Tapas Linux Blog: Installing Psiphon on Debian 10 challenges

Trying to install psiphon in Debian 10

I am trying to install psiphon on Debian 10 based on instructions here
https://askubuntu.com/questions/637568/how-do-i-install-psiphon-on-ubuntu-14-04-lts-step-by-step

I did a $ git clone https://github.com/thispc/psiphon.git
then cd psiphon
Open README.md for instructions
did sudo apt-get install python-pip it went without errors .
https://pastebin.com/X8HnAZry
this is how files look like did a simple ls
https://pastebin.com/mFi85PBp

then ./configure came across error
configure: error: *** zlib.h missing - please install first or check
config.log ***
https://pastebin.com/ANGa0c7q
to get rid of above error I did
sudo apt-get install libz-dev
Then I did ./configure and found a new error

configure: error: *** OpenSSL headers missing
full message can be seen here
https://pastebin.com/9XFUYZkk
I then tried doing
debian@debian:~/psiphon/openssh-5.9p1$ sudo apt-get install openssl

Reading package lists... Done
Building dependency tree
Reading state information... Done
openssl is already the newest version (1.1.1c-1).
openssl set to manually installed.
The following packages were automatically installed and are no longer required:
ethtool libdumbnet1 libmspack0 libxmlsec1-openssl zerofree
Use 'sudo apt autoremove' to remove them.
0 upgraded, 0 newly installed, 0 to remove and 76 not upgraded.

So I did sudo apt autoremove and then
debian@debian:~/psiphon/openssh-5.9p1$ ./configure

checking openssl/opensslv.h usability... no
checking openssl/opensslv.h presence... no
checking for openssl/opensslv.h... no
configure: error: *** OpenSSL headers missing - please install first
or check config.log ***

so it appears openssl is installed to latest version. So now what more
should I do so that I
don't get openssl header missing error,
while installing psiphon on Debian 10.
I read this page https://wiki.openssl.org/index.php/Compilation_and_Installation
and this page https://stackoverflow.com/questions/29858870/build-openssl-with-rpath
but could not understand what changes should I make on my system for
psiphon (https://github.com/thispc/psiphon.git)
to be installed.

after installing libssl-dev zlib

checking whether snprintf correctly terminates long strings... yes

checking whether snprintf can declare const char *fmt... yes

checking whether system supports SO_PEERCRED getsockopt... yes

checking for (overly) strict mkstemp... yes

checking if openpty correctly handles controlling tty... yes

checking whether getpgrp requires zero arguments... yes

checking OpenSSL header version... 1010103f (OpenSSL 1.1.1c 28 May 2019)

checking OpenSSL library version... 1010103f (OpenSSL 1.1.1c 28 May 2019)

checking whether OpenSSL's headers match the library... no

configure: error: Your OpenSSL headers do not match your

library. Check config.log for details.

If you are sure your installation is consistent, you can disable the check

by running "./configure --without-openssl-header-check".

Also see contrib/findssl.sh for help identifying header/library mismatches.

I executed command ./configure –without-openssl-header-check

OpenSSH has been configured with the following options:

User binaries: /usr/local/bin

System binaries: /usr/local/sbin

Configuration files: /usr/local/etc

Askpass program: /usr/local/libexec/ssh-askpass

Manual pages: /usr/local/share/man/manX

PID file: /var/run

Privilege separation chroot path: /var/empty

sshd default user PATH: /usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin

Manpage format: doc

PAM support: no

OSF SIA support: no

KerberosV support: no

SELinux support: no

Smartcard support:

S/KEY support: no

TCP Wrappers support: no

MD5 password support: no

libedit support: no

Solaris process contract support: no

Solaris project support: no

IP address in $DISPLAY hack: no

Translate v4 in v6 hack: yes

BSD Auth support: no

Random number source: OpenSSL internal ONLY

Privsep sandbox style: rlimit

Host: x86_64-unknown-linux-gnu

Compiler: gcc

Compiler flags: -g -O2 -Wall -Wpointer-arith -Wuninitialized -Wsign-compare -Wformat-security -Wno-pointer-sign -Wno-unused-result -fno-strict-aliasing -fno-builtin-memset -fstack-protector-all

Preprocessor flags:

Linker flags: -fstack-protector-all

Libraries: -lcrypto -ldl -lutil -lz -lnsl -lcrypt -lresolv

Now I did

debian@debian:~/psiphon/openssh-5.9p1$ make

conffile=`echo sshd_config.out | sed 's/.out$//'`; \

/usr/bin/sed -e 's|/etc/ssh/ssh_config|/usr/local/etc/ssh_config|g' -e 's|/etc/ssh/ssh_known_hosts|/usr/local/etc/ssh_known_hosts|g' -e 's|/etc/ssh/sshd_config|/usr/local/etc/sshd_config|g' -e 's|/usr/libexec|/usr/local/libexec|g' -e 's|/etc/shosts.equiv|/usr/local/etc/shosts.equiv|g' -e 's|/etc/ssh/ssh_host_key|/usr/local/etc/ssh_host_key|g' -e 's|/etc/ssh/ssh_host_ecdsa_key|/usr/local/etc/ssh_host_ecdsa_key|g' -e 's|/etc/ssh/ssh_host_dsa_key|/usr/local/etc/ssh_host_dsa_key|g' -e 's|/etc/ssh/ssh_host_rsa_key|/usr/local/etc/ssh_host_rsa_key|g' -e 's|/var/run/sshd.pid|/var/run/sshd.pid|g' -e 's|/etc/moduli|/usr/local/etc/moduli|g' -e 's|/etc/ssh/moduli|/usr/local/etc/moduli|g' -e 's|/etc/ssh/sshrc|/usr/local/etc/sshrc|g' -e 's|/usr/X11R6/bin/xauth|/usr/bin/xauth|g' -e 's|/var/empty|/var/empty|g' -e 's|/usr/bin:/bin:/usr/sbin:/sbin|/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin|g' ./${conffile} > sshd_config.out

conffile=`echo ssh_config.out | sed 's/.out$//'`; \

conffile=`echo moduli.out | sed 's/.out$//'`; \

if test "doc" = "cat"; then \

manpage=./`echo moduli.5.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo moduli.5.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo scp.1.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo scp.1.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo ssh-add.1.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo ssh-add.1.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo ssh-agent.1.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo ssh-agent.1.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo ssh-keygen.1.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo ssh-keygen.1.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo ssh-keyscan.1.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo ssh-keyscan.1.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo ssh.1.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo ssh.1.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo sshd.8.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo sshd.8.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo sftp-server.8.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo sftp-server.8.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo sftp.1.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo sftp.1.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo ssh-keysign.8.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo ssh-keysign.8.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo ssh-pkcs11-helper.8.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo ssh-pkcs11-helper.8.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo sshd_config.5.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo sshd_config.5.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo ssh_config.5.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo ssh_config.5.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

(cd openbsd-compat && make)

make[1]: Entering directory '/home/debian/psiphon/openssh-5.9p1/openbsd-compat'

fmt_scaled.c: In function ‘fmt_scaled’:

fmt_scaled.c:243:52: warning: ‘%1lld’ directive output may be truncated writing between 1 and 17 bytes into a region of size between 0 and 5 [-Wformat-truncation=]

(void)snprintf(result, FMT_SCALED_STRSIZE, "%lld.%1lld%c",

^~~~~

fmt_scaled.c:243:46: note: directive argument in the range [-9007199254740991, 9007199254740991]

(void)snprintf(result, FMT_SCALED_STRSIZE, "%lld.%1lld%c",

^~~~~~~~~~~~~~

fmt_scaled.c:243:9: note: ‘snprintf’ output between 5 and 40 bytes into a destination of size 7

(void)snprintf(result, FMT_SCALED_STRSIZE, "%lld.%1lld%c",

^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

number, fract, scale_chars[unit]);

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

/usr/bin/ar rv libopenbsd-compat.a bsd-arc4random.o bsd-asprintf.o bsd-closefrom.o bsd-cray.o bsd-cygwin_util.o bsd-getpeereid.o bsd-misc.o bsd-nextstep.o bsd-openpty.o bsd-poll.o bsd-snprintf.o bsd-statvfs.o bsd-waitpid.o fake-rfc2553.o openssl-compat.o xmmap.o xcrypt.o base64.o basename.o bindresvport.o daemon.o dirname.o fmt_scaled.o getcwd.o getgrouplist.o getopt.o getrrsetbyname.o glob.o inet_aton.o inet_ntoa.o inet_ntop.o mktemp.o pwcache.o readpassphrase.o realpath.o rresvport.o setenv.o setproctitle.o sha2.o sigact.o strlcat.o strlcpy.o strmode.o strptime.o strsep.o strtonum.o strtoll.o strtoul.o timingsafe_bcmp.o vis.o port-aix.o port-irix.o port-linux.o port-solaris.o port-tun.o port-uw.o

/usr/bin/ar: creating libopenbsd-compat.a

a - bsd-arc4random.o

a - bsd-asprintf.o

a - bsd-closefrom.o

a - bsd-cray.o

a - bsd-cygwin_util.o

a - bsd-getpeereid.o

a - bsd-misc.o

a - bsd-nextstep.o

a - bsd-openpty.o

a - bsd-poll.o

a - bsd-snprintf.o

a - bsd-statvfs.o

a - bsd-waitpid.o

a - fake-rfc2553.o

a - openssl-compat.o

a - xmmap.o

a - xcrypt.o

a - base64.o

a - basename.o

a - bindresvport.o

a - daemon.o

a - dirname.o

a - fmt_scaled.o

a - getcwd.o

a - getgrouplist.o

a - getopt.o

a - getrrsetbyname.o

a - glob.o

a - inet_aton.o

a - inet_ntoa.o

a - inet_ntop.o

a - mktemp.o

a - pwcache.o

a - readpassphrase.o

a - realpath.o

a - rresvport.o

a - setenv.o

a - setproctitle.o

a - sha2.o

a - sigact.o

a - strlcat.o

a - strlcpy.o

a - strmode.o

a - strptime.o

a - strsep.o

a - strtonum.o

a - strtoll.o

a - strtoul.o

a - timingsafe_bcmp.o

a - vis.o

a - port-aix.o

a - port-irix.o

a - port-linux.o

a - port-solaris.o

a - port-tun.o

a - port-uw.o

ranlib libopenbsd-compat.a

make[1]: Leaving directory '/home/debian/psiphon/openssh-5.9p1/openbsd-compat'

gcc -g -O2 -Wall -Wpointer-arith -Wuninitialized -Wsign-compare -Wformat-security -Wno-pointer-sign -Wno-unused-result -fno-strict-aliasing -fno-builtin-memset -fstack-protector-all -I. -I. -DSSHDIR=\"/usr/local/etc\" -D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\" -D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\" -D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\" -D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\" -D_PATH_SSH_PKCS11_HELPER=\"/usr/local/libexec/ssh-pkcs11-helper\" -D_PATH_SSH_PIDDIR=\"/var/run\" -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" -DHAVE_CONFIG_H -c acss.c

In file included from authfd.c:60:

cipher.h:67:17: error: field ‘evp’ has incomplete type

EVP_CIPHER_CTX evp;

^~~

In file included from authfd.c:61:

kex.h:104:11: error: field ‘evp_ctx’ has incomplete type

HMAC_CTX evp_ctx;

^~~~~~~

authfd.c: In function ‘ssh_get_next_identity’:

authfd.c:334:48: error: dereferencing pointer to incomplete type ‘RSA’ {aka ‘struct rsa_st’}

buffer_get_bignum(&auth->identities, key->rsa->e);

authfd.c: In function ‘ssh_encode_identity_ssh2’:

authfd.c:499:33: error: dereferencing pointer to incomplete type ‘DSA’ {aka ‘struct dsa_st’}

buffer_put_bignum2(b, key->dsa->p);

make: *** [Makefile:129: authfd.o] Error 1

Stuck here

5 comments:

Norton Setup said...: If you are stuck with your device and need expert solution, then reach our antivirus customer support number now.
Antivirus Technical Support
Antivirus Tollfree Number; March 5, 2021 at 5:51 PM
Promote Abhi - Business Chalega Tabhi/Startup Development Company said...: https://www.reddit.com/user/govermentj0bs/comments/otrai6/government_jobs_in_india_better_career_improved/?utm_source=share&utm_medium=web2x&context=3
Independant Call Girls in Delhi
Brother Printer Troubleshooting
Icloud SMTP Server Setup
Avast Antivirus Help
Delhi Escort Services
Government Jobs in India; July 29, 2021 at 10:07 PM
Pandora customer support number said...: Buy indoor plants online near dwarka, new delhi - Birthright offers indoor plants for home online in India. At our online nursery, We have a team of talented brand shapers who have the capability, passion and knowledge to deal with clients.
As a Graphic Design Services In India, We have a team of talented and Creative Graphic Designers to Create Custom Graphics.
Get contact details and address of Renovation Services, Renovation Works firms and a home renovation services is Negotiable.
Use the Blink Monitor App for Android to check in on what's happening at home from anywhere at any time. The app connects your home to your phone in HD video
Getlisting Provides Complete Solution If You Facing The PlentyOfFish (POF). Can't log in? Issues in United States. If your file is being reviewed for some reason, such as being reported by another Plenty of Fish user, your account might be temporarily suspended while the company investigates.; January 17, 2022 at 9:27 PM
Bharathi said...: Hii
Established in 2012, BIG DATA Central has emerged as one of the foremost and rapidly expanding online communities for data practitioners in the industry. Here is sharing some ForgeRock Training information may be its helpful to you.
ForgeRock Training; July 6, 2023 at 4:07 PM
Bharathi said...: Hii
Thank you for the informative article. I thoroughly enjoyed reading your blog. Your posts were not only engaging but also quite fascinating. In fact, after going through them, I couldn't resist sharing them with my friend, and to my delight, they also found your content to be truly enjoyable! Here is sharing some Apache Spark and Scala Training journey information may be its helpful to you.
Apache Spark and Scala Training; November 6, 2023 at 5:12 PM

Monday, September 9, 2019

Installing Psiphon on Debian 10 challenges

5 comments: