[Oisf-users] Suricata 1.4, problem enabling nss for MD5 on Fedora Core 17

[Vincent Fang]

I found the issue. In the instructions it says you need the following
packages for Fedora

nss-util
nss-util-devel
nspr
nspr-util

What it doesn't mention is that you also need
nss-devel

and my configure works now with libnss support being yes now. Here's the
previous config log of my error but my command

./configure --with-libnspr-libraries=/usr/lib64
--with-libnss-libraries=/usr/lib64
--with-libnspr-includes=/usr/include/nspr4
--with-libnss-includes=/usr/include/nss3

works now.



On Wed, Feb 27, 2013 at 6:23 AM, Victor Julien <lists at inliniac.net> wrote:

> On 02/27/2013 02:02 AM, Vincent Fang wrote:
> > Sorry for the spam, I should have been more thorough and included the
> > command I'm running for the configure on the Fedora Core 17 Suricata 1.4
> >
> > ./configure --with-libnss-libraries=/usr/lib64
> > --with-libnspr-libraries=/usr/lib64
> > --with-libnss-includes=/usr/include/nss3
> > --with-libnspr-includes=/usr/include/nspr4
> >
> > From what you stated Marcos I don't think I'm missing anything in terms
> > of parameters and options.
>
> On F17_64 I did:
>
> ./configure --prefix=/usr/ --sysconfdir=/etc/ --localstatedir=/var/
> --disable-gccmarch-native --with-libnss-libraries=/usr/lib64
> --with-libnspr-libraries=/usr/lib64
> --with-libnss-includes=/usr/include/nss3
> --with-libnspr-includes=/usr/include/nspr4 && make clean && make
>
> checking nspr.h usability... yes
> checking nspr.h presence... yes
> checking for nspr.h... yes
> checking for PR_GetCurrentThread in -lnspr4... yes
> checking sechash.h usability... yes
> checking sechash.h presence... yes
> checking for sechash.h... yes
> checking for HASH_Begin in -lnss3... yes
>
>   libnss support:                          yes
>   libnspr support:                         yes
>
> configure is happy.
>
> Suri too:
> This is Suricata version 1.4dev (rev ff2b800)
> Features: PCAP_SET_BUFF LIBPCAP_VERSION_MAJOR=1 AF_PACKET
> HAVE_PACKET_FANOUT LIBCAP_NG HAVE_HTP_URI_NORMALIZE_HOOK
> HAVE_HTP_TX_GET_RESPONSE_HEADERS_RAW PCRE_JIT *HAVE_NSS*
>
> Please attach your config.log if you continue to have issues with this.
>
> Cheers,
> Victor
>
> >
> > On Tue, Feb 26, 2013 at 8:00 PM, Vincent Fang <vincent.y.fang at gmail.com
> > <mailto:vincent.y.fang at gmail.com>> wrote:
> >
> >     Thanks guys for your input and responses. Marcos, I'm noticing in
> >     your ./configure you're not including the --with-libnspr-libraries
> >     and --with-libnss-libraries and it still works for you with the MD5
> >     hashing when Suricata does file extractions and puts the MD5 has in
> >     the meta files?
> >
> >
> >     On Tue, Feb 26, 2013 at 7:27 PM, Marcos Rodriguez
> >     <marcos.e.rodriguez at gmail.com <mailto:marcos.e.rodriguez at gmail.com>>
> >     wrote:
> >
> >         Very interesting, guys.  I'm on FC16 x86_64, and am not seeing
> >         that with the latest git:
> >
> >         Here's my configure line:
> >
> >         ./configure --prefix=`pwd` --enable-unittests --enable-af-packet
> >         --with-libnspr-includes=/usr/include/nspr4
> >         --with-libnss-includes=/usr/include/nss3 --with-luajit
> >         --enable-nfqueue
> >
> >
> >         libnss support:                          yes
> >         libnspr support:                         yes
> >
> >
> >         Same results with latest released suricata-1.4:
> >
> >         libnss support:                          yes
> >         libnspr support:                         yes
> >
> >
> >         I can spin up my FC17 quickly and see if anything changes.  Let
> >         you know shortly.
> >
> >
> >
> >
> >
> > _______________________________________________
> > Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> > Site: http://suricata-ids.org | Support:
> http://suricata-ids.org/support/
> > List:
> https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> > OISF: http://www.openinfosecfoundation.org/
> >
>
>
> --
> ---------------------------------------------
> Victor Julien
> http://www.inliniac.net/
> PGP: http://www.inliniac.net/victorjulien.asc
> ---------------------------------------------
>
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> OISF: http://www.openinfosecfoundation.org/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20130227/a3f17008/attachment-0002.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: config.log.nsserror
Type: application/octet-stream
Size: 100503 bytes
Desc: not available
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20130227/a3f17008/attachment-0002.obj>