• Registered: 2022-07-12
  • Posts: 10

Topic: Unable to enable RNG on wolfssl version 5.6.3

Hello All,

We are using WOLFSSL version 5.6.3-stable.
Compiling the wolfssl for x86 and arm arch and we are facing the compilation issue on enabling RNG.

Configure command that we are using to compile wolfssl for x86 arch:
./configure  --prefix=/home/wolfssl/ --enable-static --enable-opensslall --enable-pkcs7 --enable-debug --enable-singlethreaded --disable-pkcs8 --disable-dh --disable-poly1305 --disable-md5 --disable-sha224 --disable-sha384 --disable-sha3 --disable-chacha --disable-examples --disable-crypttests --disable-benchmark --disable-tls13 --disable-harden --disable-aligndata --disable-eccshamir --disable-errorstrings --disable-errorqueue --disable-oldtls --disable-secure-renegotiation-info --disable-extended-master --disable-enc-then-mac --disable-asyncthreads --disable-ocsp --disable-rsa --disable-hashdrbg --disable-base64encode --disable-supportedcurves --disable-memory --disable-tlsv12 --disable-aesgcm --disable-pkcs12 CFLAGS="-DNO_WOLFSSL_CLIENT -DNO_WOLFSSL_SERVER -DNO_TLS -DNO_SHA -DNO_PWDBASED -DNO_SESSION_CACHE -DSMALL_SESSION_CACHE -DNO_DEV_URANDOM -DWOLFSSL_NO_SIGALG -DWOLFSSL_SP_NO_2048 -DWOLFSSL_SP_NO_3072 -DWOLFSSL_SP_NO_256 -DNO_RESUME_SUITE_CHECK -DWOLFSSL_AEAD_ONLY -DNO_FILESYSTEM -DNO_ASN_TIME -DNO_WOLSSL_IO -fPIC"

For arm arch:
./configure --host=arm-linux-gnueabihf --prefix=/home/wolfssl --disable-dependency-tracking --enable-static --enable-opensslall --enable-pkcs7 --enable-debug --enable-singlethreaded --disable-pkcs8 --disable-dh --disable-poly1305 --disable-md5 --disable-sha224 --disable-sha384 --disable-sha3 --disable-chacha --disable-examples --disable-crypttests --disable-benchmark --disable-tls13 --disable-harden --disable-aligndata --disable-eccshamir --disable-errorstrings --disable-errorqueue --disable-oldtls --disable-secure-renegotiation-info --disable-extended-master --disable-enc-then-mac --disable-asyncthreads --disable-ocsp --disable-rsa --disable-hashdrbg --disable-base64encode --disable-supportedcurves --disable-memory --disable-tlsv12 --disable-aesgcm --disable-pkcs12  --srcdir=/home/anika/git/linux-kernel/bootloader/wolfssl/wolfssl --enable-sys-ca-certs=no --enable-error-queue-per-thread=no --enable-x963kdf=no --enable-pwdbased=no --enable-oldnames=no --enable-filesystem=no --enable-debug=no CFLAGS="-DNO_WOLFSSL_CLIENT -DNO_WOLFSSL_SERVER -DNO_TLS -DNO_SHA -DNO_PWDBASED -DNO_SESSION_CACHE -DSMALL_SESSION_CACHE -DNO_DEV_URANDOM -DWOLFSSL_NO_SIGALG -DWOLFSSL_SP_NO_2048 -DWOLFSSL_SP_NO_3072 -DWOLFSSL_SP_NO_256 -DNO_RESUME_SUITE_CHECK -DWOLFSSL_AEAD_ONLY -DNO_FILESYSTEM -DNO_ASN_TIME -DNO_WOLSSL_IO -fPIC -fshort-wchar -fstack-check=no -fstack-protector-explicit -Wp,-U_FORTIFY_SOURCE -Os -flto=auto -ffat-lto-objects -flto-partition=balanced -fuse-linker-plugin -ffunction-sections -fdata-sections -Wl,--gc-sections -DSESSION_CERTS -DHAVE_ECC_DHE -Wp,-UHAVE_ERRNO_H -Wp,-UXINET_PTON -DWOLFSSL_USER_IO -DNO_FILESYSTEM -Wp,-UCloseSocket -DCTYPE_USER -DOPENSSL_EXTRA_X509_SMALL" CXXFLAGS="" LDFLAGS=""

Error: configure: error: Header file inconsistency detected -- error including wolfssl/openssl/aes.h

Please let us know whether we need to enable any new config?

Regards
Anika

Share

  • Registered: 2021-07-06
  • Posts: 139

Re: Unable to enable RNG on wolfssl version 5.6.3

Hello Anika,

The error you are seeing comes from our configure system failing to generate the header, this can happen if there's an issue with your toolchain or compiler flags.  You should see a config.log file in your base wolfssl directory, do you see any errors in it?  Please attach your config.log here.

I would also recommend upgrading to our recent release, 5.6.4, for the latest bugfixes and performance improvements: https://github.com/wolfSSL/wolfssl/rele … 6.4-stable

Thanks,
Kareem

Share

  • Registered: 2022-07-12
  • Posts: 10

Re: Unable to enable RNG on wolfssl version 5.6.3

Hello Kareem

Config.log file is not getting generated as compilation of wolfssl fails durimg configure command only.
Also, as suggested by you I have used same comamnd for arm arch with WOLFSSL version 5.6.4 and observes same error.

Error:
configure: Generating user options header...
checking for wolfssl/openssl/aes.h... no
configure: error: Header file inconsistency detected -- error including wolfssl/openssl/aes.h.

Command:
configure --host=arm-linux-gnueabihf --prefix=/home/wolfssl --disable-dependency-tracking --enable-static --enable-opensslall --enable-pkcs7 --enable-debug --enable-singlethreaded --disable-pkcs8 --disable-dh --disable-poly1305 --disable-md5 --disable-sha224 --disable-sha384 --disable-sha3 --disable-chacha --disable-examples --disable-crypttests --disable-benchmark --disable-tls13 --disable-harden --disable-aligndata --disable-eccshamir --disable-errorstrings --disable-errorqueue --disable-oldtls --disable-secure-renegotiation-info --disable-extended-master --disable-enc-then-mac --disable-asyncthreads --disable-ocsp --disable-rsa --disable-hashdrbg --disable-base64encode --disable-supportedcurves --disable-memory --disable-tlsv12 --disable-aesgcm --disable-pkcs12 --enable-sys-ca-certs=no --enable-error-queue-per-thread=no --enable-x963kdf=no --enable-pwdbased=no --enable-oldnames=no --enable-filesystem=no --enable-debug=no CFLAGS="-DNO_WOLFSSL_CLIENT -DNO_WOLFSSL_SERVER -DNO_TLS -DNO_SHA -DNO_PWDBASED -DNO_SESSION_CACHE -DSMALL_SESSION_CACHE -DNO_DEV_URANDOM -DWOLFSSL_NO_SIGALG -DWOLFSSL_SP_NO_2048 -DWOLFSSL_SP_NO_3072 -DWOLFSSL_SP_NO_256 -DNO_RESUME_SUITE_CHECK -DWOLFSSL_AEAD_ONLY -DNO_FILESYSTEM -DNO_ASN_TIME -DNO_WOLSSL_IO -fPIC -fshort-wchar -fstack-check=no -fstack-protector-explicit -Wp,-U_FORTIFY_SOURCE -Os -flto=auto -ffat-lto-objects -flto-partition=balanced -fuse-linker-plugin -ffunction-sections -fdata-sections -Wl,--gc-sections -DSESSION_CERTS -DHAVE_ECC_DHE -Wp,-UHAVE_ERRNO_H -Wp,-UXINET_PTON -DWOLFSSL_USER_IO -DNO_FILESYSTEM -Wp,-UCloseSocket -DCTYPE_USER -DOPENSSL_EXTRA_X509_SMALL" CXXFLAGS="" LDFLAGS=""

Thanks,
Anika

Share

  • Registered: 2022-07-12
  • Posts: 10

Re: Unable to enable RNG on wolfssl version 5.6.3

Hello Kareem,

One more update.

Steps to reproduce the issue
1. Clone the wolfssl version 5.6.3-stable version.
2. Trigger ./autogen.sh
3. Trigger below configure command
configure --host=arm-linux-gnueabihf --prefix=/home/wolfssl --disable-dependency-tracking --enable-static --enable-opensslall --enable-pkcs7 --enable-debug --enable-singlethreaded --disable-pkcs8 --disable-dh --disable-poly1305 --disable-md5 --disable-sha224 --disable-sha384 --disable-sha3 --disable-chacha --disable-examples --disable-crypttests --disable-benchmark --disable-tls13 --disable-harden --disable-aligndata --disable-eccshamir --disable-errorstrings --disable-errorqueue --disable-oldtls --disable-secure-renegotiation-info --disable-extended-master --disable-enc-then-mac --disable-asyncthreads --disable-ocsp --disable-rsa --disable-hashdrbg --disable-base64encode --disable-supportedcurves --disable-memory --disable-tlsv12 --disable-aesgcm --disable-pkcs12 --enable-sys-ca-certs=no --enable-error-queue-per-thread=no --enable-x963kdf=no --enable-pwdbased=no --enable-oldnames=no --enable-filesystem=no --enable-debug=no CFLAGS="-DNO_WOLFSSL_CLIENT -DNO_WOLFSSL_SERVER -DNO_TLS -DNO_SHA -DNO_PWDBASED -DNO_SESSION_CACHE -DSMALL_SESSION_CACHE -DNO_DEV_URANDOM -DWOLFSSL_NO_SIGALG -DWOLFSSL_SP_NO_2048 -DWOLFSSL_SP_NO_3072 -DWOLFSSL_SP_NO_256 -DNO_RESUME_SUITE_CHECK -DWOLFSSL_AEAD_ONLY -DNO_FILESYSTEM -DNO_ASN_TIME -DNO_WOLSSL_IO -fPIC -fshort-wchar -fstack-check=no -fstack-protector-explicit -Wp,-U_FORTIFY_SOURCE -Os -flto=auto -ffat-lto-objects -flto-partition=balanced -fuse-linker-plugin -ffunction-sections -fdata-sections -Wl,--gc-sections -DSESSION_CERTS -DHAVE_ECC_DHE -Wp,-UHAVE_ERRNO_H -Wp,-UXINET_PTON -DWOLFSSL_USER_IO -DNO_FILESYSTEM -Wp,-UCloseSocket -DCTYPE_USER -DOPENSSL_EXTRA_X509_SMALL" CXXFLAGS="" LDFLAGS=""
4. Using arm gnu toolchain 11.3.0

Regards
Anika

Share