参考：http://www.wangling-tech.com/bbs/forum.php?mod=viewthread&tid=1053&extra=page%3D1
参考：http://www.guokr.com/post/707860/

如果你想DIY组装一个网灵机器人，而手头又没有现成的材料配件，可以从网灵采购成套的。

物理结构配件包：
https://item.taobao.com/item.htm … amp;id=524117265923

电子电路模块配件包：
https://item.taobao.com/item.htm … amp;id=524119046964

大容量12V 3000mAh 大容量可充锂电池：
https://item.taobao.com/item.htm … &_u=9b06dad359a

» 阅读更多: 网灵机器人

需要安装GNUTLS：http://amon.org/gnutls

通过git获得源码编译安装：

参考：https://mod.gnutls.org/wiki/develop
参考：http://www.aichengxu.com/view/6434328

git clone https://mod.gnutls.org/git/mod_gnutls && cd mod_gnutls
autoreconf -fiv
export LIBGNUTLS_CFLAGS="-I/usr/include/gnutls" LIBGNUTLS_LIBS="-L/usr/lib -lgnutls" 
./configure --with-apxs=/usr/local/apache2/bin/apxs
make
make check

配置信息：

Configuration summary for mod_gnutls:

   * mod_gnutls version:        0.8.2
   * Apache Modules directory:  /usr/local/apache2/modules
   * GnuTLS Library version:
   * CFLAGS for GnuTLS:         -I/usr/include/gnutls
   * LDFLAGS for GnuTLS:        -L/usr/lib -lgnutls
   * SRP Authentication:        yes
   * MSVA Client Verification:  no
   * Build documentation:       no

make时报错：

gnutls_cache.c:55:24: fatal error: apr_escape.h: No such file or directory
 #include <apr_escape.h>
                        ^
compilation terminated.
make[1]: *** [mod_gnutls_la-gnutls_cache.lo] Error 1
make[1]: Leaving directory `/root/mod_gnutls-0.8.1/src'
make: *** [all-recursive] Error 1

参考：https://github.com/mikkolehtisalo/mod_gllog/issues/1
参考：https://issues.jboss.org/browse/MODCLUSTER-453?page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel&showAll=true&_sscc=t

先编译安装apr+apr-util：http://amon.org/apr

直接拷贝 /usr/local/apr/include/apr-1/apr_escape.h 到源码目录：

cp -R /usr/local/apr/include/apr-1/apr_escape.h /root/mod_gnutls/src/

问题解决！

make check时报错：

sed s/__HOSTNAME__/localhost/ < server.uid.in > server.uid
PEM2OPENPGP_EXPIRATION=86400 PEM2OPENPGP_USAGE_FLAGS=authenticate,certify,sign pem2openpgp "$(cat server.uid)" < server/secret.key > server/secret.pgp.raw
/bin/sh: pem2openpgp: command not found
make[3]: *** [server/secret.pgp.raw] Error 127
rm ocsp-responder/cert-request imposter/cert-request server/secret.pgp.raw client/cert-request server.uid server/cert-request rogueclient/cert-request
make[3]: Leaving directory `/root/mod_gnutls/test'
make[2]: *** [check-am] Error 2
make[2]: Leaving directory `/root/mod_gnutls/test'
make[1]: *** [check-recursive] Error 1
make[1]: Leaving directory `/root/mod_gnutls/test'
make: *** [check-recursive] Error 1

参考：https://lists.gt.net/gnupg/users/64409

yum install monkeysphere

问题解决！

虽然有部分测试没通过，先不管，继续 make install ：

make install

输出：

...
Libraries have been installed in:
   /usr/local/apache2/modules
...

编译安装完成。

重启Apache：

service httpd stop
service httpd start

查看phpinfo：

...
Apache Environment
Variable	Value
HTTPS 	on
SSL_VERSION_LIBRARY 	GnuTLS/3.5.8
SSL_VERSION_INTERFACE 	mod_gnutls/0.7.5
SSL_PROTOCOL 	TLS1.2 
...

重启Apache，报错：

httpd: Syntax error on line 36 of /usr/local/apache2/conf/httpd.conf: Cannot load modules/mod_gnutls.so into server: /usr/local/apache2/modules/mod_gnutls.so: undefined symbol: apr_escape_hex

可能原因：系统载入的apr版本和apache编译时使用的apr版本不一致，但尝试保持一致之后，问题依然不能解决。

/usr/local/apache2/bin/httpd -V

输出：

Server version: Apache/2.4.23 (Unix)
Server built:   Dec 20 2016 03:07:00
Server's Module Magic Number: 20120211:61
Server loaded:  APR 1.4.8, APR-UTIL 1.5.2
Compiled using: APR 1.4.8, APR-UTIL 1.5.2
Architecture:   64-bit
Server MPM:     worker
  threaded:     yes (fixed thread count)
    forked:     yes (variable process count)
Server compiled with....
 -D APR_HAS_SENDFILE
 -D APR_HAS_MMAP
 -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
 -D APR_USE_SYSVSEM_SERIALIZE
 -D APR_USE_PTHREAD_SERIALIZE
 -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
 -D APR_HAS_OTHER_CHILD
 -D AP_HAVE_RELIABLE_PIPED_LOGS
 -D DYNAMIC_MODULE_LIMIT=256
 -D HTTPD_ROOT="/usr/local/apache2"
 -D SUEXEC_BIN="/usr/local/apache2/bin/suexec"
 -D DEFAULT_PIDLOG="logs/httpd.pid"
 -D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
 -D DEFAULT_ERRORLOG="logs/error_log"
 -D AP_TYPES_CONFIG_FILE="conf/mime.types"
 -D SERVER_CONFIG_FILE="conf/httpd.conf"

通过源码包编译安装：

下载：https://mod.gnutls.org/downloads/

最高版本：mod_gnutls-0.8.2 （2017-01-08）编译过程出错，尚未克服。
实证版本：mod_gnutls-0.7.5 （2016-05-28）

wget https://mod.gnutls.org/downloads/mod_gnutls-0.7.5.tar.bz2 && tar -xjvf mod_gnutls-0.7.5.tar.bz2 && cd mod_gnutls-0.7.5
export LIBGNUTLS_CFLAGS="-I/usr/include/gnutls" LIBGNUTLS_LIBS="-L/usr/lib -lgnutls" 
./configure --with-apxs=/usr/local/apache2/bin/apxs
make && make install

参考资料：

参考：https://openrepos.net/content/inte/taskwarrior
参考：https://httpd.apache.org/docs/current/mod/mod_authn_dbm#authdbmuserfile
参考：https://www.linuxunbound.com/2011/07/using-gnutls-with-apache-httpd-2-2/
参考：https://qnalist.com/questions/6428858/users-httpd-dso-load-failed-when-using-mod-authn-dbm-for-berkeley-db
参考：https://www.experts-exchange.com/questions/21140440/mod-ssl-Cannot-open-SSLSessionCache-DBM-file
参考：https://qnalist.com/questions/986000/users-httpd-cannot-open-sslsessioncache-dbm-file
参考：http://addls.com/1%e4%b8%aaipn%e4%b8%aa%e5%9f%9f%e5%90%8dn%e4%b8%aa%e8%af%81%e4%b9%a6
参考：https://holmesian.org/linode-vps-centos-anyconnect
参考：https://ma.ttias.be/day-google-chrome-disables-http2-nearly-everyone-may-31st-2016/
参考：http://gnupg.10057.n7.nabble.com/GnuTLS-OpenSSL-support-for-TLS1-1-1-2-td26933
参考：https://www.linuxunbound.com/2011/07/using-gnutls-with-apache-httpd-2-2/
参考：https://sourceforge.net/p/mod-gnutls/mailman/mod-gnutls-support/
参考：http://www.outoforder.cc/projects/apache/mod_gnutls/docs/

查看当前版本：

gnutls-cli -v

卸载低版本：

如果有通过yum/rpm安装的gnutls，需要先卸载：

rpm -e --nodeps gnutls
rpm -e --nodeps gnutls-devel

通过源码包编译安装：

最新版本：GnuTLS 3.5.11 (2017-04-7)
实证通过：GnuTLS 3.5.11

官网：http://gnutls.org/
下载：http://gnutls.org/download.html

参考：http://gnutls.org/manual/gnutls.html
参考：http://linuxfromscratch.org/blfs/view/svn/postlfs/gnutls.html (GnuTLS-3.5.11)

安装nettle：http://amon.org/nettle
安装p11-kit：http://amon.org/p11-kit
安装libasn1：http://amon.org/libtasn1
安装libgmp：http://amon.org/gmplib

wget ftp://ftp.gnutls.org/gcrypt/gnutls/v3.5/gnutls-3.5.11.tar.xz && xz -d gnutls-3.5.11.tar.xz && tar -xvf gnutls-3.5.11.tar && cd gnutls-3.5.11
export NETTLE_CFLAGS="-I/usr/include/nettle" NETTLE_LIBS="-L/usr/lib64 -lnettle" HOGWEED_CFLAGS="-I/usr/include/nettle" HOGWEED_LIBS="-L/usr/lib64 -lhogweed" P11_KIT_CFLAGS="-I/usr/include/p11-kit-1/p11-kit" P11_KIT_LIBS="-L/usr/lib -lp11-kit" LIBTASN1_CFLAGS="-I/usr/include" LIBTASN1_LIBS="-L/usr/lib -ltasn1" GMP_CFLAGS="-I/usr/local/include" GMP_LIBS="-L/usr/local/lib -lgmp"
./configure --prefix=/usr --with-default-trust-store-file=/etc/ssl/ca-bundle.crt --enable-gtk-doc --enable-openssl-compatibility --enable-local-libopts --with-included-unistring

配置信息：

configure: summary of build options:

  version:              3.5.11 shared 44:2:14
  Host/Target system:   x86_64-pc-linux-gnu
  Build system:         x86_64-pc-linux-gnu
  Install prefix:       /usr
  Compiler:             gcc -std=gnu99
  Valgrind:             no
  CFlags:               -g -O2
  Library types:        Shared=yes, Static=no
  Local libopts:        yes
  Local libtasn1:       no
  Local unistring:      yes
  Use nettle-mini:      no
  Documentation:        yes (manpages: yes)

configure: External hardware support:

  /dev/crypto:          no
  Hardware accel:       x86-64
  Padlock accel:        yes
  Random gen. variant:  auto-detect
  PKCS#11 support:      yes
  TPM support:          yes

configure:
  TPM library:          /usr/lib64/libtspi.so.1

configure: Optional features:
(note that included applications might not compile properly
if features are disabled)

  SSL3.0 support:       yes
  SSL2.0 client hello:  yes
  DTLS-SRTP support:    yes
  ALPN support:         yes
  OCSP support:         yes
  Ses. ticket support:  yes
  OpenPGP support:      yes
  SRP support:          yes
  PSK support:          yes
  DHE support:          yes
  ECDHE support:        yes
  Anon auth support:    yes
  Heartbeat support:    yes
  IDNA support:         IDNA 2003 (libidn)
  Self checks:          no
  Non-SuiteB curves:    yes
  FIPS140 mode:         no

configure: Optional libraries:

  Guile wrappers:       yes
  C++ library:          yes
  DANE library:         yes
  OpenSSL compat:       yes

configure: System files:

  Trust store pkcs11:
  Trust store dir:
  Trust store file:     /etc/ssl/ca-bundle.crt
  Blacklist file:
  CRL file:
  Priority file:        /etc/gnutls/default-priorities
  DNSSEC root key file: /var/lib/unbound/root.key

然后make：

make

报错：

./../pkcs11_int.h:27:28: fatal error: p11-kit/pkcs11.h: No such file or directory
 #include <p11-kit/pkcs11.h>

没找到文件，那就复制过来：

cp -R /usr/include/p11-kit-1/p11-kit /root/gnutls-3.5.11/lib/p11-kit

重新 make 通过，继续 make install ：

make install

输出：

...
Libraries have been installed in:
   /usr/lib
...
Libraries have been installed in:
   /usr/lib/guile/2.0
...
make[1]: Leaving directory `/root/sni/gnutls-3.5.8'

更新系统动态连接库配置：

echo /usr/lib >> /etc/ld.so.conf && ldconfig

编译安装完成。

相关路径：

/usr/include/gnutls/gnutls.h
/usr/lib/libgnutls.so.30.8.1

注意：需要重新编译mod_gnutls才能在Apache中使新版本生效。

参考：http://amon.org/mod_gnutls

查看版本

查看版本（shell）：

gnutls-cli -v

输出：

gnutls-cli 3.5.11
Copyright (C) 2000-2017 Free Software Foundation, and others, all rights reserved.
This is free software. It is licensed for use, modification and
redistribution under the terms of the GNU General Public License,
version 3 or later <http://gnu.org/licenses/gpl.html>


Please send bug reports to:  <bugs@gnutls.org>

报错：p11_kit_uri_get_pin_value

../lib/.libs/libgnutls.so: undefined reference to `p11_kit_uri_get_pin_value'

You are compiling with a newer library than the one you are linking with.
Most likely you have both versions of the libraries available but your
flags to linker are not correct.

因为系统中存在2个版本的p11-kit，而并不支持高版本gnutls的低版本p11-kit被使用。所以，需要移除低版本，然后编译安装高版本p11-kit。

参考：http://amon.org/p11-kit

报错：sys_getrandom

在make时报错，探讨解决办法：http://amon.org/sys_getrandom ，暂无解决办法。

git方式编译安装：

实证未遂。

下载：https://gitlab.com/gnutls/gnutls

安装依赖包：

yum install git autoconf libtool automake autogen autogen-libopts-devel trousers-devel guile-devel libidn-devel gawk gperf git2cl libtasn1-tools unbound-devel help2man gtk-doc texinfo texlive valgrind libasan libasan-static libubsan nodejs softhsm datefudge lcov dieharder mbedtls-utils abi-compliance-checker libcmocka-devel socat

开始编译：

git clone https://gitlab.com/gnutls/gnutls.git && cd gnutls
git submodule update --init
autoreconf -i && automake && autoconf
export NETTLE_CFLAGS="-I/usr/include/nettle" NETTLE_LIBS="-L/usr/lib64 -lnettle" HOGWEED_CFLAGS="-I/usr/include/nettle" HOGWEED_LIBS="-L/usr/lib64 -lhogweed" P11_KIT_CFLAGS="-I/usr/include/p11-kit-1/p11-kit" P11_KIT_LIBS="-L/usr/lib -lp11-kit" LIBTASN1_CFLAGS="-I/usr/include" LIBTASN1_LIBS="-L/usr/lib -ltasn1" GMP_CFLAGS="-I/usr/local/include" GMP_LIBS="-L/usr/local/lib -lgmp"
./configure --prefix=/usr --with-default-trust-store-file=/etc/ssl/ca-bundle.crt --enable-gtk-doc --enable-openssl-compatibility --enable-local-libopts
make bootstrap
make
make check
make install

报错：asn1_der_decoding2

In file included from common.c:34:0:
./common.h: In function '_asn1_strict_der_decode':
./common.h:259:2: warning: implicit declaration of function 'asn1_der_decoding2' [-Wimplicit-function-declaration]

重新编译libtasn1。

参考：http://amon.org/libtasn1

报错：sha256_ctx

struct sha256_ctx' has no member named 'count'

参考：https://dev.openwrt.org/changeset/41263

重新编译nettle。

参考：http://amon.org/nettle

报错：pkcs11_int.h

./../pkcs11_int.h:27:28: fatal error: p11-kit/pkcs11.h: No such file or directory
 #include <p11-kit/pkcs11.h>

缺少还是没找到，那就复制过来：

cp -R /usr/include/p11-kit-1/p11-kit /root/gnutls/lib/p11-kit

事实证明这种方案可行。

参考：http://www.gnutls.org/manual/html_node/gnutls_002dcli-Invocation.html

参考资料：

参考：https://www.painso.com/ocserv-install-usage
参考：http://zkxtom365.blogspot.com/2015/02/centos-65ocservcisco-anyconnect

参考：http://blog.csdn.net/tanogut/article/details/7836545
参考：http://www.cnblogs.com/siikee/p/4272104
参考：http://lists.gnutls.org/pipermail/gnutls-help/2013-May/003136
参考：http://linux.debian.bugs.rc.narkive.com/9Z5rQcJT/bug-782078-info-received-additional-info-probably-caused-by-evolution-mapi
参考：https://github.com/rdp/ffmpeg-windows-build-helpers/issues/513573192551