: Normal
Resolution: Fixed
Affects versions: 2.5
Fix versions: 2.6
Components: Bro
Labels:
None
Environment:

Hide

Linux kali 4.1.19-v7 #1 SMP Tue Mar 15 15:10:00 CDT 2016 armv7l GNU/Linux

BASH=/bin/bash
BASHOPTS=checkwinsize:cmdhist:complete_fullquote:expand_aliases:extquote:force_fignore:hostcomplete:interactive_comments:login_shell:progcomp:promptvars:sourcepath
BASH_ALIASES=()
BASH_ARGC=()
BASH_ARGV=()
BASH_CMDS=()
BASH_LINENO=()
BASH_SOURCE=()
BASH_VERSINFO=([0]="4" [1]="4" [2]="5" [3]="1" [4]="release" [5]="arm-unknown-linux-gnueabihf")
BASH_VERSION='4.4.5(1)-release'
COLUMNS=143
DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/0/bus
DIRSTACK=()
EUID=0
GROUPS=()
HISTFILE=/root/.bash_history
HISTFILESIZE=500
HISTSIZE=500
HOME=/root
HOSTNAME=
HOSTTYPE=arm
IFS=$' \t\n'
LDFLAGS='-L /usr/lib/arm-linux-gnueabihf'
LINES=42
LOGNAME=
MACHTYPE=arm-unknown-linux-gnueabihf
MAIL=/var/mail/root
MAILCHECK=60
OLDPWD=/root/Downloads
OPTERR=1
OPTIND=1
OSTYPE=linux-gnueabihf
PATH=/usr/local/bro/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
PIPESTATUS=([0]="0")
PPID=15919
PS1='$
{debian_chroot:+($debian_chroot)}
\u@\h:\w\$ '
PS2='> '
PS4='+ '
PWD=/root/Downloads/bro-2.5
SHELL=/bin/bash
SHELLOPTS=braceexpand:emacs:hashall:histexpand:history:interactive-comments:monitor
SHLVL=1
SSH_CLIENT=
SSH_CONNECTION=
SSH_TTY=/dev/pts/2
TERM=xterm
UID=0
USER=root
XDG_RUNTIME_DIR=/run/user/0
XDG_SESSION_ID=c13
_=-a

Show
Linux kali 4.1.19-v7 #1 SMP Tue Mar 15 15:10:00 CDT 2016 armv7l GNU/Linux BASH=/bin/bash BASHOPTS=checkwinsize:cmdhist:complete_fullquote:expand_aliases:extquote:force_fignore:hostcomplete:interactive_comments:login_shell:progcomp:promptvars:sourcepath BASH_ALIASES=() BASH_ARGC=() BASH_ARGV=() BASH_CMDS=() BASH_LINENO=() BASH_SOURCE=() BASH_VERSINFO=( [0] ="4" [1] ="4" [2] ="5" [3] ="1" [4] ="release" [5] ="arm-unknown-linux-gnueabihf") BASH_VERSION='4.4.5(1)-release' COLUMNS=143 DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/0/bus DIRSTACK=() EUID=0 GROUPS=() HISTFILE=/root/.bash_history HISTFILESIZE=500 HISTSIZE=500 HOME=/root HOSTNAME= HOSTTYPE=arm IFS=$' \t\n' LDFLAGS='-L /usr/lib/arm-linux-gnueabihf' LINES=42 LOGNAME= MACHTYPE=arm-unknown-linux-gnueabihf MAIL=/var/mail/root MAILCHECK=60 OLDPWD=/root/Downloads OPTERR=1 OPTIND=1 OSTYPE=linux-gnueabihf PATH=/usr/local/bro/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin PIPESTATUS=( [0] ="0") PPID=15919 PS1='$ {debian_chroot:+($debian_chroot)} \u@\h:\w\$ ' PS2='> ' PS4='+ ' PWD=/root/Downloads/bro-2.5 SHELL=/bin/bash SHELLOPTS=braceexpand:emacs:hashall:histexpand:history:interactive-comments:monitor SHLVL=1 SSH_CLIENT= SSH_CONNECTION= SSH_TTY=/dev/pts/2 TERM=xterm UID=0 USER=root XDG_RUNTIME_DIR=/run/user/0 XDG_SESSION_ID=c13 _=-a

Sprint:

Description

Getting following error while running make. Cant complete install.

[ 73%] Building CXX object src/file_analysis/analyzer/x509/CMakeFiles/plugin-Bro-X509.dir/X509.cc.o
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc: In static member function 'static RecordVal* file_analysis::X509::ParseCertificate(file_analysis::X509Val*, const char*)':
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:142:43: error: invalid use of incomplete type 'X509

{aka struct x509_st}'
if ( ! i2t_ASN1_OBJECT(buf, 255, ssl_cert->cert_info->key->algor->algorithm) )
^~
In file included from /usr/include/openssl/x509.h:20:0,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:12,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/usr/include/openssl/ossl_typ.h:119:16: note: forward declaration of 'X509 {aka struct x509_st}

'
typedef struct x509_st X509;
^~~~~~~
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:154:27: error: invalid use of incomplete type 'X509

{aka struct x509_st}'
if ( OBJ_obj2nid(ssl_cert->cert_info->key->algor->algorithm) == NID_md5WithRSAEncryption )
^~
In file included from /usr/include/openssl/x509.h:20:0,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:12,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/usr/include/openssl/ossl_typ.h:119:16: note: forward declaration of 'X509 {aka struct x509_st}

'
typedef struct x509_st X509;
^~~~~~~
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:156:27: error: invalid use of incomplete type 'X509

{aka struct x509_st}'
old_algorithm = ssl_cert->cert_info->key->algor->algorithm;
^~
In file included from /usr/include/openssl/x509.h:20:0,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:12,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/usr/include/openssl/ossl_typ.h:119:16: note: forward declaration of 'X509 {aka struct x509_st}

'
typedef struct x509_st X509;
^~~~~~~
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:157:11: error: invalid use of incomplete type 'X509

{aka struct x509_st}'
ssl_cert->cert_info->key->algor->algorithm = OBJ_nid2obj(NID_rsaEncryption);
^~
In file included from /usr/include/openssl/x509.h:20:0,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:12,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/usr/include/openssl/ossl_typ.h:119:16: note: forward declaration of 'X509 {aka struct x509_st}

'
typedef struct x509_st X509;
^~~~~~~
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:160:43: error: invalid use of incomplete type 'X509

{aka struct x509_st}'
if ( ! i2t_ASN1_OBJECT(buf, 255, ssl_cert->sig_alg->algorithm) )
^~
In file included from /usr/include/openssl/x509.h:20:0,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:12,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/usr/include/openssl/ossl_typ.h:119:16: note: forward declaration of 'X509 {aka struct x509_st}

'
typedef struct x509_st X509;
^~~~~~~
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:169:12: error: invalid use of incomplete type 'EVP_PKEY

{aka struct evp_pkey_st}'
if ( pkey->type == EVP_PKEY_DSA )
^~
In file included from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:9:0,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/root/Downloads/bro-2.5/src/file_analysis/../File.h:17:16: note: forward declaration of 'EVP_PKEY {aka struct evp_pkey_st}

'
typedef struct evp_pkey_st EVP_PKEY;
^~~~~~~~~~~
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:172:17: error: invalid use of incomplete type 'EVP_PKEY

{aka struct evp_pkey_st}'
else if ( pkey->type == EVP_PKEY_RSA )
^~
In file included from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:9:0,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/root/Downloads/bro-2.5/src/file_analysis/../File.h:17:16: note: forward declaration of 'EVP_PKEY {aka struct evp_pkey_st}

'
typedef struct evp_pkey_st EVP_PKEY;
^~~~~~~~~~~
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:176:35: error: invalid use of incomplete type 'EVP_PKEY

{aka struct evp_pkey_st}'
char *exponent = BN_bn2dec(pkey->pkey.rsa->e);
^~
In file included from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:9:0,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/root/Downloads/bro-2.5/src/file_analysis/../File.h:17:16: note: forward declaration of 'EVP_PKEY {aka struct evp_pkey_st}

'
typedef struct evp_pkey_st EVP_PKEY;
^~~~~~~~~~~
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:185:17: error: invalid use of incomplete type 'EVP_PKEY

{aka struct evp_pkey_st}'
else if ( pkey->type == EVP_PKEY_EC )
^~
In file included from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:9:0,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/root/Downloads/bro-2.5/src/file_analysis/../File.h:17:16: note: forward declaration of 'EVP_PKEY {aka struct evp_pkey_st}

'
typedef struct evp_pkey_st EVP_PKEY;
^~~~~~~~~~~
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:195:12: error: invalid use of incomplete type 'X509

{aka struct x509_st}'
ssl_cert->cert_info->key->algor->algorithm = old_algorithm;
^~
In file included from /usr/include/openssl/x509.h:20:0,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:12,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/usr/include/openssl/ossl_typ.h:119:16: note: forward declaration of 'X509 {aka struct x509_st}

'
typedef struct x509_st X509;
^~~~~~~
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc: In member function 'void file_analysis::X509::ParseExtension(X509_EXTENSION*)':
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:266:35: error: invalid use of incomplete type 'X509_EXTENSION

{aka struct X509_extension_st}'
M_ASN1_OCTET_STRING_print(bio,ex->value);
^~
In file included from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:12:0,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/usr/include/openssl/x509.h:79:16: note: forward declaration of 'X509_EXTENSION {aka struct X509_extension_st}

'
typedef struct X509_extension_st X509_EXTENSION;
^~~~~~~~~~~~~~~~~
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:266:42: error: 'M_ASN1_OCTET_STRING_print' was not declared in this scope
M_ASN1_OCTET_STRING_print(bio,ex->value);
^
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc: In member function 'void file_analysis::X509::ParseSAN(X509_EXTENSION*)':
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:360:37: warning: 'unsigned char* ASN1_STRING_data(ASN1_STRING*)' is deprecated [-Wdeprecated-declarations]
const char* name = (const char*) ASN1_STRING_data(gen->d.ia5);
^~~~~~~~~~~~~~~~
In file included from /usr/include/openssl/bn.h:31:0,
from /usr/include/openssl/asn1.h:24,
from /usr/include/openssl/objects.h:916,
from /usr/include/openssl/evp.h:27,
from /usr/include/openssl/x509.h:23,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:12,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/usr/include/openssl/asn1.h:553:1: note: declared here
DEPRECATEDIN_1_1_0(unsigned char *ASN1_STRING_data(ASN1_STRING *x))
^
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:360:64: warning: 'unsigned char* ASN1_STRING_data(ASN1_STRING*)' is deprecated [-Wdeprecated-declarations]
const char* name = (const char*) ASN1_STRING_data(gen->d.ia5);
^
In file included from /usr/include/openssl/bn.h:31:0,
from /usr/include/openssl/asn1.h:24,
from /usr/include/openssl/objects.h:916,
from /usr/include/openssl/evp.h:27,
from /usr/include/openssl/x509.h:23,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:12,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/usr/include/openssl/asn1.h:553:1: note: declared here
DEPRECATEDIN_1_1_0(unsigned char *ASN1_STRING_data(ASN1_STRING *x))
^
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc: In static member function 'static StringVal* file_analysis::X509::KeyCurve(EVP_PKEY*)':
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:448:10: error: invalid use of incomplete type 'EVP_PKEY

{aka struct evp_pkey_st}'
if ( key->type != EVP_PKEY_EC )
^~
In file included from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:9:0,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/root/Downloads/bro-2.5/src/file_analysis/../File.h:17:16: note: forward declaration of 'EVP_PKEY {aka struct evp_pkey_st}

'
typedef struct evp_pkey_st EVP_PKEY;
^~~~~~~~~~~
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:456:37: error: invalid use of incomplete type 'EVP_PKEY

{aka struct evp_pkey_st}'
if ( (group = EC_KEY_get0_group(key->pkey.ec)) == NULL)
^~
In file included from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:9:0,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/root/Downloads/bro-2.5/src/file_analysis/../File.h:17:16: note: forward declaration of 'EVP_PKEY {aka struct evp_pkey_st}

'
typedef struct evp_pkey_st EVP_PKEY;
^~~~~~~~~~~
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc: In static member function 'static unsigned int file_analysis::X509::KeyLength(EVP_PKEY*)':
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:477:12: error: invalid use of incomplete type 'EVP_PKEY

{aka struct evp_pkey_st}'
switch(key->type) {
^~
In file included from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:9:0,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/root/Downloads/bro-2.5/src/file_analysis/../File.h:17:16: note: forward declaration of 'EVP_PKEY {aka struct evp_pkey_st}

'
typedef struct evp_pkey_st EVP_PKEY;
^~~~~~~~~~~
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:479:25: error: invalid use of incomplete type 'EVP_PKEY

{aka struct evp_pkey_st}'
return BN_num_bits(key->pkey.rsa->n);
^~
In file included from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:9:0,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/root/Downloads/bro-2.5/src/file_analysis/../File.h:17:16: note: forward declaration of 'EVP_PKEY {aka struct evp_pkey_st}

'
typedef struct evp_pkey_st EVP_PKEY;
^~~~~~~~~~~
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:482:25: error: invalid use of incomplete type 'EVP_PKEY

{aka struct evp_pkey_st}'
return BN_num_bits(key->pkey.dsa->p);
^~
In file included from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:9:0,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/root/Downloads/bro-2.5/src/file_analysis/../File.h:17:16: note: forward declaration of 'EVP_PKEY {aka struct evp_pkey_st}

'
typedef struct evp_pkey_st EVP_PKEY;
^~~~~~~~~~~
/root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:492:48: error: invalid use of incomplete type 'EVP_PKEY

{aka struct evp_pkey_st}'
const EC_GROUP *group = EC_KEY_get0_group(key->pkey.ec);
^~
In file included from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.h:9:0,
from /root/Downloads/bro-2.5/src/file_analysis/analyzer/x509/X509.cc:5:
/root/Downloads/bro-2.5/src/file_analysis/../File.h:17:16: note: forward declaration of 'EVP_PKEY {aka struct evp_pkey_st}

'
typedef struct evp_pkey_st EVP_PKEY;
^~~~~~~~~~~
src/file_analysis/analyzer/x509/CMakeFiles/plugin-Bro-X509.dir/build.make:119: recipe for target 'src/file_analysis/analyzer/x509/CMakeFiles/plugin-Bro-X509.dir/X509.cc.o' failed
make[3]: *** [src/file_analysis/analyzer/x509/CMakeFiles/plugin-Bro-X509.dir/X509.cc.o] Error 1
make[3]: Leaving directory '/root/Downloads/bro-2.5/build'
CMakeFiles/Makefile2:9412: recipe for target 'src/file_analysis/analyzer/x509/CMakeFiles/plugin-Bro-X509.dir/all' failed
make[2]: *** [src/file_analysis/analyzer/x509/CMakeFiles/plugin-Bro-X509.dir/all] Error 2
make[2]: Leaving directory '/root/Downloads/bro-2.5/build'
Makefile:149: recipe for target 'all' failed
make[1]: *** [all] Error 2
make[1]: Leaving directory '/root/Downloads/bro-2.5/build'
Makefile:15: recipe for target 'all' failed
make: *** [all] Error 2

Attachments

Issue links

relates to

BIT-1918 'Make' failure during Building CXX objects X509.cc.o & OCSP.cc.o

Closed

Activity

People

Assignee:

Johanna Amann

Reporter:

jeff bara

Votes:

0 Vote for this issue

Watchers:

4 Start watching this issue

Dates

Created:

27/Dec/16 9:30 PM

Updated:

31/Jul/18 6:19 AM

Resolved:

31/Jul/18 6:19 AM