[Bug]: Cannot build 5.8.0 with GCC 14 / RHEL LTO CFLAGS

[space88man]

Contact Details

shihping.chan@gmail.com

Version

5.8.0

Description

Code does not link with the RHEL 10/GCC 14.2.1 standard CFLAGS

-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64-v3 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer

These are the default CFLAGS that RHEL 10 uses to build packages.

It works if I remove the flags -flto=auto -ffat-lto-objects

Observations

• succeeds: Fedora 42/GCC 15, RHEL9/gcc-toolset-12, RHEL9/GCC 11

• reproduces on RHEL9/gcc-toolset-14

• succeeds on RHEL9/gcc-toolset-13 with minor warnings

   /opt/rh/gcc-toolset-13/root/usr/libexec/gcc/x86_64-redhat-linux/13/ld: wolfcrypt/src/.libs/src_libwolfssl_la-ecc.o: unable to decompress section .gnu.debuglto_.debug_str
   /opt/rh/gcc-toolset-13/root/usr/libexec/gcc/x86_64-redhat-linux/13/ld: wolfcrypt/src/.libs/src_libwolfssl_la-wc_pkcs11.o: unable to decompress section .gnu.debuglto_.debug_str
   /opt/rh/gcc-toolset-13/root/usr/libexec/gcc/x86_64-redhat-linux/13/ld: wolfcrypt/benchmark/benchmark.o: unable to decompress section .gnu.debuglto_.debug_str
  

Reproduction steps

# typical build process on EL-like systems
cd wolfssl-5.8.0/
CFLAGS=' -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64-v3 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer' \
LDFLAGS='-Wl,-z,relro -Wl,--as-needed  -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -Wl,--build-id=sha1' \
./configure --prefix=/usr --libdir=/usr/lib64
make

# Note: works if -flto=auto -ffat-lto-objects is removed from CFLAGS

Relevant log output

CC       wolfcrypt/src/src_libwolfssl_la-poly1305.lo
  CCLD     src/libwolfssl.la
/usr/bin/ld: wolfcrypt/src/.libs/src_libwolfssl_la-ecc.o: unable to decompress section .gnu.debuglto_.debug_str
/usr/bin/ld: wolfcrypt/src/.libs/src_libwolfssl_la-wc_pkcs11.o: unable to decompress section .gnu.debuglto_.debug_str
/usr/bin/ld: /tmp/ccQCbRZx.ltrans20.ltrans.o: in function `ec_point_convert_to_affine':
/builddir/build/SOURCES/wolfssl-5.8.0/src/pk.c:10771:(.text+0x7fc2): undefined reference to `ecc_map'
/usr/bin/ld: /tmp/ccQCbRZx.ltrans20.ltrans.o: in function `wolfssl_ec_point_add':
/builddir/build/SOURCES/wolfssl-5.8.0/src/pk.c:11072:(.text+0x8a45): undefined reference to `ecc_projective_add_point'
/usr/bin/ld: /builddir/build/SOURCES/wolfssl-5.8.0/src/pk.c:11079:(.text+0x8a69): undefined reference to `ecc_map'
/usr/bin/ld: /tmp/ccQCbRZx.ltrans20.ltrans.o: in function `wolfssl_ec_point_mul':
/builddir/build/SOURCES/wolfssl-5.8.0/src/pk.c:11183:(.text+0x8e95): undefined reference to `ecc_mul2add'
/usr/bin/ld: /tmp/ccQCbRZx.ltrans31.ltrans.o: in function `eccsi_mulmod_base_add.constprop.0':
/builddir/build/SOURCES/wolfssl-5.8.0/wolfcrypt/src/eccsi.c:1368:(.text+0x1b30): undefined reference to `ecc_projective_add_point'
/usr/bin/ld: /builddir/build/SOURCES/wolfssl-5.8.0/wolfcrypt/src/eccsi.c:1372:(.text+0x1b50): undefined reference to `ecc_map'
/usr/bin/ld: /tmp/ccQCbRZx.ltrans5.ltrans.o: in function `wolfCrypt_Init':
/builddir/build/SOURCES/wolfssl-5.8.0/wolfcrypt/src/wc_port.c:362:(.text+0x66a2): undefined reference to `wc_ecc_oid_cache_init'
/usr/bin/ld: /tmp/ccQCbRZx.ltrans5.ltrans.o: in function `wolfCrypt_Cleanup':
/builddir/build/SOURCES/wolfssl-5.8.0/wolfcrypt/src/wc_port.c:460:(.text+0x66f5): undefined reference to `wc_ecc_oid_cache_free'
/usr/bin/ld: /tmp/ccQCbRZx.ltrans7.ltrans.o: in function `EccSpecifiedECDomainDecode.lto_priv.0':
/builddir/build/SOURCES/wolfssl-5.8.0/wolfcrypt/src/asn.c:35244:(.text+0x6a32): undefined reference to `wc_ecc_free_curve'
collect2: error: ld returned 1 exit status
make[2]: *** [Makefile:6630: src/libwolfssl.la] Error 1
make[2]: *** Waiting for unfinished jobs....
make[2]: Leaving directory '/builddir/build/SOURCES/wolfssl-5.8.0'
make[1]: *** [Makefile:10078: all-recursive] Error 1
make[1]: Leaving directory '/builddir/build/SOURCES/wolfssl-5.8.0'
make: *** [Makefile:5680: all] Error 2

[kareem-wolfssl]

Hi @space88man ,

Thanks for the report, I will try to reproduce it here and let you know what I find.

[kareem-wolfssl]

Hi @space88man ,

My sincere apologies for the delay on this. I've just tried building on master with your CFLAGS, LDFLAGS and configure line and I'm seeing the build complete, I am not seeing any errors. Can you retry your build on the latest master and let me know if you're still seeing any issues?

[sergey-safarov]

Just retested using the sequence

./autogen.sh
./configure
make rpm

make master tar.gz and then

rpmbuild -bb rpm/spec

Issue still here.
Compiled commit 703bd6d

commit 703bd6d0ba1e7cb9f41bf89fa2838cde2a8d52f8 (HEAD -> master, origin/master, origin/HEAD)
Merge: 0407ea131 88da86e90
Author: David Garske <david@wolfssl.com>
Date:   Wed Jul 9 08:22:51 2025 -0700

    Merge pull request #8975 from JeremiahM37/mldsa_static_mem
    
    ML-DSA Static Memory Fix

Additionally, if gcc <= 14.2.1-2 is used, the error is not present (tested on CentOS 10).

Here is additional comments from macros file

# We currently have -ffat-lto-objects turned on out of an abundance of
# caution.  To remove it we need to do a check of the installed .o/.a files
# to verify they have real sections/symbols after LTO stripping.  That
# way we can detect installing an unusable .o/.a file.  This is on the TODO
# list for F34.
%_gcc_lto_cflags        -flto=auto -ffat-lto-objects
%_clang_lto_cflags      -flto=thin
%_lto_cflags            %{expand:%%{_%{toolchain}_lto_cflags}}

Additionally, I have tried to compile using the command

rpmbuild -bb --define "_gcc_lto_cflags -I /usr/include" wolfssl.spec

In this case build was finished.

[kareem-wolfssl]

Hi @space88man ,

Are you still seeing this issue on the latest master?

[sergey-safarov]

On the current master

[root@sbc-stage-a0 wolfssl]# git log -n 3
commit bbc3a72ea8511a1cce8f374ddbdfe737cc25ad57 (HEAD -> master, origin/master, origin/HEAD)
Merge: 4162f2443 4e15ccec3
Author: JacobBarthelmeh <jacob@wolfssl.com>
Date:   Thu Dec 18 15:59:42 2025 -0700

    Merge pull request #9556 from julek-wolfssl/rng-tools-timeout-fix
    
    rng-tools: increase jitter timeout

commit 4162f244348c597d205b4f78fc621c4adb183b02
Merge: 4e96b11cc d1a4677a8
Author: JacobBarthelmeh <jacob@wolfssl.com>
Date:   Thu Dec 18 15:14:35 2025 -0700

    Merge pull request #9555 from embhorn/zd20964
    
    Null deref check in Pkcs11ECDH

commit 4e96b11cce295161a1813901d8c5aa350267f2fb
Merge: a103f5af8 8a8ef3512
Author: David Garske <david@wolfssl.com>
Date:   Thu Dec 18 12:35:44 2025 -0800

    Merge pull request #9557 from douzzer/20251218-fixes
    
    20251218-fixes

I see an error

  CCLD     src/libwolfssl.la
/usr/bin/ld: wolfcrypt/src/.libs/src_libwolfssl_la-asn.o: unable to decompress section .gnu.debuglto_.debug_str
/usr/bin/ld: /tmp/ccyDRKIz.ltrans2.ltrans.o: in function `GetSafeContent':
/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:208:(.text+0x30c4): undefined reference to `GetObjectId'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:217:(.text+0x30e8): undefined reference to `GetASNTag'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:227:(.text+0x3110): undefined reference to `GetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:303:(.text+0x3178): undefined reference to `GetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:330:(.text+0x31c4): undefined reference to `GetObjectId'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:318:(.text+0x3230): undefined reference to `GetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:240:(.text+0x32c8): undefined reference to `GetASNTag'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:250:(.text+0x32ec): undefined reference to `GetLength'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans2.ltrans.o: in function `wc_PKCS12_encrypt_content':
/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2262:(.text+0x35e8): undefined reference to `SetObjectId'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2266:(.text+0x35f8): undefined reference to `SetOctetString'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2268:(.text+0x360c): undefined reference to `SetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2276:(.text+0x3628): undefined reference to `SetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2282:(.text+0x3640): undefined reference to `SetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2283:(.text+0x3650): undefined reference to `SetObjectId'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2295:(.text+0x36a8): undefined reference to `SetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2296:(.text+0x36bc): undefined reference to `SetOctetString'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2161:(.text+0x37d8): undefined reference to `EncryptContent'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2170:(.text+0x3800): undefined reference to `SetObjectId'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2174:(.text+0x3818): undefined reference to `SetMyVersion'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2175:(.text+0x3828): undefined reference to `SetObjectId'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2178:(.text+0x3840): undefined reference to `SetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2179:(.text+0x3854): undefined reference to `SetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2181:(.text+0x3870): undefined reference to `SetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2187:(.text+0x3894): undefined reference to `SetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2192:(.text+0x38b0): undefined reference to `SetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2193:(.text+0x38c0): undefined reference to `SetObjectId'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2205:(.text+0x3918): undefined reference to `SetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2207:(.text+0x3930): undefined reference to `SetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2208:(.text+0x3948): undefined reference to `SetMyVersion'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2214:(.text+0x39a4): undefined reference to `EncryptContent'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2233:(.text+0x39c0): undefined reference to `SetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2234:(.text+0x39dc): undefined reference to `SetObjectId'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2272:(.text+0x3ad0): undefined reference to `SetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2183:(.text+0x3b20): undefined reference to `SetSequence'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans2.ltrans.o: in function `wc_d2i_PKCS12':
/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:675:(.text+0x53e4): undefined reference to `GetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:681:(.text+0x53fc): undefined reference to `GetMyVersion'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:736:(.text+0x5424): undefined reference to `GetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:760:(.text+0x549c): undefined reference to `GetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:393:(.text+0x54c4): undefined reference to `GetSequence'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans2.ltrans.o:/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:409:(.text+0x54fc): undefined reference to `GetAlgoId'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans2.ltrans.o:/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:421:(.text+0x5524): undefined reference to `GetASNTag'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans2.ltrans.o:/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:432:(.text+0x5548): undefined reference to `GetLength'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans2.ltrans.o:/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:457:(.text+0x55b0): undefined reference to `GetASNTag'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans2.ltrans.o:/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:466:(.text+0x5630): undefined reference to `GetLength'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans2.ltrans.o: in function `wc_i2d_PKCS12':
/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:882:(.text+0x5874): undefined reference to `SetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:887:(.text+0x5884): undefined reference to `SetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:901:(.text+0x58c4): undefined reference to `SetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:904:(.text+0x58e0): undefined reference to `SetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:911:(.text+0x5900): undefined reference to `SetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:912:(.text+0x5910): undefined reference to `SetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:970:(.text+0x59a4): undefined reference to `SetMyVersion'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:976:(.text+0x59d0): undefined reference to `SetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1020:(.text+0x5a38): undefined reference to `SetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1025:(.text+0x5a5c): undefined reference to `SetObjectId'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1031:(.text+0x5aac): undefined reference to `SetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1034:(.text+0x5ac0): undefined reference to `SetOctetString'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:932:(.text+0x5b58): undefined reference to `SetOctetString'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:937:(.text+0x5b88): undefined reference to `SetOctetString'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:970:(.text+0x5bf4): undefined reference to `SetMyVersion'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans2.ltrans.o: in function `wc_PKCS12_parse_ex':
/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1444:(.text+0x5e6c): undefined reference to `GetASNTag'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1451:(.text+0x5e94): undefined reference to `GetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1455:(.text+0x5eb0): undefined reference to `GetASNTag'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1461:(.text+0x5ed4): undefined reference to `GetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1468:(.text+0x5ef0): undefined reference to `GetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1475:(.text+0x5f74): undefined reference to `GetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1480:(.text+0x5fa0): undefined reference to `GetObjectId'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1488:(.text+0x5fd4): undefined reference to `GetASNTag'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1494:(.text+0x5ff8): undefined reference to `GetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1532:(.text+0x6034): undefined reference to `GetASNTag'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1538:(.text+0x6058): undefined reference to `GetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1605:(.text+0x60ec): undefined reference to `GetASNTag'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1611:(.text+0x6110): undefined reference to `GetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1616:(.text+0x612c): undefined reference to `GetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1620:(.text+0x614c): undefined reference to `GetObjectId'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1559:(.text+0x61f4): undefined reference to `ToTraditionalEnc'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1366:(.text+0x62f0): undefined reference to `GetASNTag'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1373:(.text+0x6318): undefined reference to `GetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1377:(.text+0x6334): undefined reference to `GetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1389:(.text+0x636c): undefined reference to `GetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1393:(.text+0x638c): undefined reference to `GetObjectId'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1424:(.text+0x63f0): undefined reference to `DecryptContent'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1629:(.text+0x6418): undefined reference to `GetASNTag'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1636:(.text+0x643c): undefined reference to `GetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1642:(.text+0x645c): undefined reference to `GetASNTag'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1649:(.text+0x6480): undefined reference to `GetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1510:(.text+0x64ec): undefined reference to `ToTraditional_ex'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans2.ltrans.o: in function `wc_PKCS12_shroud_key':
/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1864:(.text+0x92d4): undefined reference to `wc_GetKeyOID'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1905:(.text+0x9324): undefined reference to `SetExplicit'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1885:(.text+0x9408): undefined reference to `TraditionalEnc_ex'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans2.ltrans.o: in function `wc_PKCS12_create':
/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1970:(.text+0xa530): undefined reference to `SetLength'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans2.ltrans.o:/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1995:(.text+0xa5e8): undefined reference to `SetSequence'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans2.ltrans.o: in function `wc_PKCS12_create':
/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2385:(.text+0xa618): undefined reference to `SetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2553:(.text+0xa7c8): undefined reference to `SetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2611:(.text+0xa89c): undefined reference to `SetSequence'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans2.ltrans.o:/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1962:(.text+0xa9a4): undefined reference to `SetLength'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans2.ltrans.o:/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2634:(.text+0xaaf8): undefined reference to `SetSequence'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans2.ltrans.o:/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2648:(.text+0xab8c): undefined reference to `GetSequence'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans3.ltrans.o: in function `ProcessPeerCertParse':
/root/rpmbuild/BUILD/wolfssl-5.8.4/src/internal.c:14992:(.text+0x98c): undefined reference to `ParseCertRelative'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/internal.c:14971:(.text+0xa10): undefined reference to `InitDecodedCert'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans3.ltrans.o: in function `wc_ecc_rs_to_sig':
/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/ecc.c:11361:(.text+0x2868): undefined reference to `StoreECC_DSA_Sig'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans3.ltrans.o: in function `wc_ecc_rs_raw_to_sig':
/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/ecc.c:11388:(.text+0x291c): undefined reference to `StoreECC_DSA_Sig_Bin'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans3.ltrans.o: in function `wc_ecc_sig_to_rs':
/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/ecc.c:11407:(.text+0x2948): undefined reference to `DecodeECC_DSA_Sig_Bin'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans3.ltrans.o: in function `wc_ecc_verify_hash':
/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/ecc.c:8579:(.text+0x69a4): undefined reference to `DecodeECC_DSA_Sig_Ex'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans3.ltrans.o: in function `wc_ecc_sign_hash':
/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/ecc.c:6798:(.text+0x7f88): undefined reference to `StoreECC_DSA_Sig'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans3.ltrans.o: in function `FreeSSL_Ctx':
/root/rpmbuild/BUILD/wolfssl-5.8.4/src/internal.c:2864:(.text+0x8464): undefined reference to `FreeDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans3.ltrans.o:/root/rpmbuild/BUILD/wolfssl-5.8.4/src/internal.c:2880:(.text+0x846c): undefined reference to `FreeDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans3.ltrans.o:/root/rpmbuild/BUILD/wolfssl-5.8.4/src/internal.c:2887:(.text+0x8474): undefined reference to `FreeDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans3.ltrans.o: in function `ProcessPeerCerts':
/root/rpmbuild/BUILD/wolfssl-5.8.4/src/internal.c:14664:(.text+0xa310): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/internal.c:16055:(.text+0xa4e0): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/internal.c:16021:(.text+0xa5ac): undefined reference to `AllocDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans4.ltrans.o: in function `CM_VerifyBuffer_ex':
/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_certman.c:778:(.text+0x1aa0): undefined reference to `InitDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_certman.c:787:(.text+0x1ab8): undefined reference to `ParseCertRelative'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_certman.c:840:(.text+0x1b18): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_certman.c:841:(.text+0x1b20): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_certman.c:764:(.text+0x1b8c): undefined reference to `PemToDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_certman.c:840:(.text+0x1b9c): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_certman.c:841:(.text+0x1ba4): undefined reference to `FreeDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans4.ltrans.o: in function `wolfSSL_CertManagerFree':
/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_certman.c:220:(.text+0x79b0): undefined reference to `FreeSignerTable'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans4.ltrans.o: in function `wolfSSL_CertManagerUnloadCAs':
/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_certman.c:447:(.text+0x7be4): undefined reference to `FreeSignerTable'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans4.ltrans.o: in function `wolfSSL_CertManagerUnloadTypeCerts':
/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_certman.c:473:(.text+0x7c64): undefined reference to `FreeSignerTableType'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans4.ltrans.o: in function `AddCA':
/root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:5990:(.text+0x7e4c): undefined reference to `InitDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:5999:(.text+0x7e60): undefined reference to `ParseCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6218:(.text+0x7e7c): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6223:(.text+0x7e84): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6218:(.text+0x7f0c): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6223:(.text+0x7f18): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6218:(.text+0x7f54): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6223:(.text+0x7f60): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6218:(.text+0x7f88): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6223:(.text+0x7f94): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6218:(.text+0x7fa0): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6223:(.text+0x7fac): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6165:(.text+0x7fc0): undefined reference to `MakeSigner'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6170:(.text+0x7fd8): undefined reference to `FillSigner'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6218:(.text+0x7fe4): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6220:(.text+0x7ff4): undefined reference to `FreeSigner'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6223:(.text+0x7ffc): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6218:(.text+0x8074): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6223:(.text+0x807c): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6218:(.text+0x809c): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:6223:(.text+0x80a8): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:5978:(.text+0x80cc): undefined reference to `FreeDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans4.ltrans.o: in function `wolfSSL_CertManagerLoadCABufferType':
/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_certman.c:636:(.text+0xab30): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_certman.c:606:(.text+0xac54): undefined reference to `PemToDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans5.ltrans.o: in function `wolfSSL_UnloadCertsKeys':
/root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:12068:(.text+0xe74): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:12078:(.text+0xe88): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:12085:(.text+0xf1c): undefined reference to `FreeDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans5.ltrans.o: in function `wolfSSL_X509_check_host':
/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/x509.c:14176:(.text+0x1a90): undefined reference to `InitDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/x509.c:14177:(.text+0x1aa8): undefined reference to `ParseCertRelative'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/x509.c:14209:(.text+0x1b00): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/x509.c:14209:(.text+0x1b3c): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans5.ltrans.o: in function `wolfSSL_X509_check_ip_asc':
/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/x509.c:14248:(.text+0x1bf0): undefined reference to `InitDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/x509.c:14249:(.text+0x1c08): undefined reference to `ParseCertRelative'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/x509.c:14262:(.text+0x1c14): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans5.ltrans.o: in function `ProcessUserChain.lto_priv.0':
/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:342:(.text+0x3364): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:342:(.text+0x3444): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:342:(.text+0x34d0): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:249:(.text+0x355c): undefined reference to `AllocCopyDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:342:(.text+0x3580): undefined reference to `FreeDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans5.ltrans.o:/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:246:(.text+0x35a0): undefined reference to `FreeDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans5.ltrans.o:/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:258:(.text+0x35c0): undefined reference to `FreeDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans5.ltrans.o:/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:260:(.text+0x35d8): undefined reference to `AllocCopyDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans5.ltrans.o: in function `ProcessBufferCert.lto_priv.0':
/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:2043:(.text+0x3cd4): undefined reference to `InitDecodedCert_ex'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:2046:(.text+0x3ce0): undefined reference to `DecodeToKey'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:2082:(.text+0x3dcc): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:2043:(.text+0x3f88): undefined reference to `InitDecodedCert_ex'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:2046:(.text+0x3f94): undefined reference to `DecodeToKey'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:2043:(.text+0x4008): undefined reference to `InitDecodedCert_ex'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:2046:(.text+0x4014): undefined reference to `DecodeToKey'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans5.ltrans.o: in function `ws_ctx_ssl_set_tmp_dh':
/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:5951:(.text+0x48f4): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:5893:(.text+0x494c): undefined reference to `AllocDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:5951:(.text+0x49cc): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:5951:(.text+0x49ec): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:5951:(.text+0x4a38): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:5917:(.text+0x4a70): undefined reference to `PemToDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:5920:(.text+0x4a94): undefined reference to `PemToDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:5951:(.text+0x4aa4): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:5951:(.text+0x4ae0): undefined reference to `FreeDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans6.ltrans.o: in function `check_cert_key.constprop.0':
/root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:7384:(.text+0x95c): undefined reference to `InitDecodedCert_ex'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:7385:(.text+0x974): undefined reference to `ParseCertRelative'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:7410:(.text+0x990): undefined reference to `wc_CheckPrivateKeyCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:7479:(.text+0x9a0): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/src/ssl.c:7386:(.text+0x9b0): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans6.ltrans.o: in function `DataToDerBuffer.constprop.0':
/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/pk.c:934:(.text+0xa2c): undefined reference to `GetSequence_ex'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans6.ltrans.o: in function `DataToDerBuffer.constprop.0':
/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:163:(.text+0xa9c): undefined reference to `AllocCopyDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:140:(.text+0xaf8): undefined reference to `PemToDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:142:(.text+0xb08): undefined reference to `FreeDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans6.ltrans.o: in function `SendTls13Certificate':
/root/rpmbuild/BUILD/wolfssl-5.8.4/src/tls13.c:8971:(.text+0x3fc4): undefined reference to `FreeDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans7.ltrans.o: in function `wc_PKCS12_create_cert_bag.isra.0':
/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2044:(.text+0x90c): undefined reference to `SetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2059:(.text+0x95c): undefined reference to `SetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2071:(.text+0x9bc): undefined reference to `SetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2078:(.text+0x9ec): undefined reference to `SetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2084:(.text+0xa2c): undefined reference to `SetSequence'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2090:(.text+0xa5c): undefined reference to `SetLength'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:2096:(.text+0xa8c): undefined reference to `SetSequence'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans7.ltrans.o: in function `freeDecCertList.isra.0':
/root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1100:(.text+0x4fc4): undefined reference to `InitDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1101:(.text+0x4fdc): undefined reference to `ParseCertRelative'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1102:(.text+0x4ff8): undefined reference to `wc_CheckPrivateKeyCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1118:(.text+0x5008): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/wolfcrypt/src/pkcs12.c:1113:(.text+0x5080): undefined reference to `FreeDecodedCert'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans7.ltrans.o: in function `ProcessBuffer.isra.0':
/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:2483:(.text+0x6538): undefined reference to `FreeDer'
/usr/bin/ld: /root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:1296:(.text+0x65c0): undefined reference to `FreeDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans7.ltrans.o:/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:1279:(.text+0x65e4): undefined reference to `FreeDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans7.ltrans.o: in function `ProcessBuffer.isra.0':
/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:2199:(.text+0x65f4): undefined reference to `FreeDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans7.ltrans.o:/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:2181:(.text+0x675c): undefined reference to `FreeDer'
/usr/bin/ld: /tmp/ccyDRKIz.ltrans7.ltrans.o:/root/rpmbuild/BUILD/wolfssl-5.8.4/./src/ssl_load.c:2214: more undefined references to `FreeDer' follow
collect2: error: ld returned 1 exit status
make[3]: *** [Makefile:7075: src/libwolfssl.la] Error 1
make[3]: Leaving directory '/root/rpmbuild/BUILD/wolfssl-5.8.4'
make[2]: *** [Makefile:11111: all-recursive] Error 1
make[2]: Leaving directory '/root/rpmbuild/BUILD/wolfssl-5.8.4'
make[1]: *** [Makefile:6065: all] Error 2
make[1]: Leaving directory '/root/rpmbuild/BUILD/wolfssl-5.8.4'
error: Bad exit status from /var/tmp/rpm-tmp.kR6CTD (%build)

[kareem-wolfssl]

Thanks @sergey-safarov. I'm assigning this issue to my colleagues for further review.

[SparkiDev]

Hi @sergey-safarov,

Can you supply the configuration line you use?
Is it the same as the Reproducer above?

Thanks,
Sean

[sergey-safarov]

You can try reproduce using

CFLAGS="-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection  ; export CFLAGS ; 
CXXFLAGS=-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection  ; export CXXFLAGS ; 
FFLAGS=-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules  ; export FFLAGS ; 
FCFLAGS=-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules  ; export FCFLAGS ; 
VALAFLAGS=-g ; export VALAFLAGS ; 
LDFLAGS=-Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-hardened-ld-errors -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes  ; export LDFLAGS ; 
LT_SYS_LIBRARY_PATH=/usr/lib64: ; export LT_SYS_LIBRARY_PATH ; 
CC=gcc ; export CC ; 
CXX=g++ ; export CXX; 
export RPM_ARCH=aarch64
export RPM_PACKAGE_RELEASE=1
export RPM_PACKAGE_VERSION=5.8.4
export RPM_PACKAGE_NAME=wolfssl

./configure --build=aarch64-redhat-linux --host=aarch64-redhat-linux --program-prefix= --disable-dependency-tracking  --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include --libdir=/usr/lib64 --libexecdir=/usr/libexec --localstatedir=/var --runstatedir=/run --sharedstatedir=/var/lib --mandir=/usr/share/man --infodir=/usr/share/info

This is part of rpm packaging macros used on RHEL based dists.

[douzzer]

@sergey-safarov I tried reproducing this using gcc 14.3.0, 15.1.1_p20250719, and 16.0.0_p20250713, but there was no problem with any of them.

This is the config I used to check for the problem (showing gcc-16 here):

./configure --quiet --disable-jobserver --enable-fips=disabled --enable-all CFLAGS='-flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -fstack-protector-strong -m64 -march=x86-64-v3 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer' LDFLAGS='-flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -fstack-protector-strong -m64 -march=x86-64-v3 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer' CC=gcc-16

This makes me suspect it's something from -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 that's breaking it. I am testing on Gentoo and am not set up to test on RH.

The toolchain I was testing with is using binutils 2.44.0.

I doubt it will make a difference, but can you retry with wolfssl 5.8.4?