How do I install unbound?

[Willem Toorop]

Hello 水上ナツ,

You do not need ldns to compile unbound.
The installation guide for Unbound is here:

	https://nlnetlabs.nl/documentation/unbound/howto-setup/

You could also try if your distribution has a pre-compiled binary. i.e.:

	yum install unbound


-- Willem

On 29-01-19 09:30, 水上ナツ via Unbound-users wrote:
> Hello. It is my first post.
> 
> Unbound is not detailed at all.
> I want to install unbound.
> However, when installing ldns the following log was output and it did
> not work.
> ------
> Please upgrade OpenSSL to version> = 1.1.0 or rerun with - disable -
> dane - verify or - disable - dane - ta -usage
> ------
> The following is the operation log.
> 
> What is the solution?
> ----------------------------------------------------
> # wget https://www.nlnetlabs.nl/downloads/ldns/ldns-1.7.0-rc3.tar.gz
> # tar zxvf ldns-1.7.0-rc3.tar.gz
> # cd ldns-1.7.0-rc3/
> # ./configure
> ...
> configure: error: OpenSSL does not support offline DANE verification
> (Needed for the DANE-TA usage type).  Please upgrade OpenSSL to version
>>= 1.1.0 or rerun with --disable-dane-verify or --disable-dane-ta-usage
> 
> # yum remove openssl
> # wget https://www.openssl.org/source/openssl-1.1.1a.tar.gz
> # tar zxvf openssl-1.1.1a.tar.gz
> # cd openssl-1.1.1a/
> # ./config
> ...
> **********************************************************************
> ***                                                                ***
> ***   OpenSSL has been successfully configured                     ***
> ***                                                                ***
> ***   If you encounter a problem while building, please open an    ***
> ***   issue on GitHub <https://github.com/openssl/openssl/issues>  ***
> ***   and include the output from the following command:           ***
> ***                                                                ***
> ***       perl configdata.pm <http://configdata.pm>
> --dump                                ***
> ***                                                                ***
> ***   (If you are new to OpenSSL, you might want to consult the    ***
> ***   'Troubleshooting' section in the INSTALL file first)         ***
> ***                                                                ***
> **********************************************************************
> # make
> # make install
> # cd ldns-1.7.0-rc3/
> # ./configure
> ...
> configure: error: OpenSSL does not support offline DANE verification
> (Needed for the DANE-TA usage type).  Please upgrade OpenSSL to version
>>= 1.1.0 or rerun with --disable-dane-verify or --disable-dane-ta-usage
> # ./configure --disable-dane-verify
> # make
> ./libtool --tag=CC --quiet --mode=compile gcc -I. -I.  -DHAVE_CONFIG_H
> -DLDNS_TRUST_ANCHOR_FILE="\"/usr/local/etc/unbound/root.key\""
> -Wunused-function -Wstrict-prototypes -Wwrite-strings -W -Wall -g -O2
> -I/usr/local/include -c ./buffer.c -o buffer.lo
> ./libtool --tag=CC --quiet --mode=compile gcc -I. -I.  -DHAVE_CONFIG_H
> -DLDNS_TRUST_ANCHOR_FILE="\"/usr/local/etc/unbound/root.key\""
> -Wunused-function -Wstrict-prototypes -Wwrite-strings -W -Wall -g -O2
> -I/usr/local/include -c ./dane.c -o dane.lo
> ./libtool --tag=CC --quiet --mode=compile gcc -I. -I.  -DHAVE_CONFIG_H
> -DLDNS_TRUST_ANCHOR_FILE="\"/usr/local/etc/unbound/root.key\""
> -Wunused-function -Wstrict-prototypes -Wwrite-strings -W -Wall -g -O2
> -I/usr/local/include -c ./dname.c -o dname.lo
> ./libtool --tag=CC --quiet --mode=compile gcc -I. -I.  -DHAVE_CONFIG_H
> -DLDNS_TRUST_ANCHOR_FILE="\"/usr/local/etc/unbound/root.key\""
> -Wunused-function -Wstrict-prototypes -Wwrite-strings -W -Wall -g -O2
> -I/usr/local/include -c ./dnssec.c -o dnssec.lo
> ./dnssec.c: Within function 'ldns_convert_dsa_rrsig_asn12rdf':
> ./dnssec.c: 1761: 12: Error: indirect reference to an incomplete type
> pointer
>    R = dsasig -> r;
>              ^
> ./dnssec.c: 1762: 12: Error: indirect reference to an incomplete type
> pointer
>    S = dsasig -> s;
>              ^
> ./dnssec.c: Within function 'ldns_convert_dsa_rrsig_rdf 2 asn 1':
> ./dnssec.c: 1830: 8: Error: indirect reference to an incomplete type pointer
>    dsasig -> r = R;
>          ^
> ./dnssec.c: 1831: 8: Error: indirect reference to an incomplete type pointer
>    dsasig -> s = S;
>          ^
> ./dnssec.c: Within function 'ldns_convert_ecdsa_rrsig_asn1 len2rdf':
> ./dnssec.c: 1870: 15: Error: indirect reference to an incomplete type
> pointer
>    r = ecdsa_sig-> r;
>                 ^
> ./dnssec.c: 1871: 15: Error: indirect reference to an incomplete type
> pointer
>    s = ecdsa_sig -> s;
>                 ^
> make: *** [dnssec.lo] Error 1
> ----------------------------------------------------
> 
> What is the solution?
>