Re: [OE-core] [AUH] nettle: upgrading to 4.0 FAILED -> FYI blocked by gnutls

Re: [OE-core] [AUH] nettle: upgrading to 4.0 FAILED -> FYI blocked by gnutls

[Randy MacLeod]

[-- Attachment #1: Type: text/plain, Size: 6137 bytes --]

On 2026-02-18 1:41 p.m., Auto Upgrade Helper via lists.openembedded.org 
wrote:
> Hello,
>
> this email is a notification from the Auto Upgrade Helper
> that the automatic attempt to upgrade the recipe(s) *nettle* to *4.0* has Failed(do_compile).
>
> Detailed error information:
>
> do_compile failed
In case anyone else starts to look at this the upgrade,
I think it's blocked by a sha.h dependency in gnutls-3.8.12 (latest),  (1)

There's a 3 week old bug to track the problem:

https://gitlab.com/gnutls/gnutls/-/issues?sort=created_date&state=opened&search=nettle&first_page_size=20&show=eyJpaWQiOiIxNzkxIiwiZnVsbF9wYXRoIjoiZ251dGxzL2dudXRscyIsImlkIjoxODIwODgwMjB9


so the nettle-4.0 upgrade (2) may have to wait for the next YP dev cycle.


../Randy

1)

| libtool: compile:  gcc -DHAVE_CONFIG_H -I. 
-I../../../../sources/gnutls-3.8.12/lib/accelerated/x86 -I../../.. 
-DGNUTLS_BUILDING_LIB=1 
-I../../../../sources/gnutls-3.8.12/lib/accelerated/x86/../../../gl 
-I./../../../gl 
-I../../../../sources/gnutls-3.8.12/lib/accelerated/x86/../../includes 
-I./../../includes 
-I../../../../sources/gnutls-3.8.12/lib/accelerated/x86/../../ 
-I../../../../sources/gnutls-3.8.12/lib/accelerated/x86/../ 
-isystem/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/include 
-I/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/include 
-Wtype-limits -fanalyzer -Wall -Wbad-function-cast -Wcast-align=strict 
-Wdate-time -Wdisabled-optimization -Wdouble-promotion 
-Wduplicated-branches -Wduplicated-cond -Wextra -Winit-self 
-Winvalid-pch -Wlogical-op -Wmissing-declarations -Wmissing-include-dirs 
-Wmissing-prototypes -Wnested-externs -Wnull-dereference 
-Wold-style-definition -Wopenmp-simd -Wpacked -Wpointer-arith -Wshadow 
-Wstrict-prototypes -Wsuggest-attribute=cold -Wsuggest-attribute=format 
-Wsuggest-attribute=malloc -Wsuggest-final-methods -Wsuggest-final-types 
-Wsync-nand -Wtrampolines -Wuninitialized -Wunknown-pragmas 
-Wunused-macros -Wvariadic-macros -Wvector-operation-performance 
-Wwrite-strings -Warray-bounds=2 -Wattribute-alias=2 -Wformat-overflow=2 
-Wformat=2 -Wformat-truncation=2 -Wimplicit-fallthrough=5 
-Wshift-overflow=2 -Wunused-const-variable=2 -Wvla-larger-than=4031 
-Wno-analyzer-malloc-leak -Wno-missing-field-initializers 
-Wno-unused-parameter -Wno-format-truncation -Wimplicit-fallthrough=2 
-Wabi=11 -fdiagnostics-show-option -fno-builtin-strcmp 
-I/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/lib/pkgconfig/../../../usr/include 
-I/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/lib/pkgconfig/../../../usr/include 
-I/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/lib/pkgconfig/../../../usr/include 
-DASM_X86_64 -DASM_X86 
-isystem/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/include 
-O2 -pipe -c 
../../../../sources/gnutls-3.8.12/lib/accelerated/x86/aes-xts-x86-aesni.c 
-fPIC -DPIC -o .libs/aes-xts-x86-aesni.o
| libtool: compile:  gcc 
-isystem/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/include 
-O2 -pipe -c 
../../../../sources/gnutls-3.8.12/lib/accelerated/x86/elf/sha256-ssse3-x86_64.s 
-fPIC -DPIC -o elf/.libs/sha256-ssse3-x86_64.o
| In file included from 
../../../../sources/gnutls-3.8.12/lib/accelerated/x86/aes-cbc-x86-ssse3.c:34:
| ../../../../sources/gnutls-3.8.12/lib/accelerated/x86/sha-x86.h:4:10: 
fatal error: nettle/sha.h: No such file or directory
|     4 | #include <nettle/sha.h>
|       |          ^~~~~~~~~~~~~~
| compilation terminated.
| 
../../../../sources/gnutls-3.8.12/lib/accelerated/x86/sha-x86-ssse3.c:28:10: 
fatal error: nettle/sha.h: No such file or directory
|    28 | #include <nettle/sha.h>
|       |          ^~~~~~~~~~~~~~


2)

nettle patch in progress is an easy update:


 From 9ceab42c2ff568c2f770817cef6b7192e245a2e3 Mon Sep 17 00:00:00 2001
From: Randy MacLeod <Randy.MacLeod@windriver.com>
Date: Tue, 24 Feb 2026 16:06:22 -0500
Subject: [PATCH] nettle: upgrade 3.10.2 -> 4.0

Release notes:
https://lists.gnu.org/archive/html/info-gnu/2026-02/msg00002.html

license change whitespace and http -> https

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
---
  .../nettle/{nettle_3.10.2.bb => nettle_4.0.bb} | 4 ++--
  1 file changed, 2 insertions(+), 2 deletions(-)
  rename meta/recipes-support/nettle/{nettle_3.10.2.bb => nettle_4.0.bb} 
(93%)

diff --git a/meta/recipes-support/nettle/nettle_3.10.2.bb 
b/meta/recipes-support/nettle/nettle_4.0.bb
similarity index 93%
rename from meta/recipes-support/nettle/nettle_3.10.2.bb
rename to meta/recipes-support/nettle/nettle_4.0.bb
index e651f68cb9..2156a10c00 100644
--- a/meta/recipes-support/nettle/nettle_3.10.2.bb
+++ b/meta/recipes-support/nettle/nettle_4.0.bb
@@ -7,7 +7,7 @@ context-independent set of cryptographic algorithms"
  SECTION = "libs"
  LICENSE = "LGPL-3.0-or-later | GPL-2.0-or-later"

-LIC_FILES_CHKSUM = 
"file://COPYING.LESSERv3;md5=6a6a8e020838b23406c81b19c1d46df6 \
+LIC_FILES_CHKSUM = 
"file://COPYING.LESSERv3;md5=3000208d539ec061b899bce1d9ce9404 \
file://COPYINGv2;md5=b234ee4d69f5fce4486a80fdaf4a4263 \
file://serpent-decrypt.c;beginline=14;endline=36;md5=ca0d220bc413e1842ecc507690ce416e 
\
file://serpent-set-key.c;beginline=14;endline=36;md5=ca0d220bc413e1842ecc507690ce416e"
@@ -20,7 +20,7 @@ SRC_URI = "${GNU_MIRROR}/${BPN}/${BP}.tar.gz \
file://check-header-files-of-openssl-only-if-enable_.patch \
             "

-SRC_URI[sha256sum] = 
"fe9ff51cb1f2abb5e65a6b8c10a92da0ab5ab6eaf26e7fc2b675c45f1fb519b5"
+SRC_URI[sha256sum] = 
"3addbc00da01846b232fb3bc453538ea5468da43033f21bb345cb1e9073f5094"

  UPSTREAM_CHECK_REGEX = "nettle-(?P<pver>\d+(\.\d+)+)\.tar"

-- 
2.34.1


-- 
# Randy MacLeod
# Wind River Linux

[-- Attachment #2: Type: text/html, Size: 9464 bytes --]

Re: [OE-core] [AUH] nettle: upgrading to 4.0 FAILED -> FYI blocked by gnutls

[Randy MacLeod]

[-- Attachment #1: Type: text/plain, Size: 6682 bytes --]

On 2026-02-24 4:38 p.m., Randy MacLeod wrote:
> On 2026-02-18 1:41 p.m., Auto Upgrade Helper via 
> lists.openembedded.org wrote:
>> Hello,
>>
>> this email is a notification from the Auto Upgrade Helper
>> that the automatic attempt to upgrade the recipe(s) *nettle* to *4.0* has Failed(do_compile).
>>
>> Detailed error information:
>>
>> do_compile failed
> In case anyone else starts to look at this the upgrade,
> I think it's blocked by a sha.h dependency in gnutls-3.8.12 (latest),  (1)
>
> There's a 3 week old bug to track the problem:
>
> https://gitlab.com/gnutls/gnutls/-/issues?sort=created_date&state=opened&search=nettle&first_page_size=20&show=eyJpaWQiOiIxNzkxIiwiZnVsbF9wYXRoIjoiZ251dGxzL2dudXRscyIsImlkIjoxODIwODgwMjB9
>
>
> so the nettle-4.0 upgrade (2) may have to wait for the next YP dev cycle.
>

Apparently nettle-4.0 with the gnutls patch is  working now:

https://gitlab.com/gnutls/gnutls/-/merge_requests/2075

If you try it, please reply here.

Welcome to le weekend!

../Randy


>
> ../Randy
>
> 1)
>
> | libtool: compile:  gcc -DHAVE_CONFIG_H -I. 
> -I../../../../sources/gnutls-3.8.12/lib/accelerated/x86 -I../../.. 
> -DGNUTLS_BUILDING_LIB=1 
> -I../../../../sources/gnutls-3.8.12/lib/accelerated/x86/../../../gl 
> -I./../../../gl 
> -I../../../../sources/gnutls-3.8.12/lib/accelerated/x86/../../includes 
> -I./../../includes 
> -I../../../../sources/gnutls-3.8.12/lib/accelerated/x86/../../ 
> -I../../../../sources/gnutls-3.8.12/lib/accelerated/x86/../ 
> -isystem/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/include 
> -I/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/include 
> -Wtype-limits -fanalyzer -Wall -Wbad-function-cast -Wcast-align=strict 
> -Wdate-time -Wdisabled-optimization -Wdouble-promotion 
> -Wduplicated-branches -Wduplicated-cond -Wextra -Winit-self 
> -Winvalid-pch -Wlogical-op -Wmissing-declarations 
> -Wmissing-include-dirs -Wmissing-prototypes -Wnested-externs 
> -Wnull-dereference -Wold-style-definition -Wopenmp-simd -Wpacked 
> -Wpointer-arith -Wshadow -Wstrict-prototypes -Wsuggest-attribute=cold 
> -Wsuggest-attribute=format -Wsuggest-attribute=malloc 
> -Wsuggest-final-methods -Wsuggest-final-types -Wsync-nand 
> -Wtrampolines -Wuninitialized -Wunknown-pragmas -Wunused-macros 
> -Wvariadic-macros -Wvector-operation-performance -Wwrite-strings 
> -Warray-bounds=2 -Wattribute-alias=2 -Wformat-overflow=2 -Wformat=2 
> -Wformat-truncation=2 -Wimplicit-fallthrough=5 -Wshift-overflow=2 
> -Wunused-const-variable=2 -Wvla-larger-than=4031 
> -Wno-analyzer-malloc-leak -Wno-missing-field-initializers 
> -Wno-unused-parameter -Wno-format-truncation -Wimplicit-fallthrough=2 
> -Wabi=11 -fdiagnostics-show-option -fno-builtin-strcmp 
> -I/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/lib/pkgconfig/../../../usr/include 
> -I/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/lib/pkgconfig/../../../usr/include 
> -I/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/lib/pkgconfig/../../../usr/include 
> -DASM_X86_64 -DASM_X86 
> -isystem/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/include 
> -O2 -pipe -c 
> ../../../../sources/gnutls-3.8.12/lib/accelerated/x86/aes-xts-x86-aesni.c 
> -fPIC -DPIC -o .libs/aes-xts-x86-aesni.o
> | libtool: compile:  gcc 
> -isystem/home/rmacleod/yocto/upgrades/tmp/work/x86_64-linux/gnutls-native/3.8.12/recipe-sysroot-native/usr/include 
> -O2 -pipe -c 
> ../../../../sources/gnutls-3.8.12/lib/accelerated/x86/elf/sha256-ssse3-x86_64.s 
> -fPIC -DPIC -o elf/.libs/sha256-ssse3-x86_64.o
> | In file included from 
> ../../../../sources/gnutls-3.8.12/lib/accelerated/x86/aes-cbc-x86-ssse3.c:34:
> | 
> ../../../../sources/gnutls-3.8.12/lib/accelerated/x86/sha-x86.h:4:10: 
> fatal error: nettle/sha.h: No such file or directory
> |     4 | #include <nettle/sha.h>
> |       |          ^~~~~~~~~~~~~~
> | compilation terminated.
> | 
> ../../../../sources/gnutls-3.8.12/lib/accelerated/x86/sha-x86-ssse3.c:28:10: 
> fatal error: nettle/sha.h: No such file or directory
> |    28 | #include <nettle/sha.h>
> |       |          ^~~~~~~~~~~~~~
>
>
> 2)
>
> nettle patch in progress is an easy update:
>
>
> From 9ceab42c2ff568c2f770817cef6b7192e245a2e3 Mon Sep 17 00:00:00 2001
> From: Randy MacLeod <Randy.MacLeod@windriver.com>
> Date: Tue, 24 Feb 2026 16:06:22 -0500
> Subject: [PATCH] nettle: upgrade 3.10.2 -> 4.0
>
> Release notes:
> https://lists.gnu.org/archive/html/info-gnu/2026-02/msg00002.html
>
> license change whitespace and http -> https
>
> Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
> ---
>  .../nettle/{nettle_3.10.2.bb => nettle_4.0.bb}   | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>  rename meta/recipes-support/nettle/{nettle_3.10.2.bb => 
> nettle_4.0.bb} (93%)
>
> diff --git a/meta/recipes-support/nettle/nettle_3.10.2.bb 
> b/meta/recipes-support/nettle/nettle_4.0.bb
> similarity index 93%
> rename from meta/recipes-support/nettle/nettle_3.10.2.bb
> rename to meta/recipes-support/nettle/nettle_4.0.bb
> index e651f68cb9..2156a10c00 100644
> --- a/meta/recipes-support/nettle/nettle_3.10.2.bb
> +++ b/meta/recipes-support/nettle/nettle_4.0.bb
> @@ -7,7 +7,7 @@ context-independent set of cryptographic algorithms"
>  SECTION = "libs"
>  LICENSE = "LGPL-3.0-or-later | GPL-2.0-or-later"
>
> -LIC_FILES_CHKSUM = 
> "file://COPYING.LESSERv3;md5=6a6a8e020838b23406c81b19c1d46df6 \
> +LIC_FILES_CHKSUM = 
> "file://COPYING.LESSERv3;md5=3000208d539ec061b899bce1d9ce9404 \
> file://COPYINGv2;md5=b234ee4d69f5fce4486a80fdaf4a4263 \
> file://serpent-decrypt.c;beginline=14;endline=36;md5=ca0d220bc413e1842ecc507690ce416e 
> \
> file://serpent-set-key.c;beginline=14;endline=36;md5=ca0d220bc413e1842ecc507690ce416e"
> @@ -20,7 +20,7 @@ SRC_URI = "${GNU_MIRROR}/${BPN}/${BP}.tar.gz \
> file://check-header-files-of-openssl-only-if-enable_.patch \
>             "
>
> -SRC_URI[sha256sum] = 
> "fe9ff51cb1f2abb5e65a6b8c10a92da0ab5ab6eaf26e7fc2b675c45f1fb519b5"
> +SRC_URI[sha256sum] = 
> "3addbc00da01846b232fb3bc453538ea5468da43033f21bb345cb1e9073f5094"
>
>  UPSTREAM_CHECK_REGEX = "nettle-(?P<pver>\d+(\.\d+)+)\.tar"
>
> -- 
> 2.34.1
>
>
> -- 
> # Randy MacLeod
> # Wind River Linux


-- 
# Randy MacLeod
# Wind River Linux

[-- Attachment #2: Type: text/html, Size: 10768 bytes --]