Bug 119500

Summary: Openssl not detected - krb5 required and not found
Product: Red Hat Enterprise Linux 3 Reporter: Graham Leggett <minfrin>
Component: opensslAssignee: Nalin Dahyabhai <nalin>
Status: CLOSED NOTABUG QA Contact: Brian Brock <bbrock>
Severity: medium Docs Contact:
Priority: medium    
Version: 3.0CC: nhruby, richardl
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2004-10-15 16:05:56 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Graham Leggett 2004-03-30 22:45:34 UTC
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030922

Description of problem:
When cups v1.1.20 as supplied by www.cups.org is built under RHEL3,
openssl is not detected. config.log says this:

configure:8915: checking openssl/ssl.h usability
configure:8928: gcc -c -O2 -g -pipe -march=i386 -mcpu=i686  conftest.c >&5
In file included from /usr/include/openssl/ssl.h:179,
                 from configure:9011:
/usr/include/openssl/kssl.h:72:18: krb5.h: No such file or directory
In file included from /usr/include/openssl/ssl.h:179,
                 from configure:9011:
/usr/include/openssl/kssl.h:134: syntax error before "krb5_enctype"
/usr/include/openssl/kssl.h:136: syntax error before '*' token

The problem is that krb5.h, referenced from ssl.h, is not found. This
file lives here:

/usr/kerberos/include/krb5.h

The path /usr/kerberos/include is not included in the CFLAGS by cups
(why should cups care about /usr/kerberos/include?), and so ssl is
therefore not detected.

To fix this, the include of krb5.h should be made optional, or krb5.h
should be installed in /usr/include like everything else.


Version-Release number of selected component (if applicable):
openssl-0.9.7a-33.4

How reproducible:
Always

Steps to Reproduce:
xxx

Additional info:

Comment 1 Sam Fewster 2004-04-16 13:49:41 UTC
This also seems to happen on other compiles of progs that require ssl.

I normally use the following:

export CFLAGS=-I/usr/kerberos/include

Comment 2 nathan r. hruby 2004-05-25 12:42:31 UTC
METOO.  Building things with openssl gets broken.

Can we at least have the %configure or %makeinstall macro in rpmbuild
pass in the correct CFLAGS?

Comment 3 Richard Homolka 2004-10-15 15:54:37 UTC
Try adding:
-DOPENSSL_NO_KRB5
to CFLAGS

Comment 4 Tom "spot" Callaway 2004-10-15 16:05:56 UTC
I'm not sure this one is Red Hat's fault. It looks like a custom
package that you're building isn't using -I/usr/kerberos/include in
its CFLAGS, which, if you're building your own RPM, is easy enough to
add. Alternately, the cups rpm that Red Hat built, uses this routine
in its spec:

if pkg-config openssl ; then
  export CFLAGS=`pkg-config --cflags openssl`
  export CPPFLAGS=`pkg-config --cflags-only-I openssl`
  export LDFLAGS=`pkg-config --libs-only-L openssl`
fi

You could add this to the spec of any custom RPM that breaks.

Closing as NOTABUG.

Comment 5 nathan r. hruby 2004-10-15 16:17:17 UTC
Well, yeah, I know how to fix it :)  

Maybe this needs to be an rpm buglet instead.  What'd be nice if there
was an RPM macro that did the above constuct correctly for you instead
of having to repeat it for eevery package you build.

FWIW, the krb linked to openssl has been a buglet for a while. I jsut
forget about it a lot ;)