Compile hiawatha failed in version 9.4/9.5

[mustafaramadhan]

I have a problem for rpm compile hiawatha webserver. Read my report in https://www.hiawatha-webserver.org/forum/topic/1627 and https://www.hiawatha-webserver.org/forum/topic/1611.

This issue only happen in Centos 5 64bit. Nothing problem when compile in Centos 5 32bit or Centos 6 32/64bit.

As we know, Hiawatha using polarssl api instead openssl.

[barrykn]

FWIW this looks similar to a compile failure I noticed on OS X 10.6.8 with Xcode 3.2.6 (on a Core 2 Duo, so 64-bit). That one also involved the compiler (various versions of gcc, actually) choking on aesni.c. I'll follow up with more specific info when I get a chance, but I'm not sure when that'll be.

[pjbakker]

The reason we most often find is an 'older' version of binutils. Can you check which version both Centos instances use?

Based on this (https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=blob_plain;f=gas/NEWS;hb=refs/tags/binutils-2_24) and some other things I read, you need 2.19 at least for AES-NI support in 'gas'.

[mustafaramadhan]

The question is why nothing problem with Centos 5 32bit. As we know Centos 5 32bit and 64bit have the same binutils version (2.17.50.0.6-26.el5). Centos 6 using binutils 2.20.51.0.2-5.36.el6.

Testing in Virtualbox and KVM VPS.

[mpg]

Most probably because on 32 bits platforms the AES-NI instructions are never used, which is detected at compile time, so the assembler never sees these instructions.

[mustafaramadhan]

No issue when using polarssl from hiawatha 9.3.1 (using polarssl 1.3.2).

[mustafaramadhan]

Yes. It's binutils issue in Centos 5 64bit. I was compile binutils 2.24 for Centos 5 64bit and then nothing problem for compile hiawatha 9.5.

[barrykn]

(Edit: This is on my OS X 10.6.8/Xcode 3.2.6 system. This isn't an issue on my OS X 10.7+ systems, where clang rather than gcc is the default compiler.)

$ as -v < /dev/null
Apple Inc version cctools-845, GNU assembler version 1.38

This is the OS X 10.9.0 version of as, from the cctools package on MacPorts, but it's still not enough for gcc (4.8.2 from MacPorts) to compile aesni.c. However, installing the clang-3.4 package from MacPorts and using that to compile polarssl works.

[mpg]

Ok, I think I've got a workaround.

Could any of you please try replacing library/aesni.c with this version: https://gist.github.com/mpg/11322839 and see if it fixes the issue with the toolchains that currently can't compile it? Thanks in advance!

[mustafaramadhan]

Look like Ok using 'new' aesni.c with binutils-2.17.50.0.6-26.el5 in Centos 5 64bit.

[barrykn]

The new aesni.c seems to work (i.e. PolarSSL compiles and the tests pass) on two Macs (one with a CPU that supports AES-NI, one without) running OS X 10.6.8/Xcode 3.2.6/Apple gcc 4.2.1-5666.3.

[mpg]

Great. Thank you both for you help!

[pjbakker]

PolarSSL 1.3.7 is just released and includes the AES-NI improvements!