Tapas Linux Blog: September 2019

Trying to install psiphon in Debian 10

I am trying to install psiphon on Debian 10 based on instructions here
https://askubuntu.com/questions/637568/how-do-i-install-psiphon-on-ubuntu-14-04-lts-step-by-step

I did a $ git clone https://github.com/thispc/psiphon.git
then cd psiphon
Open README.md for instructions
did sudo apt-get install python-pip it went without errors .
https://pastebin.com/X8HnAZry
this is how files look like did a simple ls
https://pastebin.com/mFi85PBp

then ./configure came across error
configure: error: *** zlib.h missing - please install first or check
config.log ***
https://pastebin.com/ANGa0c7q
to get rid of above error I did
sudo apt-get install libz-dev
Then I did ./configure and found a new error

configure: error: *** OpenSSL headers missing
full message can be seen here
https://pastebin.com/9XFUYZkk
I then tried doing
debian@debian:~/psiphon/openssh-5.9p1$ sudo apt-get install openssl

Reading package lists... Done
Building dependency tree
Reading state information... Done
openssl is already the newest version (1.1.1c-1).
openssl set to manually installed.
The following packages were automatically installed and are no longer required:
ethtool libdumbnet1 libmspack0 libxmlsec1-openssl zerofree
Use 'sudo apt autoremove' to remove them.
0 upgraded, 0 newly installed, 0 to remove and 76 not upgraded.

So I did sudo apt autoremove and then
debian@debian:~/psiphon/openssh-5.9p1$ ./configure

checking openssl/opensslv.h usability... no
checking openssl/opensslv.h presence... no
checking for openssl/opensslv.h... no
configure: error: *** OpenSSL headers missing - please install first
or check config.log ***

so it appears openssl is installed to latest version. So now what more
should I do so that I
don't get openssl header missing error,
while installing psiphon on Debian 10.
I read this page https://wiki.openssl.org/index.php/Compilation_and_Installation
and this page https://stackoverflow.com/questions/29858870/build-openssl-with-rpath
but could not understand what changes should I make on my system for
psiphon (https://github.com/thispc/psiphon.git)
to be installed.

after installing libssl-dev zlib

checking whether snprintf correctly terminates long strings... yes

checking whether snprintf can declare const char *fmt... yes

checking whether system supports SO_PEERCRED getsockopt... yes

checking for (overly) strict mkstemp... yes

checking if openpty correctly handles controlling tty... yes

checking whether getpgrp requires zero arguments... yes

checking OpenSSL header version... 1010103f (OpenSSL 1.1.1c 28 May 2019)

checking OpenSSL library version... 1010103f (OpenSSL 1.1.1c 28 May 2019)

checking whether OpenSSL's headers match the library... no

configure: error: Your OpenSSL headers do not match your

library. Check config.log for details.

If you are sure your installation is consistent, you can disable the check

by running "./configure --without-openssl-header-check".

Also see contrib/findssl.sh for help identifying header/library mismatches.

I executed command ./configure –without-openssl-header-check

OpenSSH has been configured with the following options:

User binaries: /usr/local/bin

System binaries: /usr/local/sbin

Configuration files: /usr/local/etc

Askpass program: /usr/local/libexec/ssh-askpass

Manual pages: /usr/local/share/man/manX

PID file: /var/run

Privilege separation chroot path: /var/empty

sshd default user PATH: /usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin

Manpage format: doc

PAM support: no

OSF SIA support: no

KerberosV support: no

SELinux support: no

Smartcard support:

S/KEY support: no

TCP Wrappers support: no

MD5 password support: no

libedit support: no

Solaris process contract support: no

Solaris project support: no

IP address in $DISPLAY hack: no

Translate v4 in v6 hack: yes

BSD Auth support: no

Random number source: OpenSSL internal ONLY

Privsep sandbox style: rlimit

Host: x86_64-unknown-linux-gnu

Compiler: gcc

Compiler flags: -g -O2 -Wall -Wpointer-arith -Wuninitialized -Wsign-compare -Wformat-security -Wno-pointer-sign -Wno-unused-result -fno-strict-aliasing -fno-builtin-memset -fstack-protector-all

Preprocessor flags:

Linker flags: -fstack-protector-all

Libraries: -lcrypto -ldl -lutil -lz -lnsl -lcrypt -lresolv

Now I did

debian@debian:~/psiphon/openssh-5.9p1$ make

conffile=`echo sshd_config.out | sed 's/.out$//'`; \

/usr/bin/sed -e 's|/etc/ssh/ssh_config|/usr/local/etc/ssh_config|g' -e 's|/etc/ssh/ssh_known_hosts|/usr/local/etc/ssh_known_hosts|g' -e 's|/etc/ssh/sshd_config|/usr/local/etc/sshd_config|g' -e 's|/usr/libexec|/usr/local/libexec|g' -e 's|/etc/shosts.equiv|/usr/local/etc/shosts.equiv|g' -e 's|/etc/ssh/ssh_host_key|/usr/local/etc/ssh_host_key|g' -e 's|/etc/ssh/ssh_host_ecdsa_key|/usr/local/etc/ssh_host_ecdsa_key|g' -e 's|/etc/ssh/ssh_host_dsa_key|/usr/local/etc/ssh_host_dsa_key|g' -e 's|/etc/ssh/ssh_host_rsa_key|/usr/local/etc/ssh_host_rsa_key|g' -e 's|/var/run/sshd.pid|/var/run/sshd.pid|g' -e 's|/etc/moduli|/usr/local/etc/moduli|g' -e 's|/etc/ssh/moduli|/usr/local/etc/moduli|g' -e 's|/etc/ssh/sshrc|/usr/local/etc/sshrc|g' -e 's|/usr/X11R6/bin/xauth|/usr/bin/xauth|g' -e 's|/var/empty|/var/empty|g' -e 's|/usr/bin:/bin:/usr/sbin:/sbin|/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin|g' ./${conffile} > sshd_config.out

conffile=`echo ssh_config.out | sed 's/.out$//'`; \

conffile=`echo moduli.out | sed 's/.out$//'`; \

if test "doc" = "cat"; then \

manpage=./`echo moduli.5.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo moduli.5.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo scp.1.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo scp.1.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo ssh-add.1.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo ssh-add.1.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo ssh-agent.1.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo ssh-agent.1.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo ssh-keygen.1.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo ssh-keygen.1.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo ssh-keyscan.1.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo ssh-keyscan.1.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo ssh.1.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo ssh.1.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo sshd.8.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo sshd.8.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo sftp-server.8.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo sftp-server.8.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo sftp.1.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo sftp.1.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo ssh-keysign.8.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo ssh-keysign.8.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo ssh-pkcs11-helper.8.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo ssh-pkcs11-helper.8.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo sshd_config.5.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo sshd_config.5.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

if test "doc" = "cat"; then \

manpage=./`echo ssh_config.5.out | sed 's/\.[1-9]\.out$/\.0/'`; \

else \

manpage=./`echo ssh_config.5.out | sed 's/\.out$//'`; \

fi; \

if test "doc" = "man"; then \

else \

(cd openbsd-compat && make)

make[1]: Entering directory '/home/debian/psiphon/openssh-5.9p1/openbsd-compat'

fmt_scaled.c: In function ‘fmt_scaled’:

fmt_scaled.c:243:52: warning: ‘%1lld’ directive output may be truncated writing between 1 and 17 bytes into a region of size between 0 and 5 [-Wformat-truncation=]

(void)snprintf(result, FMT_SCALED_STRSIZE, "%lld.%1lld%c",

^~~~~

fmt_scaled.c:243:46: note: directive argument in the range [-9007199254740991, 9007199254740991]

(void)snprintf(result, FMT_SCALED_STRSIZE, "%lld.%1lld%c",

^~~~~~~~~~~~~~

fmt_scaled.c:243:9: note: ‘snprintf’ output between 5 and 40 bytes into a destination of size 7

(void)snprintf(result, FMT_SCALED_STRSIZE, "%lld.%1lld%c",

^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

number, fract, scale_chars[unit]);

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

/usr/bin/ar rv libopenbsd-compat.a bsd-arc4random.o bsd-asprintf.o bsd-closefrom.o bsd-cray.o bsd-cygwin_util.o bsd-getpeereid.o bsd-misc.o bsd-nextstep.o bsd-openpty.o bsd-poll.o bsd-snprintf.o bsd-statvfs.o bsd-waitpid.o fake-rfc2553.o openssl-compat.o xmmap.o xcrypt.o base64.o basename.o bindresvport.o daemon.o dirname.o fmt_scaled.o getcwd.o getgrouplist.o getopt.o getrrsetbyname.o glob.o inet_aton.o inet_ntoa.o inet_ntop.o mktemp.o pwcache.o readpassphrase.o realpath.o rresvport.o setenv.o setproctitle.o sha2.o sigact.o strlcat.o strlcpy.o strmode.o strptime.o strsep.o strtonum.o strtoll.o strtoul.o timingsafe_bcmp.o vis.o port-aix.o port-irix.o port-linux.o port-solaris.o port-tun.o port-uw.o

/usr/bin/ar: creating libopenbsd-compat.a

a - bsd-arc4random.o

a - bsd-asprintf.o

a - bsd-closefrom.o

a - bsd-cray.o

a - bsd-cygwin_util.o

a - bsd-getpeereid.o

a - bsd-misc.o

a - bsd-nextstep.o

a - bsd-openpty.o

a - bsd-poll.o

a - bsd-snprintf.o

a - bsd-statvfs.o

a - bsd-waitpid.o

a - fake-rfc2553.o

a - openssl-compat.o

a - xmmap.o

a - xcrypt.o

a - base64.o

a - basename.o

a - bindresvport.o

a - daemon.o

a - dirname.o

a - fmt_scaled.o

a - getcwd.o

a - getgrouplist.o

a - getopt.o

a - getrrsetbyname.o

a - glob.o

a - inet_aton.o

a - inet_ntoa.o

a - inet_ntop.o

a - mktemp.o

a - pwcache.o

a - readpassphrase.o

a - realpath.o

a - rresvport.o

a - setenv.o

a - setproctitle.o

a - sha2.o

a - sigact.o

a - strlcat.o

a - strlcpy.o

a - strmode.o

a - strptime.o

a - strsep.o

a - strtonum.o

a - strtoll.o

a - strtoul.o

a - timingsafe_bcmp.o

a - vis.o

a - port-aix.o

a - port-irix.o

a - port-linux.o

a - port-solaris.o

a - port-tun.o

a - port-uw.o

ranlib libopenbsd-compat.a

make[1]: Leaving directory '/home/debian/psiphon/openssh-5.9p1/openbsd-compat'

gcc -g -O2 -Wall -Wpointer-arith -Wuninitialized -Wsign-compare -Wformat-security -Wno-pointer-sign -Wno-unused-result -fno-strict-aliasing -fno-builtin-memset -fstack-protector-all -I. -I. -DSSHDIR=\"/usr/local/etc\" -D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\" -D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\" -D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\" -D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\" -D_PATH_SSH_PKCS11_HELPER=\"/usr/local/libexec/ssh-pkcs11-helper\" -D_PATH_SSH_PIDDIR=\"/var/run\" -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" -DHAVE_CONFIG_H -c acss.c

In file included from authfd.c:60:

cipher.h:67:17: error: field ‘evp’ has incomplete type

EVP_CIPHER_CTX evp;

^~~

In file included from authfd.c:61:

kex.h:104:11: error: field ‘evp_ctx’ has incomplete type

HMAC_CTX evp_ctx;

^~~~~~~

authfd.c: In function ‘ssh_get_next_identity’:

authfd.c:334:48: error: dereferencing pointer to incomplete type ‘RSA’ {aka ‘struct rsa_st’}

buffer_get_bignum(&auth->identities, key->rsa->e);

authfd.c: In function ‘ssh_encode_identity_ssh2’:

authfd.c:499:33: error: dereferencing pointer to incomplete type ‘DSA’ {aka ‘struct dsa_st’}

buffer_put_bignum2(b, key->dsa->p);

make: *** [Makefile:129: authfd.o] Error 1

Stuck here

Tapas Linux Blog

Monday, September 9, 2019

Installing Psiphon on Debian 10 challenges