[gnutls-help] Building GnuTLS with p11-kit

[Fabiano Sidler]

Hi folks!

I'm trying to build GnuTLS with p11-kit support. While building p11-kit
itself with the following commands

     PREFIX=/tmp
     P11KIT_VERSION=0.25.5
     GNUTLS_VERSION=3.7.11

     wget 
https://github.com/p11-glue/p11-kit/releases/download/${P11KIT_VERSION}/p11-kit-${P11KIT_VERSION}.tar.xz
     tar xf p11-kit-${P11KIT_VERSION}.tar.xz
     cd p11-kit-${P11KIT_VERSION}
     ./configure --prefix=${PREFIX}/gnutls --disable-trust-module 
--enable-debug=yes --without-bash-completion
     make -j$(nproc)
     make install
     cd ..

worked perfectly, building GnuTLS with

     wget 
https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/gnutls-${GNUTLS_VERSION}.tar.xz
     tar xf gnutls-${GNUTLS_VERSION}.tar.xz
     cd gnutls-${GNUTLS_VERSION}
     ./configure --prefix=${PREFIX}/gnutls --with-included-unistring

terribly fails at finding p11-kit with

     [...]
     checking for p11-kit-1 >= 0.23.1... no
     configure: error:
     ***
     *** p11-kit >= 0.23.1 was not found. To disable PKCS #11 support
     *** use --without-p11-kit, otherwise you may get p11-kit from
     *** https://p11-glue.freedesktop.org/p11-kit.html
     ***

When I use this configure line

   P11_KIT_CFLAGS=-I${PREFIX}/gnutls/include/p11-kit-1 
P11_KIT_LIBS=-L${PREFIX}/gnutls/lib:${PREFIX}/gnutls/lib/pkcs11 
./configure --prefix=${PREFIX}/gnutls --with-included-unistring

./configure passes without error but the subsequent make fails with

     ake[3]: *** [Makefile:2623: srptool] Error 1
     /usr/bin/ld: ../lib/.libs/libgnutls.so: undefined reference to 
`p11_kit_uri_get_pin_source'
     [...]
     /usr/bin/ld: ../lib/.libs/libgnutls.so: undefined reference to 
`p11_kit_uri_get_token_info'
     collect2: error: ld returned 1 exit status
     make[3]: *** [Makefile:2611: ocsptool] Error 1
     make[3]: Leaving directory '/home/user/Downloads/gnutls-3.7.11/src'
     make[2]: *** [Makefile:2446: all] Error 2
     make[2]: Leaving directory '/home/user/Downloads/gnutls-3.7.11/src'
     make[1]: *** [Makefile:2264: all-recursive] Error 1
     make[1]: Leaving directory '/home/user/Downloads/gnutls-3.7.11'
     make: *** [Makefile:2189: all] Error 2

How can I successfully build GnuTLS with p11-kit?
I'm on Ubuntu 24.04 if that matters...

Greetings,
Fabiano