Compiling Unbound for algorithm 15 on Ubuntu 16.04

Unbound
1

Hi,

I'd like to enable support for algorithm 15 (ED25519) with Unbound on
Ubuntu 16.04. Algo 16 (ED448) too, but that may not be possible.

Apparently I need OpenSSL 1.1.1, which is not present on Ubuntu 16.04,
or libnettle (as indicated on https://ed25519.nl/).

So, I tried:

./configure --enable-ed25519 --with-nettle

The compile fails (see attachment for errors).

I must be doing something wrong here. Any help is appreciated.

Example domains:
  ed25519.nl (algo 15)
  dnssec-check.nl (algo 16)

Source: Unbound 1.6.7
OS: Ubuntu 16.04.3 LTS
nettle-dev 3.2-1ubuntu0.16.04.1
openssl 1.0.2g-1ubuntu4.9

(attachments)

unbound-compile-error.txt (3.14 KB)

2

Hi Marco,

The right way is to use openssl 1.1.1, but it is maybe not available.

With libnettle, unbound has to compile --with-libunbound-only for it to
work. But then you don't have the daemon. So that was not what you
wanted, instead you wanted a very new openssl.

You can compile --with-ssl=<pathname of other openssl>, but then you'd
need to compile a different openssl and install it somewhere. Because
of dynamic libraries, something like --enable-rpath is then good too (so
that the binary would find your custom compiled libraries, rpath is
disabled by default because that is nicer for installs).

Best regards, Wouter