Re: [OE-core] [AUH] nettle: upgrading to 4.0 FAILED -> FYI blocked by gnutls

[Randy MacLeod <randy.macleod@windriver.com>]

[-- Attachment #1: Type: text/plain, Size: 6137 bytes --]

On 2026-02-18 1:41 p.m., Auto Upgrade Helper via lists.openembedded.org 
wrote:
> Hello,
>
> this email is a notification from the Auto Upgrade Helper
> that the automatic attempt to upgrade the recipe(s) *nettle* to *4.0* has Failed(do_compile).
>
> Detailed error information:
>
> do_compile failed
In case anyone else starts to look at this the upgrade,
I think it's blocked by a sha.h dependency in gnutls-3.8.12 (latest),  (1)

There's a 3 week old bug to track the problem:

https://gitlab.com/gnutls/gnutls/-/issues?sort=created_date&state=opened&search=nettle&first_page_size=20&show=eyJpaWQiOiIxNzkxIiwiZnVsbF9wYXRoIjoiZ251dGxzL2dudXRscyIsImlkIjoxODIwODgwMjB9


so the nettle-4.0 upgrade (2) may have to wait for the next YP dev cycle.


../Randy

1)

| libtool: compile:  gcc -DHAVE_CONFIG_H -I. 
-I../../../../sources/gnutls-3.8.12/lib/accelerated/x86 -I../../.. 
-DGNUTLS_BUILDING_LIB=1 
-I../../../../sources/gnutls-3.8.12/lib/accelerated/x86/../../../gl 
-I./../../../gl 
-I../../../../sources/gnutls-3.8.12/lib/accelerated/x86/../../includes 
-I./../../includes 
-I../../../../sources/gnutls-3.8.12/lib/accelerated/x86/../../ 
-I../../../../sources/gnutls-3.8.12/lib/accelerated/x86/../ 
-isystem/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/include 
-I/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/include 
-Wtype-limits -fanalyzer -Wall -Wbad-function-cast -Wcast-align=strict 
-Wdate-time -Wdisabled-optimization -Wdouble-promotion 
-Wduplicated-branches -Wduplicated-cond -Wextra -Winit-self 
-Winvalid-pch -Wlogical-op -Wmissing-declarations -Wmissing-include-dirs 
-Wmissing-prototypes -Wnested-externs -Wnull-dereference 
-Wold-style-definition -Wopenmp-simd -Wpacked -Wpointer-arith -Wshadow 
-Wstrict-prototypes -Wsuggest-attribute=cold -Wsuggest-attribute=format 
-Wsuggest-attribute=malloc -Wsuggest-final-methods -Wsuggest-final-types 
-Wsync-nand -Wtrampolines -Wuninitialized -Wunknown-pragmas 
-Wunused-macros -Wvariadic-macros -Wvector-operation-performance 
-Wwrite-strings -Warray-bounds=2 -Wattribute-alias=2 -Wformat-overflow=2 
-Wformat=2 -Wformat-truncation=2 -Wimplicit-fallthrough=5 
-Wshift-overflow=2 -Wunused-const-variable=2 -Wvla-larger-than=4031 
-Wno-analyzer-malloc-leak -Wno-missing-field-initializers 
-Wno-unused-parameter -Wno-format-truncation -Wimplicit-fallthrough=2 
-Wabi=11 -fdiagnostics-show-option -fno-builtin-strcmp 
-I/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/lib/pkgconfig/../../../usr/include 
-I/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/lib/pkgconfig/../../../usr/include 
-I/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/lib/pkgconfig/../../../usr/include 
-DASM_X86_64 -DASM_X86 
-isystem/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/include 
-O2 -pipe -c 
../../../../sources/gnutls-3.8.12/lib/accelerated/x86/aes-xts-x86-aesni.c 
-fPIC -DPIC -o .libs/aes-xts-x86-aesni.o
| libtool: compile:  gcc 
-isystem/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/include 
-O2 -pipe -c 
../../../../sources/gnutls-3.8.12/lib/accelerated/x86/elf/sha256-ssse3-x86_64.s 
-fPIC -DPIC -o elf/.libs/sha256-ssse3-x86_64.o
| In file included from 
../../../../sources/gnutls-3.8.12/lib/accelerated/x86/aes-cbc-x86-ssse3.c:34:
| ../../../../sources/gnutls-3.8.12/lib/accelerated/x86/sha-x86.h:4:10: 
fatal error: nettle/sha.h: No such file or directory
|     4 | #include <nettle/sha.h>
|       |          ^~~~~~~~~~~~~~
| compilation terminated.
| 
../../../../sources/gnutls-3.8.12/lib/accelerated/x86/sha-x86-ssse3.c:28:10: 
fatal error: nettle/sha.h: No such file or directory
|    28 | #include <nettle/sha.h>
|       |          ^~~~~~~~~~~~~~


2)

nettle patch in progress is an easy update:


 From 9ceab42c2ff568c2f770817cef6b7192e245a2e3 Mon Sep 17 00:00:00 2001
From: Randy MacLeod <Randy.MacLeod@windriver.com>
Date: Tue, 24 Feb 2026 16:06:22 -0500
Subject: [PATCH] nettle: upgrade 3.10.2 -> 4.0

Release notes:
https://lists.gnu.org/archive/html/info-gnu/2026-02/msg00002.html

license change whitespace and http -> https

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
---
  .../nettle/{nettle_3.10.2.bb => nettle_4.0.bb} | 4 ++--
  1 file changed, 2 insertions(+), 2 deletions(-)
  rename meta/recipes-support/nettle/{nettle_3.10.2.bb => nettle_4.0.bb} 
(93%)

diff --git a/meta/recipes-support/nettle/nettle_3.10.2.bb 
b/meta/recipes-support/nettle/nettle_4.0.bb
similarity index 93%
rename from meta/recipes-support/nettle/nettle_3.10.2.bb
rename to meta/recipes-support/nettle/nettle_4.0.bb
index e651f68cb9..2156a10c00 100644
--- a/meta/recipes-support/nettle/nettle_3.10.2.bb
+++ b/meta/recipes-support/nettle/nettle_4.0.bb
@@ -7,7 +7,7 @@ context-independent set of cryptographic algorithms"
  SECTION = "libs"
  LICENSE = "LGPL-3.0-or-later | GPL-2.0-or-later"

-LIC_FILES_CHKSUM = 
"file://COPYING.LESSERv3;md5=6a6a8e020838b23406c81b19c1d46df6 \
+LIC_FILES_CHKSUM = 
"file://COPYING.LESSERv3;md5=3000208d539ec061b899bce1d9ce9404 \
file://COPYINGv2;md5=b234ee4d69f5fce4486a80fdaf4a4263 \
file://serpent-decrypt.c;beginline=14;endline=36;md5=ca0d220bc413e1842ecc507690ce416e 
\
file://serpent-set-key.c;beginline=14;endline=36;md5=ca0d220bc413e1842ecc507690ce416e"
@@ -20,7 +20,7 @@ SRC_URI = "${GNU_MIRROR}/${BPN}/${BP}.tar.gz \
file://check-header-files-of-openssl-only-if-enable_.patch \
             "

-SRC_URI[sha256sum] = 
"fe9ff51cb1f2abb5e65a6b8c10a92da0ab5ab6eaf26e7fc2b675c45f1fb519b5"
+SRC_URI[sha256sum] = 
"3addbc00da01846b232fb3bc453538ea5468da43033f21bb345cb1e9073f5094"

  UPSTREAM_CHECK_REGEX = "nettle-(?P<pver>\d+(\.\d+)+)\.tar"

-- 
2.34.1


-- 
# Randy MacLeod
# Wind River Linux

[-- Attachment #2: Type: text/html, Size: 9464 bytes --]