Proftpd compile problem

[security]

Bliss, Aaron a écrit :
> Yep, your right, I'm attempting to address the listed vulnerability;
> I've actually decided to just go with vsftpd as with version 2 and
> above, it support tls.  
>
> Aaron 
>   

If you're using RHAS3 / Centos3, you can install or rebuild this package:

http://www.gralinux.org/gralinux/AS3/i686/update/proftpd-1.3.0a-2gral.i686.rpm 
(for RHEL3/CentOS and RHEL3 clones)

srpm (compile without problem on RHEL4):
http://www.gralinux.org/gralinux/AS3/i686/SRPMS/proftpd-1.3.0a-2gral.src.rpm


Advisory:
http://lists.gralinux.org/pipermail/gralinux-security/2006-December/000009.html

Regards

js.



> -----Original Message-----
> From: redhat-list-bounces at redhat.com
> [mailto:redhat-list-bounces at redhat.com] On Behalf Of Rilindo Foster
> Sent: Monday, January 08, 2007 11:46 AM
> To: General Red Hat Linux discussion list
> Subject: Re: Proftpd compile problem
>
> I assume that you're following the instructions right here:
>
> http://www.castaglia.org/proftpd/modules/mod_tls.html
>
> /configure --with-modules=mod_tls \
>      --with-includes=/usr/local/openssl \
>      --with-libraries=/usr/local/openssl
>
> Paths, of course, would be different on your machine.
>
> It sounds like it requires a specific openSSL version, but I am not  
> sure why it would break against the Red Hat installed version of  
> OpenSSL.
>
> If it is to address this vulnerability:
>
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5815
>
> Then maybe you can download the source problem from Red Hat site  
> (which, at this point, appear to have the updated packages) and then  
> compile that  with mod_tls support.
>
> On Jan 8, 2007, at 9:22 AM, Bliss, Aaron wrote:
>
>   
>> Hi everyone,
>> I'm attempting to compile proftpd 1.3.0a with mod_tls support; after
>> running make, I receive the following error; I have the following
>> openssl rpm's installed; any ideas?  Thanks very much
>>
>> openssl-0.9.7a-33.21
>> openssl-devel-0.9.7a-33.21
>>
>> Error:
>>
>> In file included from /usr/include/openssl/ssl.h:179,
>>                  from mod_tls.c:40:
>> /usr/include/openssl/kssl.h:72:18: krb5.h: No such file or directory
>> In file included from /usr/include/openssl/ssl.h:179,
>>                  from mod_tls.c:40:
>> /usr/include/openssl/kssl.h:134: syntax error before "krb5_enctype"
>> /usr/include/openssl/kssl.h:136: syntax error before '*' token
>> /usr/include/openssl/kssl.h:137: syntax error before '}' token
>> /usr/include/openssl/kssl.h:149: syntax error before
>> "kssl_ctx_setstring"
>> /usr/include/openssl/kssl.h:149: syntax error before '*' token
>> /usr/include/openssl/kssl.h:150: syntax error before '*' token
>> /usr/include/openssl/kssl.h:151: syntax error before '*' token
>> /usr/include/openssl/kssl.h:151: syntax error before '*' token
>> /usr/include/openssl/kssl.h:152: syntax error before '*' token
>> /usr/include/openssl/kssl.h:153: syntax error before  
>> "kssl_ctx_setprinc"
>> /usr/include/openssl/kssl.h:153: syntax error before '*' token
>> /usr/include/openssl/kssl.h:155: syntax error before "kssl_cget_tkt"
>> /usr/include/openssl/kssl.h:155: syntax error before '*' token
>> /usr/include/openssl/kssl.h:157: syntax error before "kssl_sget_tkt"
>> /usr/include/openssl/kssl.h:157: syntax error before '*' token
>> /usr/include/openssl/kssl.h:159: syntax error before "kssl_ctx_setkey"
>> /usr/include/openssl/kssl.h:159: syntax error before '*' token
>> /usr/include/openssl/kssl.h:161: syntax error before "context"
>> /usr/include/openssl/kssl.h:162: syntax error before
>> "kssl_build_principal_2"
>> /usr/include/openssl/kssl.h:162: syntax error before "context"
>> /usr/include/openssl/kssl.h:165: syntax error before
>> "kssl_validate_times"
>> /usr/include/openssl/kssl.h:165: syntax error before "atime"
>> /usr/include/openssl/kssl.h:167: syntax error before
>> "kssl_check_authent"
>> /usr/include/openssl/kssl.h:167: syntax error before '*' token
>> /usr/include/openssl/kssl.h:169: syntax error before "enctype"
>> In file included from mod_tls.c:40:
>> /usr/include/openssl/ssl.h:909: syntax error before "KSSL_CTX"
>> /usr/include/openssl/ssl.h:931: syntax error before '}' token
>> make[1]: *** [mod_tls.o] Error 1
>> make[1]: Leaving directory `/home/awb/proftpd-1.3.0a/modules'
>> make: *** [modules] Error 2
>>
>> Confidentiality Notice:
>> The information contained in this electronic message is intended  
>> for the exclusive use of the individual or entity named above and  
>> may contain privileged or confidential information.  If the reader  
>> of this message is not the intended recipient or the employee or  
>> agent responsible to deliver it to the intended recipient, you are  
>> hereby notified that dissemination, distribution or copying of this  
>> information is prohibited.  If you have received this communication  
>> in error, please notify the sender immediately by telephone and  
>> destroy the copies you received.
>>
>>
>> --
>> redhat-list mailing list
>> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
>> https://www.redhat.com/mailman/listinfo/redhat-list
>>     
>
>