seVPN on PPC OSX Tiger - a report
Posted: Tue Jun 30, 2015 5:46 pm
The purpose of this post is to share information required to build and run SoftEtherVPN on a G4 Mac.
Versions:
* SoftEtherVPN v4.15-9546 Beta
* libpcap 1.7.3 (Github sourced)
* libpcap 1.0.0 (tcpdump sourced)
* OSX 10.4.11
* XCODE 2.5
As installation instructions directed, the PPC version must be built and installed similar to a UNIX target.
SoftEther VPN distribution requires, but does not include, libpcap - which must be obtained and itself built.
Unfortunately the current version of libpcap 1.7.3 (obtained from github) itself does not compile on OSX Tiger with any XCODE compatible with that platform. The following error occurs:
_atexit, referenced from:
_pcap_do_addexit in pcap.o
ld64-62.1 failed: symbol(s) not found
/usr/libexec/gcc/i686-apple-darwin8/4.0.1/libtool: internal link edit command failed
lipo: can't figure out the architecture type of: /var/tmp//ccEHY41z.out
make: *** [libpcap.dylib] Error 1
can't figure out the architecture type
After some experimentation it was determined that the easiest path was to revert to a libpcap that would build correctly on the target platform. A comparison of release dates resulted in the choice of libpcap 1.0 which was obtained from the tcpdump group. This version compiled without error. The libpcap.a result was then transferred to SoftEtherVPN distribution /lib folder.
Running make on SoftEtherVPN then resulted in the following error:
Undefined symbols:
_pcap_inject
collect2: ld returned 1 exit status
Again after some experimentation it was decided to edit the supplied makefile and alter the options line to add lib/libpcap.a to the library list and remove -lpcap.
Both vpnserver and vpncmd then built and executed on the platform.
vpnserver could run from the user or as root, but TCP port 443 could not be opened until root was used. Note that this makes the output log file ownership root thus processes that examine it at runtime must also have root privileges.
The only comments I would offer to others pursuing this path is that the default vpnserver configuration has many services enabled by default. These cause it to immediately attempt to make contact with other web servers when run. If this is of concern, I suggest the first time it's run that the host system be disconnected from the internet until the desired configuration can be set.
Many thanks to the SoftEther team for this fine work.
Versions:
* SoftEtherVPN v4.15-9546 Beta
* libpcap 1.7.3 (Github sourced)
* libpcap 1.0.0 (tcpdump sourced)
* OSX 10.4.11
* XCODE 2.5
As installation instructions directed, the PPC version must be built and installed similar to a UNIX target.
SoftEther VPN distribution requires, but does not include, libpcap - which must be obtained and itself built.
Unfortunately the current version of libpcap 1.7.3 (obtained from github) itself does not compile on OSX Tiger with any XCODE compatible with that platform. The following error occurs:
_atexit, referenced from:
_pcap_do_addexit in pcap.o
ld64-62.1 failed: symbol(s) not found
/usr/libexec/gcc/i686-apple-darwin8/4.0.1/libtool: internal link edit command failed
lipo: can't figure out the architecture type of: /var/tmp//ccEHY41z.out
make: *** [libpcap.dylib] Error 1
can't figure out the architecture type
After some experimentation it was determined that the easiest path was to revert to a libpcap that would build correctly on the target platform. A comparison of release dates resulted in the choice of libpcap 1.0 which was obtained from the tcpdump group. This version compiled without error. The libpcap.a result was then transferred to SoftEtherVPN distribution /lib folder.
Running make on SoftEtherVPN then resulted in the following error:
Undefined symbols:
_pcap_inject
collect2: ld returned 1 exit status
Again after some experimentation it was decided to edit the supplied makefile and alter the options line to add lib/libpcap.a to the library list and remove -lpcap.
Both vpnserver and vpncmd then built and executed on the platform.
vpnserver could run from the user or as root, but TCP port 443 could not be opened until root was used. Note that this makes the output log file ownership root thus processes that examine it at runtime must also have root privileges.
The only comments I would offer to others pursuing this path is that the default vpnserver configuration has many services enabled by default. These cause it to immediately attempt to make contact with other web servers when run. If this is of concern, I suggest the first time it's run that the host system be disconnected from the internet until the desired configuration can be set.
Many thanks to the SoftEther team for this fine work.