[Oisf-users] Suricata 1.4, problem enabling nss for MD5 on Fedora Core 17

[Victor Julien]

On 02/27/2013 02:02 AM, Vincent Fang wrote:
> Sorry for the spam, I should have been more thorough and included the
> command I'm running for the configure on the Fedora Core 17 Suricata 1.4
> 
> ./configure --with-libnss-libraries=/usr/lib64
> --with-libnspr-libraries=/usr/lib64
> --with-libnss-includes=/usr/include/nss3
> --with-libnspr-includes=/usr/include/nspr4
> 
> From what you stated Marcos I don't think I'm missing anything in terms
> of parameters and options.

On F17_64 I did:

./configure --prefix=/usr/ --sysconfdir=/etc/ --localstatedir=/var/
--disable-gccmarch-native --with-libnss-libraries=/usr/lib64
--with-libnspr-libraries=/usr/lib64
--with-libnss-includes=/usr/include/nss3
--with-libnspr-includes=/usr/include/nspr4 && make clean && make

checking nspr.h usability... yes
checking nspr.h presence... yes
checking for nspr.h... yes
checking for PR_GetCurrentThread in -lnspr4... yes
checking sechash.h usability... yes
checking sechash.h presence... yes
checking for sechash.h... yes
checking for HASH_Begin in -lnss3... yes

  libnss support:                          yes
  libnspr support:                         yes

configure is happy.

Suri too:
This is Suricata version 1.4dev (rev ff2b800)
Features: PCAP_SET_BUFF LIBPCAP_VERSION_MAJOR=1 AF_PACKET
HAVE_PACKET_FANOUT LIBCAP_NG HAVE_HTP_URI_NORMALIZE_HOOK
HAVE_HTP_TX_GET_RESPONSE_HEADERS_RAW PCRE_JIT *HAVE_NSS*

Please attach your config.log if you continue to have issues with this.

Cheers,
Victor

> 
> On Tue, Feb 26, 2013 at 8:00 PM, Vincent Fang <vincent.y.fang at gmail.com
> <mailto:vincent.y.fang at gmail.com>> wrote:
> 
>     Thanks guys for your input and responses. Marcos, I'm noticing in
>     your ./configure you're not including the --with-libnspr-libraries
>     and --with-libnss-libraries and it still works for you with the MD5
>     hashing when Suricata does file extractions and puts the MD5 has in
>     the meta files?
> 
> 
>     On Tue, Feb 26, 2013 at 7:27 PM, Marcos Rodriguez
>     <marcos.e.rodriguez at gmail.com <mailto:marcos.e.rodriguez at gmail.com>>
>     wrote:
> 
>         Very interesting, guys.  I'm on FC16 x86_64, and am not seeing
>         that with the latest git:
> 
>         Here's my configure line:
> 
>         ./configure --prefix=`pwd` --enable-unittests --enable-af-packet
>         --with-libnspr-includes=/usr/include/nspr4
>         --with-libnss-includes=/usr/include/nss3 --with-luajit
>         --enable-nfqueue
> 
> 
>         libnss support:                          yes
>         libnspr support:                         yes
> 
> 
>         Same results with latest released suricata-1.4:
> 
>         libnss support:                          yes
>         libnspr support:                         yes
> 
> 
>         I can spin up my FC17 quickly and see if anything changes.  Let
>         you know shortly. 
> 
> 
> 
> 
> 
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> OISF: http://www.openinfosecfoundation.org/
> 


-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------